
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
@astroanywhere/cli
Advanced tools
Command-line interface for the Astro platform.
Website
·
Dashboard
·
Get Started
Manage Astro projects, plans, tasks, and environments from the terminal.
npm install -g @astroanywhere/cli
# Configure server connection
astro-cli config set server-url http://localhost:3001
# Authenticate (for remote servers)
astro-cli login
# List projects
astro-cli project list
# View plan as a tree
astro-cli plan tree --project-id <id>
# Dispatch a task
astro-cli task dispatch <nodeId> --project-id <id>
# Watch task output in real time
astro-cli task watch <executionId>
| Command | Description |
|---|---|
project list|show|create|update|delete|stats | Manage projects |
plan tree|list|show|create-node|update-node|delete-node|stats|export | Manage plan graphs |
task list|show|dispatch|cancel|steer|watch|update-status | Manage tasks |
env list|show|remove|set-default|status|providers|clusters | Manage environments and machines |
search <query> | Search across projects, tasks, executions |
activity list|watch | View activity feed |
trace show|observations|summary|stats | View execution traces |
config show|set|get | Manage CLI configuration |
login|logout|whoami | Authentication |
completion | Generate shell completions (bash, zsh, fish) |
All commands support --json for machine-readable output.
Config is stored at ~/.astro/config.json (permissions 0600).
| Setting | Env var | Description |
|---|---|---|
serverUrl | ASTRO_SERVER_URL | Astro server URL |
authToken | — | Access token (set via login) |
defaultMachineId | — | Default machine for dispatch |
Resolution order: CLI flag --server-url > env var > config file > default.
import { AstroClient } from '@astroanywhere/cli/client'
const client = new AstroClient({ serverUrl: 'http://localhost:3001' })
const projects = await client.listProjects()
BSL-1.1 — converts to Apache 2.0 on 2030-02-25.
FAQs
CLI for managing Astro projects, plans, tasks, and environments
The npm package @astroanywhere/cli receives a total of 84 weekly downloads. As such, @astroanywhere/cli popularity was classified as not popular.
We found that @astroanywhere/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.