
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@pubinfo/bumpp
Advanced tools
Forked from version-bump-prompt
, bumpp
bumpp
- so you can use npx bumpp
directly.preid
when available.--commit
--tag
--push
by default. (opt-out by --no-push
, etc.)-r
or --recursive
to bump all packages in the monorepo.--execute
to execute the command, or execute a function before committing.bump.config.ts
:// bump.config.ts
import { defineConfig } from '@pubinfo/bumpp'
export default defineConfig({
// ...options
field: 'version',
})
这是一个 fork antfu 的 bumpp ,因为我有一个比较小众的需求,在前期并不一定可以被合并,所以先 fork 进行单独发版本。
请不要使用这个包,除非你有类似的需求。
FAQs
Bump version, commit changes, tag, and push to Git
The npm package @pubinfo/bumpp receives a total of 3 weekly downloads. As such, @pubinfo/bumpp popularity was classified as not popular.
We found that @pubinfo/bumpp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.