// npm package
monade
versions
8
maintainers
1
license
MIT
first publish
2025-08-03
publisher
asteroiddao
tarball
26,039 B
AUTO-PUBLISHED·1 version indexed·latest published 2026-05-27
// publisher campaignby asteroiddao
9 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @0.0.8· 1 file flagged
- @0.0.8··AUTO-PUBLISHED·publisher: asteroiddaoheuristic 75/100static flags 1llm skippedosv-flagged:MAL-2026-4613child-process-spawn
// offending code· 1 file flaggedpatterns: 1
--- package/src/flow.js (excerpt) --- import { pof, of, pka, ka, dev, pdev } from "./monade.js" const exec = (mon, dev, pred) => (dev.__ka__ ? mon.chain(dev.k) : mon.map(dev)) const iterate = (mon, devs, pred) => devs.reduce((m, v) => match(m, v, pred), mon) const match = (mon, v, pred) => Array.isArray(v) ? iterate(mon, v, pred) : typeof v === "function" ? exec(mon, v, pred) : typeof v === "object" ? v.__ka__ ? exec(mon, v, pred) : checkout(mon, v, pred) : mon const checkout = (mon, devs, pred) => { const _pred = devs.$pred ?? pred return match(mon, _pred?.(mon, devs), pred) } const piterate = async (mon, devs, pred) => { for (const v of devs) mon = await pmatch(mon, v, pred) return mon } const pmatch = async (mon, v, pred) => Array.isArray(v) ? await piterate(mon, v, pred) : typeof v === "function" ? exec(mon, v, pred) : typeof v === "object" ? v.__ka__ ? exec(mon, v, pred) : await pcheckout(mon, v, pred) : mon const pcheckout = async (mon, devs, pred) => { const _pred = devs.$pred ?? pred return await pmatch(mon, await _pred?.(mon, devs), pred) } const flow = (devs, pred) => { const arr = ka() arr.k = ctx => match(of(ctx), devs, pred) return arr } const pflow = (devs, pred) => { const arr = pka() arr.k = ctx => pof(pmatch(pof(ctx), devs, pred).then(m => m.val())) return arr } export { flow, pflow } --- package.json (entry) --- { "name": "monade", "version": "0.0.8", "type": "module", "scripts": { "test": "node --test", "test-only": "node --test-only", "test-all": "node --test test/*.test.js", "build:cjs": "babel src --out-dir dist/cjs --config-file ./.babelrc-cjs", "build": "rm -rf dist && npm run build:cjs && cp src -rf dist/esm && node make.js && cp .npmignore dist/" }, "license": "MIT", "devDependencies": { "@babel/plugin-transform-modules-commonjs": "^7.24.8", "@babel/cli": "^7.24.8", "@babel/core": "^7.25.2", "@babel/preset-env": "^7.25.3" } } --- index.js (entry) --- export { of, pof, ka, pka, dev, pdev, opt, popt } from "./monade.js" export { flow, pflow } from "./flow.js"
