// npm package

wao

![](./docs/docs/public/images/cover.png)

npmjs.com tarball

versions

211

maintainers

first publish

2015-06-21

publisher

asteroiddao

tarball

76,911,996 B

AUTO-PUBLISHED·1 version indexed·latest published 2026-05-27

// publisher campaignby asteroiddao

9 caught packages from this account

This is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @0.41.5· no static-pattern hits

@0.41.5·2026-05-27·AUTO-PUBLISHED·publisher: asteroiddao
heuristic 75/100
static flags 1
llm skipped
install-scripts:postinstallhuge-tarball:73mbmature-packageosv-flagged:MAL-2026-4711oversize-tarball-skipped
// offending code· no static-pattern hitspatterns: 1
```
(tarball 31194128 bytes > 20971520 cap; static analysis skipped)
```