// npm package

weavedb-lite

npmjs.com tarball

versions

maintainers

first publish

2025-01-27

publisher

asteroiddao

tarball

3,110,720 B

AUTO-PUBLISHED·2 versions indexed·latest published 2026-05-26

// publisher campaignby asteroiddao

9 caught packages from this account

This is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @0.1.1· 3 files flagged

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@0.1.1·2026-05-26·AUTO-PUBLISHED·publisher: asteroiddao
heuristic 89/100
static flags 2
llm benign (0.85) via ollama
install-scripts:preinstallnew-publisher:1dpublisher-multi-name-burst:16publisher-version-pump:17osv-flagged:MAL-2026-4720long-base64-literalbase64-decode
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
// NHI intent16 targets·mixed harvest patterns·gate: always
- AWS credentials fileaws-credentials-file
```
./src/deps.ts
```

--- install scripts --- ### preinstall ./src/deps.ts --- package/esm/client.js (excerpt) --- export default "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" --- package/esm/index.js (excerpt) --- import wasm from "./wasm.js" import client from "./client.js" import AoLoader from "@permaweb/ao-loader" import { AO, acc } from "wao/test" import { writeFile, readFileSync } from "fs" export default class DB { constructor({ cache, reset = false } = {}) { this.height = 0 this.memory = null this.cache = cache this.reset = reset } async save() { clearTimeout(this.to) this.to = setTimeout(() => { const memory = this.ao.mem.env[this.pid].memory if (this.cache) writeFile(this.cache, memory, () => {}) }, 100) } async init() { const memory = this.cache && !this.reset ? readFileSync(this.cache) : null const _wasm = Buffer.from(wasm, "base64") const _client = Buffer.from(client, "base64").toString() this.ao = await new AO().init(acc[0]) const { id: module } = await this.ao.postModule({ data: _wasm }) if (memory) { const { p, pid } = await this.ao.spwn({ module, memory }) this.pid = pid this.p = p } else { const { p, pid } = await this.ao.deploy({ module, src_data: _client }) this.pid = pid this.p = p } return this } async add(...query) { const res = await this.p.m("Add", { Query: JSON.stringify(query) }) this.save() return res } async set(...query) { const res = await this.p.m("Set", { Query: JSON.stringify(query) }) this.save() return res } async update(...query) { const res = await this.p.m("Update", { Query: JSON.stringif --- package/cjs/client.js (excerpt) --- "use strict"; Object.defineProperty(exports, "__esModule", { value: true }); exports["default"] = void 0; var _default = exports["default"] = "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";

--- package/esm/client.js (excerpt) --- export default "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" --- package/esm/index.js (excerpt) --- import wasm from "./wasm.js" import client from "./client.js" import AoLoader from "@permaweb/ao-loader" import { AO, acc } from "wao/test" import { writeFile, readFileSync } from "fs" export default class DB { constructor({ cache, reset = false } = {}) { this.height = 0 this.memory = null this.cache = cache this.reset = reset } async save() { clearTimeout(this.to) this.to = setTimeout(() => { const memory = this.ao.mem.env[this.pid].memory if (this.cache) writeFile(this.cache, memory, () => {}) }, 100) } async init() { const memory = this.cache && !this.reset ? readFileSync(this.cache) : null const _wasm = Buffer.from(wasm, "base64") const _client = Buffer.from(client, "base64").toString() this.ao = await new AO().init(acc[0]) const { id: module } = await this.ao.postModule({ data: _wasm }) if (memory) { const { p, pid } = await this.ao.spwn({ module, memory }) this.pid = pid this.p = p } else { const { p, pid } = await this.ao.deploy({ module, src_data: _client }) this.pid = pid this.p = p } return this } async add(...query) { const res = await this.p.m("Add", { Query: JSON.stringify(query) }) this.save() return res } async set(...query) { const res = await this.p.m("Set", { Query: JSON.stringify(query) }) this.save() return res } async update(...query) { const res = await this.p.m("Update", { Query: JSON.stringif --- package/cjs/client.js (excerpt) --- "use strict"; Object.defineProperty(exports, "__esModule", { value: true }); exports["default"] = void 0; var _default = exports["default"] = "bG9jYWwgd2RiID0gcmVxdWlyZSgid2VhdmVkYiIpCmxvY2FsIGpzb24gPSByZXF1aXJlKCJqc29uIikKCmxvY2FsIGZ1bmN0aW9uIHBhcnNlKG1zZykKICBhc3NlcnQodHlwZShtc2cuVGFncy5RdWVyeSkgPT0gJ3N0cmluZycsICdRdWVyeSBpcyByZXF1aXJlZCEnKQogIHJldHVybiBqc29uLmRlY29kZShtc2cuVGFncy5RdWVyeSkKZW5kCiAgCkhhbmRsZXJzLmFkZCgiR2V0IiwgIkdldCIsIGZ1bmN0aW9uKG1zZykgbXNnLnJlcGx5KHsgRGF0YSA9IHdkYi5nZXQocGFyc2UobXNnKSkgfSkgZW5kKQpIYW5kbGVycy5hZGQoIkNnZXQiLCAiQ2dldCIsIGZ1bmN0aW9uKG1zZykgbXNnLnJlcGx5KHsgRGF0YSA9IHdkYi5jZ2V0KHBhcnNlKG1zZykpIH0pIGVuZCkKSGFuZGxlcnMuYWRkKCJBZGQiLCAiQWRkIiwgZnVuY3Rpb24obXNnKSBtc2cucmVwbHkoeyBEYXRhID0geyBpZCA9IHdkYi5hZGQocGFyc2UobXNnKSkgfSB9KSBlbmQpCkhhbmRsZXJzLmFkZCgiU2V0IiwgIlNldCIsIGZ1bmN0aW9uKG1zZykgbXNnLnJlcGx5KHsgRGF0YSA9IHsgaWQgPSB3ZGIuc2V0KHBhcnNlKG1zZykpIH0gfSkgZW5kKQpIYW5kbGVycy5hZGQoIlVwZGF0ZSIsICJVcGRhdGUiLCBmdW5jdGlvbihtc2cpIG1zZy5yZXBseSh7IERhdGEgPSB7IGlkID0gd2RiLnVwZGF0ZShwYXJzZShtc2cpKSB9IH0pIGVuZCkKSGFuZGxlcnMuYWRkKCJVcHNlcnQiLCAiVXBzZXJ0IiwgZnVuY3Rpb24obXNnKSBtc2cucmVwbHkoeyBEYXRhID0geyBpZCA9IHdkYi51cHNlcnQocGFyc2UobXNnKSkgfSB9KSBlbmQpCkhhbmRsZXJzLmFkZCgiRGVsZXRlIiwgIkRlbGV0ZSIsIGZ1bmN0aW9uKG1zZykgbXNnLnJlcGx5KHsgRGF0YSA9IHsgaWQgPSB3ZGIuZGVsZXRlKHBhcnNlKG1zZykpIH0gfSkgZW5kKQo=";

export default "bG9jYWwgd2RiID0gcmVxdWlyZSgid2VhdmVkYiIpCmxvY2FsIGpzb24gPSByZXF1aXJlKCJqc29uIikKCmxvY2FsIGZ1bmN0aW9uIHBhcnNlKG1zZykKICBhc3NlcnQodHlwZShtc2cuVGFncy5RdWVyeSkgPT0gJ3N0cmluZycsICdRdWVyeSBpcyByZXF1aXJlZCEnKQogIHJldHVybiBqc29uLmRlY29kZShtc2cuVGFncy5RdWVyeSkKZW5kCiAgCkhhbmRsZXJzLmFkZCgiR2V0IiwgIkdldCIsIGZ1bmN0aW9uKG1zZykgbXNnLnJlcGx5KHsgRGF0YSA9IHdkYi5nZXQocGFyc2UobXNnKSkgfSkgZW5kKQpIYW5kbGVycy5hZGQoIkNnZXQiLCAiQ2dldCIsIGZ1bmN0aW9uKG1zZykgbXNnLnJlcGx5KHsgRGF0YSA9IHdkYi5jZ2V0KHBhcnNlKG1zZykpIH0pIGVuZCkKSGFuZGxlcnMuYWRkKCJBZGQiLCAiQWRkIiwgZnVuY3Rpb24obXNnKSBtc2cucmVwbHkoeyBEYXRhID0geyBpZCA9IHdkYi5hZGQocGFyc2UobXNnKSkgfSB9KSBlbmQpCkhhbmRsZXJzLmFkZCgiU2V0IiwgIlNldCIsIGZ1bmN0aW9uKG1zZykgbXNnLnJlcGx5KHsgRGF0YSA9IHsgaWQgPSB3ZGIuc2V0KHBhcnNlKG1zZykpIH0gfSkgZW5kKQpIYW5kbGVycy5hZGQoIlVwZGF0ZSIsICJVcGRhdGUiLCBmdW5jdGlvbihtc2cpIG1zZy5yZXBseSh7IERhdGEgPSB7IGlkID0gd2RiLnVwZGF0ZShwYXJzZShtc2cpKSB9IH0pIGVuZCkKSGFuZGxlcnMuYWRkKCJVcHNlcnQiLCAiVXBzZXJ0IiwgZnVuY3Rpb24obXNnKSBtc2cucmVwbHkoeyBEYXRhID0geyBpZCA9IHdkYi51cHNlcnQocGFyc2UobXNnKSkgfSB9KSBlbmQpCkhhbmRsZXJzLmFkZCgiRGVsZXRlIiwgIkRlbGV0ZSIsIGZ1bmN0aW9uKG1zZykgbXNnLnJlcGx5KHsgRGF0YSA9IHsgaWQgPSB3ZGIuZGVsZXRlKHBhcnNlKG1zZykpIH0gfSkgZW5kKQo="

import wasm from "./wasm.js" import client from "./client.js" import AoLoader from "@permaweb/ao-loader" import { AO, acc } from "wao/test" import { writeFile, readFileSync } from "fs" export default class DB { constructor({ cache, reset = false } = {}) { this.height = 0 this.memory = null this.cache = cache this.reset = reset } async save() { clearTimeout(this.to) this.to = setTimeout(() => { const memory = this.ao.mem.env[this.pid].memory if (this.cache) writeFile(this.cache, memory, () => {}) }, 100) } async init() { const memory = this.cache && !this.reset ? readFileSync(this.cache) : null const _wasm = Buffer.from(wasm, "base64") const _client = Buffer.from(client, "base64").toString() this.ao = await new AO().init(acc[0]) const { id: module } = await this.ao.postModule({ data: _wasm }) if (memory) { const { p, pid } = await this.ao.spwn({ module, memory }) this.pid = pid this.p = p } else { const { p, pid } = await this.ao.deploy({ module, src_data: _client }) this.pid = pid this.p = p } return this } async add(...query) { const res = await this.p.m("Add", { Query: JSON.stringify(query) }) this.save() return res } async set(...query) { const res = await this.p.m("Set", { Query: JSON.stringify(query) }) this.save() return res } async update(...query) { const res = await this.p.m("Update", { Query: JSON.stringif

"use strict"; Object.defineProperty(exports, "__esModule", { value: true }); exports["default"] = void 0; var _default = exports["default"] = "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";