🚨 Shai-Hulud Strikes Again:834 Packages Compromised.Technical Analysis
Socket
Book a DemoInstallSign in
Socket

@postman/pm-bin-linux-arm64

Package Overview
Dependencies
Maintainers
422
Versions
2
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@postman/pm-bin-linux-arm64

OIDC trusted publishing setup package for @postman/pm-bin-linux-arm64

latest
npmnpm
Version
0.0.1
Version published
Weekly downloads
0
Maintainers
422
Weekly downloads
 
Created
Source

@postman/pm-bin-linux-arm64

⚠️ IMPORTANT NOTICE ⚠️

This package is created solely for the purpose of setting up OIDC (OpenID Connect) trusted publishing with npm.

This is NOT a functional package and contains NO code or functionality beyond the OIDC setup configuration.

Purpose

This package exists to:

  • Configure OIDC trusted publishing for the package name @postman/pm-bin-linux-arm64
  • Enable secure, token-less publishing from CI/CD workflows
  • Establish provenance for packages published under this name

What is OIDC Trusted Publishing?

OIDC trusted publishing allows package maintainers to publish packages directly from their CI/CD workflows without needing to manage npm access tokens. Instead, it uses OpenID Connect to establish trust between the CI/CD provider (like GitHub Actions) and npm.

Setup Instructions

To properly configure OIDC trusted publishing for this package:

  • Go to npmjs.com and navigate to your package settings
  • Configure the trusted publisher (e.g., GitHub Actions)
  • Specify the repository and workflow that should be allowed to publish
  • Use the configured workflow to publish your actual package

DO NOT USE THIS PACKAGE

This package is a placeholder for OIDC configuration only. It:

  • Contains no executable code
  • Provides no functionality
  • Should not be installed as a dependency
  • Exists only for administrative purposes

More Information

For more details about npm's trusted publishing feature, see:

Maintained for OIDC setup purposes only

Keywords

oidc

FAQs

Package last updated on 10 Dec 2025

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts