
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@sylphx/cli
Advanced tools
Sylphx Platform CLI — npm install channel for the Rust `sylphx` binary (same SSOT as crates.io sylphx-cli).
@sylphx/clinpm install channel for the Rust operator CLI (sylphx).
This package does not reimplement the CLI in TypeScript. It installs and
executes the same native binary published as sylphx-cli on crates.io
(ADR-3820 sole-wire dual-language product path).
| Channel | Command | Product |
|---|---|---|
| npm | npm install -g @sylphx/cli | Rust sylphx binary |
| crates.io | cargo install sylphx-cli | same Rust sylphx binary |
npm install -g @sylphx/cli
# equivalent:
cargo install sylphx-cli
Ships a vendored native binary under binaries/<os>-<arch>/ for supported hosts (linux-x64 first). Optional platform packages (@sylphx/cli-linux-x64,
@sylphx/cli-darwin-arm64, …). If the optional native package is missing for
your OS/arch, install falls back messaging to cargo install sylphx-cli.
Override path (advanced):
export SYLPHX_CLI_BINARY=/path/to/sylphx
Full agent-operable surface (no Console). See sylphx version-info --json
for the authoritative shippedCommands list including:
deploy, rollback, status, env list|set|rm, logs, resources, db, storage, tasks, backup, flags, previews cost, projects create, plus day-1 health/whoami/…
export SYLPHX_TOKEN=svc_...
export SYLPHX_API_URL=https://api.sylphx.com/v1 # optional
sylphx health --json
sylphx projects list --json
sylphx environments list prj_demo --json
@sylphx/cli version (this package) follows the npm channel.--version reports the Rust crate sylphx-cli version (see
package.json#sylphx.crateVersion).Wire SSOT: Protobuf under api/proto (sylphx.platform.v1). App library:
@sylphx/sdk (TypeScript) / sylphx-sdk (Rust).
cargo install sylphx-cliFAQs
Sylphx Platform CLI — npm install channel for the Rust `sylphx` binary (same SSOT as crates.io sylphx-cli).
The npm package @sylphx/cli receives a total of 29 weekly downloads. As such, @sylphx/cli popularity was classified as not popular.
We found that @sylphx/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.