
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
flywaymigrationconstruct
Advanced tools
Flyway is an opensource tool to easily evolve your db : https://flywaydb.org/
This AWS CDK construct allows you to scale your db schema with a lambda function.
The lambda function code is upload on S3 bucket "flywaymigrationconstruct". The construct retrieves the code on it according to the version of the construct.
You must pass arguments, most of which are optional and are parameters of your lambda function except two of them, which are environment variables.
warning: vpc, subnet and securitygroups are optional, but if one of them is provided, others must be too.
Migration DB SecretManager is the Secret of the DB you want to manage with Flyway. It has to have 6 arguments :
username : the username of your DB
password : the password of your DB
engine : the type of your db (Redshift, Aurora MySQL, ...)
host: the host of your DB
port: the port of your DB
dbname: the name of your DB
Bucket Migration SQL is the S3 Bucket where you will put your SQL files (warning : you have to comply with the naming pattern of Flyway).
PyPI: https://pypi.org/project/flywaymigrationconstruct/
npmjs: https://www.npmjs.com/package/flywaymigrationconstruct
Flyway Migration Construct manages the lambda function permissions for the secret and the bucket.
Warning : Version 0.3.0 only allows DB on Amazon Redshift, MySQL, PostgreSQL and SAP HANA.
FAQs
flywaymigrationconstruct
We found that flywaymigrationconstruct demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.