
Research
/Security News
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
@shahriyar13/fake-git-history-fa
Advanced tools
A command-line tool to generate your GitHub activity graph.
A command-line tool that generates GitHub or GitLab activity graph to make it look like you have been coding regularly.
npx fake-git-history-fa
This command creates a my-history folder, initializes git, and generates commits for every day within the last year (0-3 commits per day).my-history in your GitHub or GitLab, and push the changes:
and push the changes:
cd my-history
git remote add origin git@github.com:<USERNAME>/my-history.git
git push -u origin master
Done! Now take a look at your GitHub profile 😉
If you rely on this tool and find it useful, please consider supporting it. Maintaining an open source project takes time and a cup of coffee would be greatly appreciated!
--commitsPerDaySpecify the number of commits to be created for each day.
The default value is 0,3, which means it will randomly generate from 0 to 3 commits per day. For example, to generate commits randomly between 0 and 5 per day, you can do:
npx fake-git-history-fa --commitsPerDay "0,5"
--workdaysOnlyUse this option if you don't want to commit on weekends. Example:
npx fake-git-history-fa --workdaysOnly
--startDate and --endDateBy default, the script generates GitHub commits for every day within the last year. However, if you want to generate activity for specific dates, use these options:
npx fake-git-history-fa --startDate "2020/09/01" --endDate "2020/09/30"
This tool was created as a joke, so please don't take it seriously. While cheating is never encouraged, if someone is judging your professional skills based on your GitHub activity graph, they deserve to see a rich activity graph 🤓
FAQs
A command-line tool to generate your GitHub activity graph.
We found that @shahriyar13/fake-git-history-fa demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.

Research
/Security News
Docker and Socket have uncovered malicious Checkmarx KICS images and suspicious code extension releases in a broader supply chain compromise.

Product
Stay on top of alert changes with filtered subscriptions, batched summaries, and notification routing built for triage.