
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
@orderly.network/npm-release
Advanced tools
CLI for releasing npm packages using [release-it](https://github.com/release-it/release-it), with support for environment-based registry/token config, Git auth, pre-release tags, and Slack notifications.
CLI for releasing npm packages using release-it, with support for environment-based registry/token config, Git auth, pre-release tags, and Slack notifications.
From your project root:
npx @orderly.network/npm-release
Or add as a devDependency and run via scripts:
pnpm add -D @orderly.network/npm-release
{
"scripts": {
"release": "orderly-npm-release"
}
}
| Variable | Description |
|---|---|
NPM_REGISTRY | npm registry URL (default: https://registry.npmjs.org) |
NPM_TOKEN | Auth token for publishing; written to .npmrc when set |
GIT_TOKEN | Git personal access token for push (e.g. GitLab) |
GIT_USERNAME | Git username (used with token for authenticated remote URL) |
GIT_NAME | Git user.name for commits |
GIT_EMAIL | Git user.email for commits |
RELEASE_VERSION_TYPE | Bump type: patch, minor, or major |
PRERELEASE_TAG | Pre-release identifier (e.g. alpha, beta); enables --preRelease and --npm.tag |
SLACK_WEBHOOK_URL | Webhook URL for success/failure Slack notifications |
FAQs
CLI for releasing npm packages using [release-it](https://github.com/release-it/release-it), with support for environment-based registry/token config, Git auth, pre-release tags, optional internal registry publishing, and Slack notifications.
The npm package @orderly.network/npm-release receives a total of 8 weekly downloads. As such, @orderly.network/npm-release popularity was classified as not popular.
We found that @orderly.network/npm-release demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.