
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
porkbun-cli
Advanced tools
CLI for Porkbun — manage domains, DNS, SSL and more from the terminal.
JSON output by default, ideal for AI agents and automation.
--formatnpm install -g porkbun-cli
git clone https://github.com/yabbal/porkbun.git
cd porkbun
pnpm install
pnpm build
pnpm link --global
Verify the installation:
porkbun --help
Get your API keys from porkbun.com/account/api.
Set them as environment variables:
export PORKBUN_API_KEY=pk1_xxxxx
export PORKBUN_API_SECRET=sk1_xxxxx
Or create a .env file in the working directory:
PORKBUN_API_KEY=pk1_xxxxx
PORKBUN_API_SECRET=sk1_xxxxx
Test your credentials:
porkbun ping
porkbun ping
porkbun pricing # All TLD pricing
porkbun pricing --tld com # Specific TLD
porkbun pricing --tld dev --format table
porkbun domain list # List all domains
porkbun domain list --format table # Table format
porkbun domain check example.com # Check availability
porkbun domain create example.com --cost 1108 # Register (cost in cents)
porkbun domain ns get example.com
porkbun domain ns update example.com --ns "ns1.dns.com,ns2.dns.com"
porkbun domain auto-renew example.com --status on
porkbun domain auto-renew example.com --status off
porkbun domain forward list example.com
porkbun domain forward add example.com --location "https://target.com" --type permanent
porkbun domain forward delete example.com --id 12345
porkbun domain glue list example.com
porkbun domain glue create example.com --subdomain ns1 --ips "1.2.3.4,5.6.7.8"
porkbun domain glue update example.com --subdomain ns1 --ips "9.10.11.12"
porkbun domain glue delete example.com --subdomain ns1
# List
porkbun dns list example.com
porkbun dns list example.com --type A
porkbun dns list example.com --format table
# Create
porkbun dns create example.com --type A --content 1.2.3.4
porkbun dns create example.com --type A --content 1.2.3.4 --name www --ttl 3600
porkbun dns create example.com --type MX --content mail.example.com --prio 10
# Edit
porkbun dns edit example.com --id 12345 --type A --content 5.6.7.8
porkbun dns edit-by-name-type example.com --type A --subdomain www --content 5.6.7.8
# Delete
porkbun dns delete example.com --id 12345
porkbun dns delete-by-name-type example.com --type A --subdomain www
porkbun dnssec list example.com
porkbun dnssec create example.com --key-tag 12345 --alg 13 --digest-type 2 --digest abc123
porkbun dnssec delete example.com --key-tag 12345
porkbun ssl example.com
All commands support --format:
porkbun domain list --format json # JSON (default)
porkbun domain list --format table # ASCII table
porkbun domain list --format csv # CSV
porkbun dns list example.com --format csv > records.csv
All write commands support --dry-run:
porkbun dns create example.com --type A --content 1.2.3.4 --dry-run
JSON output combines naturally with jq:
# Domain names
porkbun domain list | jq '.[].domain'
# A records only
porkbun dns list example.com | jq '[.[] | select(.type == "A")]'
# Check availability
porkbun domain check example.com | jq '.response.avail'
# Pricing for .com
porkbun pricing | jq '.pricing.com'
| Variable | Description |
|---|---|
PORKBUN_API_KEY | Porkbun API key (required) |
PORKBUN_API_SECRET | Porkbun API secret key (required) |
This CLI is designed to be used as a Claude Code skill. The agent can manage your Porkbun domains directly from a conversation:
jq for complex analysis| Tool | Role |
|---|---|
| TypeScript | Language |
| citty | CLI framework |
| cli-table3 | Table rendering |
| tsup | Build |
| Biome | Linter & formatter |
MIT — yabbal
FAQs
CLI for Porkbun — manage domains, DNS, SSL and more from the terminal
The npm package porkbun-cli receives a total of 3 weekly downloads. As such, porkbun-cli popularity was classified as not popular.
We found that porkbun-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.