// npm 패키지

cwao-tools

`cwao-tools` makes CosmWasm contract development & testing too easy.

npmjs.com tarball

버전

메인테이너

라이선스

MIT

최초 publish

2024-03-27

publisher

asteroiddao

tarball

245,471 B

AUTO-PUBLISHED·1개 버전 인덱싱됨·최근 publish: 2024-04-07

// publisher 캠페인by asteroiddao

이 계정에서 catch된 패키지 9건

고립된 catch가 아닙니다. 동일 publisher가 8개의 다른 패키지를 추가로 발행했고, 모두 파이프라인이 catch했습니다 — 일회성이 아닌 조직적 캠페인의 형태. 아래 링크는 각 형제 catch의 분석으로 이동합니다.

// offending code· @0.3.0· 1 file flagged

@0.3.0·2024-04-07·AUTO-PUBLISHED·publisher: asteroiddao

heuristic 75/100

static flags 1

llm skipped

mature-packageosv-flagged:MAL-2026-4545child-process-spawn

// offending code· 1 file flaggedpatterns: 1

--- package/index.js (excerpt) ---
#!/usr/bin/env node
const util = require("node:util")
const exec = util.promisify(require("node:child_process").exec)
const cmd = process.argv[2]
const { cpSync, existsSync } = require("fs")
const { resolve } = require("path")
const { isNil } = require("ramda")

const main = async () => {
  switch (cmd) {
    case "create":
      const appname = process.argv[3]
      if (isNil(appname)) {
        console.error("appname not specified")
        break
      }
      const appdir = resolve(process.cwd(), appname)
      if (existsSync(appdir)) {
        console.error(`appdir exists: ${appdir}`)
        break
      }
      const workspace = resolve(__dirname, "workspace")
      try {
        cpSync(workspace, appdir, { recursive: true })
        const { error, stdout, stderr } = await exec(
          `cd ${appdir} && yarn && rm -rf .weavedb && mkdir .weavedb`,
        )
        if (error) {
          console.error(`something went wrong...`)
        } else {
          console.log(`${appname} successfully created!`)
        }
      } catch (e) {
        console.error(e)
      }
      break
    default:
      console.error(`command not found: ${cmd}`)
  }
}

main()


--- package.json (entry) ---
{
  "name": "cwao-tools",
  "version": "0.3.0",
  "main": "index.js",
  "node": "^20",
  "bin": {
    "cwao": "index.js"
  },
  "license": "MIT",
  "dependencies": {
    "cwao": "^0.3.4",
    "cwao-units": "^0.0.2",
    "ramda": "^0.29.1",
    "yargs": "^17.7.2"
  }
}


--- index.js (entry) ---
#!/usr/bin/env node
const util = require("node:util")
const exec = util.promisify(require("node:child_process").exec)
const cmd = process.argv[2]
const { cpSync, existsSync } = require("fs")
const { resolve } = require("path")
const { isNil } = require("ramda")

const main = async () => {
  switch (cmd) {
    case "create":
      const appname = process.argv[3]
      if (isNil(appname)) {
        console.error("appname not specified")
        break
      }
      const appdir = resolve(process.cwd(), appname)
      if (existsSync(appdir)) {
        console.error(`appdir exists: ${appdir}`)
        break
      }
      const workspace = resolve(__dirname, "workspace")
      try {
        cpSync(workspace, appdir, { recursive: true })
        const { error, stdout, stderr } = await exec(
          `cd ${appdir} && yarn && rm -rf .weavedb && mkdir .weavedb`,
        )
        if (error) {
          console.error(`something went wrong...`)
        } else {
          console.log(`${appname} successfully created!`)
        }
      } catch (e) {
        console.error(e)
      }
      break
    default:
      console.error(`command not found: ${cmd}`)
  }
}

main()