
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@cord-sdk/cli
Advanced tools
A CLI tool to make it easy to interact with our REST API for manual exploration or automated changes.
npm i -g @cord-sdk/cli
Run
cord init
This command will ask you for some credentials and add them to a .cord file within your home directory. To run any command (other than cord project) you will need the CORD_PROJECT_ID and CORD_PROJECT_SECRET of the project you would like to query within. These values can be found in the console under your chosen project's entry.
The CORD_CUSTOMER_ID and CORD_CUSTOMER_SECRET are only needed if you need app management commands, which you probably don't. If you do, they can be found in the console, under View application management credentials.
If you already have a .cord file and would like to re-configure your variables, running cord init will default to the existing values.
Try out:
cord --help
to see what you can do!
Now that you have everything set up, you're good to go! Every REST endpoint has a corresponding command in the CLI tool.
You can run --help on any command to see what arguments it takes.
If you prefer to use cURL syntax but would like to benefit from our automatic authentication, then you can use cord curl project -- <request> for project management commands, and cord curl -- <request> for all others.
To see more information on how to interact with an endpoint, see our docs which contains detailed descriptions of every argument and return value.
FAQs
CLI tool for Cord
The npm package @cord-sdk/cli receives a total of 1 weekly downloads. As such, @cord-sdk/cli popularity was classified as not popular.
We found that @cord-sdk/cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 13 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.