Skip to content

fix: sanitize .yarnrc.yml in publish-preview to prevent token exfiltration #227

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
cryptodev-2s merged 2 commits into from
Mar 17, 2026

fix: also strip npmPublishRegistry from .yarnrc.yml

e8126ac
Select commit
Loading
Failed to load commit list.
Merged

fix: sanitize .yarnrc.yml in publish-preview to prevent token exfiltration #227

fix: also strip npmPublishRegistry from .yarnrc.yml
e8126ac
Select commit
Loading
Failed to load commit list.
Socket Security / Socket Security: Project Report succeeded Mar 17, 2026 in 9s

Project Report: Success

Report Status Message
Project report ✅ View full report

Click through to the see the full socket security project report page for this commit to see information about every dependency in this project.

View more details on Socket Security