
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
chrome-webstore-upload-cli
Advanced tools
CLI tool to upload Chrome Extensions to the Chrome Web Store
Upload/Publish Chrome Web Store extensions from the CLI
A CLI wrapper around the Web Store Upload module.
npm install chrome-webstore-upload-cli
You will need a Google API clientId
, clientSecret
, and a refreshToken
. Read the guide.
You can also automatically upload your extension on:
$ chrome-webstore-upload --help
CLI Utility to quickly upload + publish extensions to the Chrome Web Store
Usage
$ chrome-webstore-upload <command>
where <command> is one of
upload, publish
Options
--source Path to either a zip file, or a directory to be zipped (Defaults to cwd if not specified)
--extension-id The ID of the Chrome Extension (environment variable EXTENSION_ID)
--client-id OAuth2 Client ID (environment variable CLIENT_ID)
--client-secret OAuth2 Client Secret (environment variable CLIENT_SECRET)
--refresh-token OAuth2 Refresh Token (environment variable REFRESH_TOKEN)
--auto-publish Can be used with the "upload" command
--trusted-testers Can be used with the "publish" command
Examples
Upload new extension archive to the Chrome Web Store
$ chrome-webstore-upload upload --source extension.zip --extension-id $EXTENSION_ID --client-id $CLIENT_ID --client-secret $CLIENT_SECRET --refresh-token $REFRESH_TOKEN
Publish extension (with CLIENT_ID, CLIENT_SECRET, and REFRESH_TOKEN set as env variables)
$ chrome-webstore-upload publish --extension-id elomekmlfonmdhmpmdfldcjgdoacjcba
The following projects use this package to facilitate auto-deployment of extensions
FAQs
CLI tool to upload Chrome Extensions to the Chrome Web Store
The npm package chrome-webstore-upload-cli receives a total of 0 weekly downloads. As such, chrome-webstore-upload-cli popularity was classified as not popular.
We found that chrome-webstore-upload-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.