
Research
Malicious npm Package Brand-Squats TanStack to Exfiltrate Environment Variables
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.
wrangler
Advanced tools
wrangler is a command line tool for building Cloudflare Workers.
To get started quickly with a Hello World worker, run the command below:
npx wrangler init my-worker -y
For more info, visit our Getting Started guide.
We support running the Wrangler CLI with the Current, Active, and Maintenance versions of Node.js. Your Worker will always be executed in workerd, the open source Cloudflare Workers runtime.
Wrangler is only supported on macOS 13.5+, Windows 11, and Linux distros that support glib 2.35. This follows workerd's OS support policy.
For the latest Wrangler documentation, click here.
To read more about Workers in general:
Wrangler is configured via a wrangler.jsonc (recommended), wrangler.json or wrangler.toml file in the project root. An example configuration generated by npx wrangler init or npx create cloudflare is as follows:
{
"$schema": "node_modules/wrangler/config-schema.json",
"name": "my-worker",
"main": "./src/index.ts",
"compatibility_date": "YYYY-MM-DD",
}
For more detailed information about configuration, refer to the documentation.
The wrangler CLI offers various commands, the most popular being:
wrangler dev to start a local development server, with live reloading and devtools.
wrangler deploy to deploy a Worker to the Cloudflare's global network.
There are many more commands and options available, for a full list refer to the official Cloudflare documentation.
The Serverless Framework is a popular open-source framework for building and deploying serverless applications across various cloud providers, including AWS, Azure, and Google Cloud. It offers a broader range of integrations and features compared to wrangler, which is specific to Cloudflare Workers.
Architect (or @architect) is an open-source framework for building and deploying serverless applications on AWS. It provides a simple and declarative way to define serverless infrastructure and focuses on developer productivity. Unlike wrangler, which is Cloudflare-specific, Architect is designed for AWS.
Claudia.js is a tool for deploying Node.js projects to AWS Lambda and API Gateway. It automates many of the deployment steps and simplifies the process of creating and managing serverless applications on AWS. Claudia.js is more AWS-centric, whereas wrangler is tailored for Cloudflare Workers.
FAQs
Command-line interface for all things Cloudflare Workers
The npm package wrangler receives a total of 9,811,411 weekly downloads. As such, wrangler popularity was classified as popular.
We found that wrangler demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.

Research
Compromised SAP CAP npm packages download and execute unverified binaries, creating urgent supply chain risk for affected developers and CI/CD environments.

Company News
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.