Security News
upm Launches as a Fast, Tiny Package Manager Written in TypeScript
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.
By Sarah Gooding - Sep 29, 2026
New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
donutpromotion
Artifacts are distributable versions of a package. It typically includes the source code and metadata
Advanced tools
Malware was recently detected in this package.
Affected versions:
donutpromotion
Rank and promotion helpers for Minecraft SMP donation scripts. Generate promo codes, build LuckPerms rank-up commands, and manage donation tiers from Python or the command line.
Install
pip install donutpromotion
CLI
donutpromotion tiers
donutpromotion code smp1 Steve diamond
donutpromotion promote Steve gold
Library
from donutpromotion import tiers, generate_promo_code, promote_command
generate_promo_code("smp1", "Steve", "diamond") # -> DNT-DI-XXXXXXXXXX
promote_command("Steve", "gold") # -> lp user Steve parent set gold
License
MIT
FAQs
Rank and promotion helpers for Minecraft SMP donation scripts
The pypi package donutpromotion receives a total of 72 weekly downloads. As such, donutpromotion popularity was classified as not popular.
We found that donutpromotion demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Related posts
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
By Sarah Gooding - Sep 25, 2026
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
By Karlo Zanki - Sep 24, 2026