
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
Command line interface for working with Aha!.
Currently supported commands are for creating and managing extensions.
$ npm install -g aha-cli
$ aha auth:login
Authentication to Aha!...
$ aha extension:create
Create a new extension...
$ aha extension:install
Install the extension into your Aha! account...
aha auth:checkaha auth:loginaha extension:add-contributionaha extension:buildaha extension:createaha extension:installaha extension:tailaha extension:uninstallaha extension:watchaha help [COMMANDS]aha auth:checkCheck if the stored credentials work
USAGE
$ aha auth:check [-s <value>]
FLAGS
-s, --subdomain=<value> Aha! subdomain to use for authentication
DESCRIPTION
Check if the stored credentials work
See code: src/commands/auth/check.ts
aha auth:loginLogin to Aha! and save credentials for other commands
USAGE
$ aha auth:login [-s <value>] [--authServer <value>] [--browser <value>]
FLAGS
-s, --subdomain=<value> Aha! subdomain to use for authentication
--authServer=<value> [default: https://secure.aha.io] server to use for authentication
--browser=<value> browser to use for login, e.g. 'safari' or 'firefox'
DESCRIPTION
Login to Aha! and save credentials for other commands
Credentials are saved in ~/.netrc
See code: src/commands/auth/login.ts
aha extension:add-contributionAdd a contribution to an extension
USAGE
$ aha extension:add-contribution [-s <value>]
FLAGS
-s, --subdomain=<value> Aha! subdomain to use for authentication
DESCRIPTION
Add a contribution to an extension
See code: src/commands/extension/add-contribution.ts
aha extension:buildBuild an extension into a zip file for ease of distribution
USAGE
$ aha extension:build [-s <value>] [--noCache]
FLAGS
-s, --subdomain=<value> Aha! subdomain to use for authentication
--noCache skip cached http imports
DESCRIPTION
Build an extension into a zip file for ease of distribution
See code: src/commands/extension/build.ts
aha extension:createCreate an example extension
USAGE
$ aha extension:create [-s <value>]
FLAGS
-s, --subdomain=<value> Aha! subdomain to use for authentication
DESCRIPTION
Create an example extension
See code: src/commands/extension/create.ts
aha extension:installInstall the extension from the current directory
USAGE
$ aha extension:install [-s <value>] [--dumpCode] [--noCache]
FLAGS
-s, --subdomain=<value> Aha! subdomain to use for authentication
--dumpCode dump all code as it is uploaded
--noCache skip cached http imports
DESCRIPTION
Install the extension from the current directory
See code: src/commands/extension/install.ts
aha extension:tailLive tail extension logs
USAGE
$ aha extension:tail [-s <value>]
FLAGS
-s, --subdomain=<value> Aha! subdomain to use for authentication
DESCRIPTION
Live tail extension logs
See code: src/commands/extension/tail.ts
aha extension:uninstallUninstall the extension in the current directory
USAGE
$ aha extension:uninstall [-s <value>]
FLAGS
-s, --subdomain=<value> Aha! subdomain to use for authentication
DESCRIPTION
Uninstall the extension in the current directory
See code: src/commands/extension/uninstall.ts
aha extension:watchWatch the current directory for changes and install the extension each time a file changes
USAGE
$ aha extension:watch [-s <value>] [--noCache]
FLAGS
-s, --subdomain=<value> Aha! subdomain to use for authentication
--noCache skip cached http imports
DESCRIPTION
Watch the current directory for changes and install the extension each time a file changes
See code: src/commands/extension/watch.ts
aha help [COMMANDS]Display help for aha.
USAGE
$ aha help [COMMANDS] [-n]
ARGUMENTS
COMMANDS Command to show help for.
FLAGS
-n, --nested-commands Include all nested commands in the output.
DESCRIPTION
Display help for aha.
See code: @oclif/plugin-help
FAQs
Command line interface for Aha! (www.aha.io)
The npm package aha-cli receives a total of 260 weekly downloads. As such, aha-cli popularity was classified as not popular.
We found that aha-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.