
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
Coinbase Wallet CLI for payments and crypto.
npx awal status
Or install globally:
npm install -g awal
awal status
# Check status (will install server on first run)
awal status
# Sign in with email
awal auth login your@email.com
awal auth verify <flow-id> <6-digit-code>
# Check your balance
awal balance
# Get your wallet address
awal address
# Send USDC
awal send $1.00 0x...recipient...
# Swap tokens
awal trade $1 usdc eth
awal status - Check server and auth statusawal balance - Get wallet balances (USDC, ETH, WETH)awal address - Get wallet addressawal show - Open wallet UIawal auth login <email> - Start email OTP sign-inawal auth verify <flowId> <code> - Complete sign-in with 6-digit codeawal send <amount> <recipient> - Send USDC to address or ENSawal trade <amount> <from> <to> - Swap tokensawal bazaar list - List X402 payment servicesawal bazaar details <url> - Get service detailsawal pay <baseURL> <path> - Make X402 payment requestawal discover <baseURL> <path> - Discover payment requirementsMost commands support:
--json - Output as JSON--chain <chain> - Specify blockchain (default: base)The CLI communicates with an Electron-based wallet server via file-based IPC. On first run, the server bundle and Electron runtime are installed to ~/.local/share/awal/.
Apache-2.0
FAQs
Coinbase Wallet CLI for payments and crypto
The npm package awal receives a total of 240 weekly downloads. As such, awal popularity was classified as not popular.
We found that awal demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.