
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@jezweb/jezpress-cli
Advanced tools
CLI for managing JezPress WordPress plugins on the update server.
npm install -g @jezweb/jezpress-cli
Login with your Jezweb Google account:
jezpress login
This opens a browser for Google OAuth authentication. Only @jezweb.net and @jezweb.com.au email domains are permitted.
Your token is stored in ~/.jezpress-token and expires after 30 days.
jezpress login # Log in with Google account
jezpress logout # Remove stored token
jezpress whoami # Show current user and owned plugins
jezpress plugins list # List all plugins
jezpress plugins list --mine # List only your plugins
jezpress plugins get <slug> # Get plugin details
# List all versions with download stats
jezpress plugins versions <slug>
# View download statistics
jezpress plugins stats <slug>
# View changelog for all versions
jezpress plugins changelog <slug>
# View changelog for specific version
jezpress plugins changelog <slug> <version>
# Create a new plugin (you become the owner)
jezpress plugins create my-plugin --name "My Plugin"
jezpress plugins create my-plugin --name "My Plugin" -v 2.0.0 # with initial version
# Update plugin metadata
jezpress plugins update my-plugin --tested-wp 6.7
# Upload a new version (version auto-detected from plugin header)
jezpress plugins upload my-plugin ./dist/my-plugin.zip
# Upload with explicit version
jezpress plugins upload my-plugin ./dist/my-plugin.zip -v 1.2.0
# Upload and sync metadata (requires_php, requires_wp, tested_wp) from plugin headers
jezpress plugins upload my-plugin ./dist/my-plugin.zip --sync-metadata
# Validate plugin ZIP before uploading
jezpress plugins preflight my-plugin ./dist/my-plugin.zip
# Download a specific version
jezpress plugins download <slug> <version> --output ./download.zip
# Update changelog for a version
jezpress plugins changelog <slug> <version> --set "Bug fixes and improvements"
# Delete a version (requires --yes flag)
jezpress plugins delete-version <slug> <version> --yes
# Transfer ownership to another @jezweb user (requires --yes flag)
jezpress plugins transfer <slug> <new-owner@jezweb.net> --yes
# List all registered sites
jezpress sites list
jezpress sites list --sort status --table
# Site details and health
jezpress sites info <domain>
jezpress sites check <domain>
# View installed plugins on a site
jezpress sites plugins <domain>
# Clear site's update cache
jezpress sites clear-cache <domain>
# Trigger plugin updates
jezpress sites update <domain>
# Bulk operations
jezpress sites scan-all # Check all sites
jezpress sites update-all # Update all sites
# Export site content (pages, posts, menus, media)
jezpress sites export <domain>
# Export formats
jezpress sites export <domain> --format raw # Full WordPress JSON
jezpress sites export <domain> --format flare # Flare CMS components
jezpress sites export <domain> --format markdown # Human-readable summary
jezpress sites export <domain> --format widgets # AI context for rebuilding
# View site config (theme, Elementor globals)
jezpress sites config <domain>
# View site diagnostics
jezpress sites diagnostics <domain>
# Get AI knowledge bundle
jezpress sites ai <domain>
# Display full JezPress platform guide
jezpress docs
# Save guide to file
jezpress docs --save
# Generate CLAUDE.md with JezPress context
jezpress docs --claude
For Claude Code integration, use the remote MCP server instead:
# Add to all projects (user scope)
claude mcp add -s user --transport http jezpress https://mcp.jezpress.com/mcp
# Or add to current project only
claude mcp add --transport http jezpress https://mcp.jezpress.com/mcp
The remote MCP server provides the same functionality as the CLI (plugin management and site operations).
@jezweb.net and @jezweb.com.au emails allowedProprietary - Jezweb internal use only.
FAQs
CLI and MCP server for managing JezPress plugins on the update server
We found that @jezweb/jezpress-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.