
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Accenture Salesforce Marketing Cloud DevTools (mcdev) is a rapid deployment/rollout, backup and development tool for Salesforce Marketing Cloud. It allows you to retrieve and deploy configuration and code across Business Units and instances.
Run the following to install Accenture SFMC DevTools on your computer:
npm install -g mcdev
We also provide a VSCode extension that integrates SFMC DevTools into your IDE. You can install it from the VSCode Marketplace.
First, install it as dependency:
npm install mcdev --save
You can then include it in your code with JavaScript/ES module imports:
import mcdev from 'mcdev';
That will load node_packages/mcdev/lib/index.js. It can make sense to directly include other files if you have a special scenario. We've done that in our example for retrieveChangelog.js or in more detail, in our child-project sfmc-devtools-copado to get full control over certain aspects.
Please checkout the GitHub wiki for the full documentation.
Find info on the latest releases with a detailed changelog in the GitHub Releases tab.
If you want to enhance Accenture SFMC DevTools you are welcome to fork the repo and create a pull request. Please understand that we will have to conduct a code review before accepting your changes.
More details on how to best do that are described in our wiki.
The people that lead this project:
![]() Jörn Berkefeld GitHub profile |
![]() Doug Midgley GitHub profile |
Copyright (c) 2020-2025 Accenture. MIT licensed.
FAQs
Accenture Salesforce Marketing Cloud DevTools
The npm package mcdev receives a total of 521 weekly downloads. As such, mcdev popularity was classified as not popular.
We found that mcdev demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.