
Research
Using Trusted Protocols Against You: Gmail as a C2 Mechanism
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
@teamleader/ui-utilities
Advanced tools
Pull the next-release
branch to make sure you have all the latest code on your local machine.
Make a new branch, starting from next-release
and give it the name of the next version you want to release (release/new.version.number
).
Bump the version in package.json
and commit with message Version bump
and push.
Update CHANGELOG.md
Replace [unreleased]
with the [new.version.number]
and add the release date next to it, like this
- yyyy-mm-dd`.
Clean up the unused titles.
Prepare for next release by adding the following content on top of the file:
## [unreleased]
### Added
### Changed
### Deprecated
### Removed
### Fixed
Commit with message Update changelog
and push.
Make a pull request
on Github where you add the changelog items
as the description and wait for approval.
Make a draft release
on Github and fill in the following fields:
new.version.number
@ target: next-release
new.version.number
changelog items
Once the pull request has the needed amount of approvals, merge it into the next-release
branch.
Publish
the earlier created draft release
on Github.
In your console
, pull the next-release
branch.
Publish
to npm
using the npm publish --access=public
command.
Merge
the next-release
branch into master
and push to Github
[0.2.2] - 2023-07-11
FAQs
Teamleader UI utilities
The npm package @teamleader/ui-utilities receives a total of 16 weekly downloads. As such, @teamleader/ui-utilities popularity was classified as not popular.
We found that @teamleader/ui-utilities demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 12 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
Product
We redesigned Socket's first logged-in page to display rich and insightful visualizations about your repositories protected against supply chain threats.
Product
Automatically fix and test dependency updates with socket fix—a new CLI tool that turns CVE alerts into safe, automated upgrades.