
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@evoo/plugin-exec
Advanced tools
The Executor plugin for the Evoo CLI allows you to run shell commands as part of your automated workflows. It provides a simple and secure way to execute commands, with built-in user confirmation to prevent unintended side effects.
The Executor plugin for the Evoo CLI allows you to run shell commands as part of your automated workflows. It provides a simple and secure way to execute commands, with built-in user confirmation to prevent unintended side effects.
evoo.json configuration.To use the Executor plugin, you will need to add an exec job to your evoo.json configuration file.
exec Job| Property | Type | Required | Description |
|---|---|---|---|
type | "exec" | ✔️ | Specifies the job type. |
command | string | ✔️ | The shell command to be executed. |
startMessage | string | A message to display when the command starts. | |
successMessage | string | A message to display when the command completes successfully. |
{
"plugins": ["exec"],
"jobs": [
{
"type": "exec",
"command": "npm install",
"startMessage": "Installing dependencies...",
"successMessage": "Dependencies installed successfully!"
}
]
}
When you run the Evoo CLI with this configuration, the Executor plugin will first ask for your confirmation. If you approve, it will execute the npm install command and display the custom messages at the start and end of the process.
For security reasons, the Executor plugin will always prompt for user confirmation before executing any command. This is to ensure that you are aware of the commands being run and to prevent malicious or unintended actions.
FAQs
The Executor plugin for the Evoo CLI allows you to run shell commands as part of your automated workflows. It provides a simple and secure way to execute commands, with built-in user confirmation to prevent unintended side effects.
We found that @evoo/plugin-exec demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.