
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
github-publisher
Advanced tools
Github-publisher is a simple library that allows you to push to GitHub with just one command. With the latest version of Github-publisher, it also handles the generation of a CHANGELOG file for your repository.
To install Github-publisher, use the following command:
npm install -g github-publisher
To create a new repository on GitHub and push your code to it, use the following command:
github-publisher https://github.com/<username>/<reponame>.git
You can also use the shorter alias gp
:
gp https://github.com/<username>/<reponame>.git
If you already have a repository and want to push a commit to it, use the following command:
github-publisher <commit>
Again, you can use the shorter alias gp
:
gp <commit>
Github-publisher allows you to include your commit in specific sections of the CHANGELOG file. Use the following flags to indicate the type of commit:
--bugfix
or -B
: Add the commit under the "Fixed Bugs" section in the CHANGELOG.--feature
or -F
: Add the commit under the "Implemented Enhancements" section in the CHANGELOG.If you don't provide any flags, the commit will be pushed to GitHub without modifying the CHANGELOG.
Here's an example of using Github-publisher to create a new repository and push code to it:
gp https://github.com/<username>/<reponame>.git
Here's an example of using Github-publisher to publish new feature:
gp Added the ability to generate changelog -F
Contributions are welcome! If you find any issues or have suggestions for improvements, please open an issue or submit a pull request on the Github-publisher repository.
Github-publisher is released under the MIT License.
FAQs
publish to github repo with 1 line
The npm package github-publisher receives a total of 0 weekly downloads. As such, github-publisher popularity was classified as not popular.
We found that github-publisher demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.