
Research
/Security News
DuckDB npm Account Compromised in Continuing Supply Chain Attack
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Store mysql connection credentials in a simple, secure configuration file. Many destinations can then be used with the db_key you specify. You can also run script files against the names you select. The mysql prompt is set for safety.
Install:
gem install mysqlconn
Create ~/.db_connection_alias.yml
config:
default_arg: # any desired default arguments
# mysql: -A
mysqldump: --quick --single-transaction
db_key:
host: hostname
port: port # Optional
user: username # Optional
password: password # Optional
# password: '' # Optional, prompt for password
database: database # Optional
db_key2:
...
Protect configuration file:
chmod 600 ~/.db_connection_alias.yml
Connect:
mysqlconn db_key [additional options]
Look at that beautiful prompt:
mysqluser@db_key [database]> select now();
+---------------------+
| now() |
+---------------------+
| 2014-04-15 11:09:33 |
+---------------------+
1 row in set (0.02 sec)
mysqluser@db_key [database]>
Pipe:
mysqlconn db_key < script.sql > output
etc..
To mysqldump:
mysqldumpconn db_key [additional options]
Verbose:
Add -v
BEFORE the db_key to print out the final executed command to STDERR. BEWARE: It will print plain password.
Add to bash.completion.d or wherever:
_mysqlconn() {
local cur=${COMP_WORDS[COMP_CWORD]}
COMPREPLY=( $( compgen -W "$(mysqlconn -l)" -- $cur ) )
}
complete -F _mysqlconn mysqlconn
complete -F _mysqlconn mysqldumpconn
Apache 2.0 - go nuts
FAQs
Unknown package
We found that mysqlconn demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.