CmdID

CmdID / Commands

bun

JavaScript runtime and toolkit. tldr-pages

On several platforms 2 Sigma rules name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

JavaScript runtime and toolkit. Includes a bundler, a test runner, and a package manager.

Create a new Bun project in the current directory

bun initIdentify

Run a JavaScript file or a package.json script

bun run path/to/fileIdentify

Run unit tests

bun testIdentify

Download and install all the packages listed as dependencies in package.json

bun [iIdentify

Add a dependency to package.json

bun [a module_nameIdentify

Remove a dependency from package.json

bun [rm module_nameIdentify

Start a REPL (interactive shell)

bun replIdentify

Upgrade Bun to the latest version

bun upgradeIdentify

What detects it

Sigma process creation rules that name bun
highShai-Hulud Malicious Bun Execution - LinuxSwachchhanda Shrawan Poudel (Nextron Systems)
highTanStack Supply-Chain Attack Execution Indicators - LinuxLeonardo Gasparini