
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
⚡ A sleek one-command Git automation CLI that commits, pushes, and manages repos effortlessly — built for developers who value speed and style.
Because you deserve one-command perfection.
Simplify your git workflow — commit, push, and sync your code with a single command.
ERIX is a smart, elegant Git automation CLI built to remove friction from your daily workflow.
No more typing git add ., git commit, and git push in sequence. ERIX does it all — from repo linking to smooth commits — in one swing.
It’s built for speed, simplicity, and sanity.
✅ Auto-detects Git repositories
✅ Initializes one if missing
✅ Auto-commits and pushes with style
✅ Handles rebases & conflicts gracefully
✅ Interactive prompts (via inquirer)
✅ Optional force-push (--f)
✅ Beautiful CLI with colors, emojis, and spinners
✅ Works globally or via NPX
npm install -g erix
Then run from anywhere:
```bash
erix git
```
or pass arguments:
```bash
erix git --r https://github.com/yourname/project.git --m "Initial setup"
```
🧠 Example:
```bash
erix git --r https://github.com/ecodrix/erix-cli-demo.git --m "Deploy update"
```
---
### 🔹 Option 2 — Temporary Use (No Install)
```bash
npx erix git
```
Or inline:
```bash
npx erix git --r https://github.com/yourname/project.git --m "Quick push" --f
```
---
## 🧠 Available Flags
| Flag | Description | Example |
| ----- | -------------- | -------------------------------------- |
| `--r` | Repository URL | `--r https://github.com/user/repo.git` |
| `--m` | Commit message | `--m "Updated navbar and styles"` |
| `--f` | Force push | `--f` |
If no repo URL is provided, ERIX will ask interactively.
---
## 💬 Example Workflow
```bash
# In any project folder
erix git
```
🧩 ERIX will:
1. Detect the current branch
2. Add and commit all changes
3. Set the remote if needed
4. Push automatically
5. Handle conflicts with grace
Output sample:
🚀 ERIX GIT AUTOMATOR v2
─────────────────────────────
✔ 🌐 Enter your repository URL:
https://github.com/yourname/project.git
✅ Code pushed successfully!
💫 Summary
─────────────────────────────
📦 Repo: https://github.com/yourname/project.git
🌿 Branch: main
📝 Commit: Auto commit from ERIX 🚀
⏰ Time: 10/30/2025, 5:02:05 AM
─────────────────────────────
✨ ERIX — Because you deserve one-command perfection.
If you hit conflicts or permission issues, ERIX will guide you to run:
git pull origin main --rebase
git push origin main --force
Or follow its intelligent on-screen suggestions.
git clone https://github.com/yourname/erix-git-cli-automate.git
cd erix
npm install
npm link # Register globally for dev testing
Then test with:
erix git
or:
npx ./bin/erix.js git
npm version patch
npm publish
Once published, anyone can run:
npx erix git
Dhanesh Building SaaS tools, automation systems, and developer-friendly workflows. ✨ “Because one command should do it all.”
MIT License © 2025 ECOD Use freely, automate boldly.
💭 Next step:
Want me to make a README_HEADER.svg banner (a visual header image with your logo, name, and tagline — like “ERIX ⚡ Git Automator CLI — One Command. Infinite Power.”)?
That’ll make your GitHub page look premium and visually branded.
FAQs
⚡ A sleek one-command Git automation CLI that commits, pushes, and manages repos effortlessly — built for developers who value speed and style.
We found that erix demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.