Research
wget to Wipeout: Malicious Go Modules Fetch Destructive Payload
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
By Kush Pandya - May 01, 2025
📅 You're Invited: Meet the Socket team at RSAC (April 28 – May 1).RSVP →
bulk-update-versions
Advanced tools
Bulk update versions
Script to bulk update versions matching a certain pattern.
Install
$ npm install --save bulk-update-versions
Usage
Certain dependencies are usually released and updated in bulk as they follow a single Lerna version bump. Updating those packages can get quite verbose, as you need to check which packages have been released, find the right version, and update them.
To make this process simpler, you can use this package to bump all versions of dependencies matching the given pattern. The script will make sure that the versions of the packages matching the given pattern do exist, and bump the version only then.
$ bulk-update-versions --match '^@babel/(.*)' 7.9.2
Force updating to latest version
If you want to update all the matching packages to their latest version, you can pass the --force-latest flag instead of a fixed version.
$ bulk-update-versions --match '^@babel/(.*)' --force-latest
Keywords
FAQs
Script to bulk update versions matching a certain pattern
The npm package bulk-update-versions receives a total of 91 weekly downloads. As such, bulk-update-versions popularity was classified as not popular.
We found that bulk-update-versions demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Package last updated on 28 Dec 2020
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Research
Using Trusted Protocols Against You: Gmail as a C2 Mechanism
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
By Olivia Brown - Apr 30, 2025
Product
A New Overview in our Dashboard
We redesigned Socket's first logged-in page to display rich and insightful visualizations about your repositories protected against supply chain threats.
By André Staltz - Apr 29, 2025