
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
underpost
Advanced tools
npm install -g underpost
underpost new app-name
After template installation, the server will be running on http://localhost:4001
cd app-name
Build client bundle
npm run build
Run dev client server
npm run dev
underpost [options] [command]Options:
-V, --version output the version number
-h, --help display help for command
Commands:
new [options] [app-name] Initializes a new Underpost project, service, or configuration.
start [options] <deploy-id> [env] Initiates application servers, build pipelines, or other defined services based on the deployment ID.
clone [options] <uri> Clones a specified GitHub repository into the current directory.
pull [options] <path> <uri> Pulls the latest changes from a specified GitHub repository.
cmt [options] [path] [commit-type] [module-tag] [message] Manages commits to a GitHub repository, supporting various commit types and options.
push [options] <path> <uri> Pushes committed changes from a local repository to a remote GitHub repository.
env [deploy-id] [env] [subConf] Sets environment variables and configurations related to a specific deployment ID.
static [options] Manages static build of page, bundles, and documentation with comprehensive customization options.
config [options] <operator> [key] [value] Manages Underpost configurations using various operators.
root Displays the root path of the npm installation.
ip [options] [ips] Displays the current public machine IP addresses.
cluster [options] [pod-name] Manages Kubernetes clusters, defaulting to Kind cluster initialization.
deploy [options] [deploy-list] [env] Manages application deployments, defaulting to deploying development pods.
secret [options] <platform> Manages secrets for various platforms.
image [options] Manages Docker images, including building, saving, and loading into Kubernetes clusters.
install Quickly imports Underpost npm dependencies by copying them.
db [options] <deploy-list> Manages database operations with support for MariaDB and MongoDB, including import/export, multi-pod targeting, and Git integration.
metadata [options] [deploy-id] [host] [path] Manages cluster metadata operations, including import and export.
script [options] <operator> <script-name> [script-value] Supports a variety of built-in Underpost global scripts, their preset lifecycle events, and arbitrary custom scripts.
cron [options] [deploy-list] [job-list] Manages cron jobs, including initialization, execution, and configuration updates.
fs [options] [path] Manages file storage, defaulting to file upload operations.
test [options] [deploy-list] Manages and runs tests, defaulting to the current Underpost default test suite.
monitor [options] <deploy-id> [env] Manages health server monitoring for specified deployments.
ssh [options]
run [options] <runner-id> [path] Runs specified scripts using various runners.
lxd [options] Manages LXD containers and virtual machines.
baremetal [options] [workflow-id] [hostname] [ip-address] Manages baremetal server operations, including installation, database setup, commissioning, and user management.
help [command] display help for command
FAQs
pwa api rest template
The npm package underpost receives a total of 361 weekly downloads. As such, underpost popularity was classified as not popular.
We found that underpost demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.