// npm package

fpjson-lang

![](./assets/cover.png)

npmjs.com tarball

versions

maintainers

license

MIT

first publish

2022-09-03

publisher

asteroiddao

tarball

6,335 B

AUTO-PUBLISHED·1 version indexed·latest published 2026-05-27

// publisher campaignby asteroiddao

9 caught packages from this account

This is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @0.1.8· no static-pattern hits

@0.1.8·2026-05-27·AUTO-PUBLISHED·publisher: asteroiddao

heuristic 75/100

static flags 0

llm skipped

osv-flagged:MAL-2026-4566

// offending code· no static-pattern hits

--- package.json (entry) ---
{
  "name": "fpjson-lang",
  "version": "0.1.8",
  "license": "MIT",
  "scripts": {
    "build": "rimraf dist && node ./esbuild.mjs",
    "test": "mocha"
  },
  "devDependencies": {
    "chai": "^4.3.6",
    "esbuild": "^0.15.3",
    "esbuild-node-externals": "^1.4.1",
    "mocha": "^10.0.0",
    "rimraf": "^3.0.2"
  },
  "dependencies": {
    "ramda": "^0.28.0"
  },
  "peerDependencies": {
    "react": "^18.2.0"
  },
  "main": "dist/cjs/index.js",
  "module": "dist/esm/index.js",
  "files": [
    "dist"
  ]
}