
Security News
OpenClaw Skill Marketplace Emerges as Active Malware Vector
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.
Command line tool to execute Zuora Object Query Language. Currently very rough and simple, but it works.
$ npm install -g zoql
$ zoql --help
Usage: zoql [options] <query>
Executes a ZOQL query
Options:
-V, --version output the version number
--quiet do not show info messages or progress indicator
--limit [n] limit number of response records (default: Infinity)
--count returns record count
--describe [object] describes an object's fields and related objects
--url [url] Zuora REST URL (default: https://rest.zuora.com/)
--username [user] Zuora username
--password [pass] Zuora password
-h, --help output usage information
Some command line options can be provided as environment variables. When both the environment variable and the command line option are given, the command line option takes precedence.
ZUORA_URL - Zuora REST URL (--url)ZUORA_USERNAME - Zuora username (--username)ZUORA_PASSWORD - Zuora password (--password)# Return ids from all accounts
$ zoql "select Id from Account"
# Return id and timestamps of all rate plan charges updated after a given date
$ zoql "select Id, UpdatedDate from RatePlanCharge where UpdatedDate >= '2018-05-11T10:40:14-07:00'"
# Return a list of fields and related objects for Subscription
$ zoql --describe Subscription
FAQs
Zuora Query Language command line client
The npm package zoql receives a total of 2 weekly downloads. As such, zoql popularity was classified as not popular.
We found that zoql demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.