Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Push the contents of a directory to a remote branch
.gitignore
(no need to commit the directory)dist
/build
directory to gh-pages
npm install push-dir
push-dir --dir=build --branch=gh-pages
Usage: push-dir {OPTIONS}
Required Options:
--dir
The name of the directory whose contents will be committed to branch
--branch
The name of the remote branch to push to
Advanced Options:
--remote
The name of the remote to push to (defaults to origin)
--cleanup
Whether to delete the local branch after creating
--local-branch-name
Force the name of the local branch that is pushed to the remote branch
--allow-unclean
Whether to attempt push even if git unclean
--overwrite-local
Whether to override a local branch of the same name, if exists
--force
Alias for both --allow-unclean and --overwrite-local
--verbose
Display stdout and stderr from internal commands
FAQs
Push a directory to a remote branch
The npm package push-dir receives a total of 1,502 weekly downloads. As such, push-dir popularity was classified as popular.
We found that push-dir demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.