
Security News
Node.js Drops Bug Bounty Rewards After Funding Dries Up
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.
@zoralabs/cli
Advanced tools
Beta — This package is in pre-release. Commands, flags, and output formats may change between versions without notice.
A command-line tool for interacting with the Zora protocol. Explore coins, check prices, manage wallets, and trade — all from the terminal.
Requires Node.js 20+.
npm install -g @zoralabs/cli
# Guided first-time setup — wallet, API key, and deposit instructions
zora setup
# Browse trending coins
zora explore
# Look up a specific coin
zora get <address-or-name>
# Check price history
zora price-history <address-or-name>
All commands support --json for machine-readable output. Commands with live data (explore, balance, profile) also support --live (interactive, default) and --static (snapshot). Use --refresh <seconds> to set the auto-refresh interval in --live mode.
| Command | Description | Wallet required |
|---|---|---|
setup | Guided first-time setup (wallet + API key + deposit info) | — |
explore | Browse top, new, and highest volume coins | No |
get | Look up a coin by address or name | No |
price-history | Display price history for a coin | No |
auth | Configure or check API key status | No |
profile | View creator or user profiles | No |
buy | Buy a coin | Yes |
sell | Sell a coin | Yes |
balance | Show wallet balances (ETH, USDC, ZORA) and coin positions | Yes |
wallet | Show wallet address, export key, or configure wallet | Yes |
send | Send tokens to another address | Yes |
Run zora --help or zora <command> --help for detailed usage.
zora setup walks through three steps: wallet configuration, API key (optional), and deposit instructions. It is re-runnable — existing configuration is detected and can be kept or overwritten.
zora setup # interactive 3-step flow
zora setup --create # skip wallet prompt, generate a new key
zora setup --yes # non-interactive, accept all defaults
zora setup --force # overwrite existing wallet and API key
The private key is stored locally at ~/.config/zora/wallet.json with restricted permissions. ZORA_PRIVATE_KEY and ZORA_API_KEY environment variables take precedence over saved config files.
To configure wallet or API key individually (without running the full setup flow). All commands work without an API key but may be rate-limited:
zora wallet configure — create or import a wallet (--create, --force)zora auth configure — save an API key; zora auth status — check current configFull documentation is available at cli.zora.com.
Reach out at x.com/zorasupport or support.zora.co.
FAQs
Zora CLI tool
We found that @zoralabs/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 12 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.