// npm package
weavedb-node-client
versions
91
maintainers
1
license
MIT
first publish
2022-10-10
publisher
asteroiddao
tarball
5,695 B
AUTO-PUBLISHED·2 versions indexed·latest published 2026-05-27
// publisher campaignby asteroiddao
9 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @0.45.4· no static-pattern hits
- @0.45.4··AUTO-PUBLISHED·publisher: asteroiddaoheuristic 75/100static flags 0llm skippedmature-packageosv-flagged:MAL-2026-4721
// offending code· no static-pattern hits
--- package.json (entry) --- { "name": "weavedb-node-client", "version": "0.45.4", "main": "index.js", "license": "MIT", "engines": { "node": ">=16.5" }, "dependencies": { "@grpc/grpc-js": "^1.1.0", "@grpc/proto-loader": "^0.5.0", "arweave": "^1.12.2", "ramda": "^0.28.0", "weavedb-base": "^0.45.2" } } --- index.js (entry) --- const { dissoc, isEmpty, init, all, complement, isNil, is, last, includes, } = require("ramda") const Base = require("weavedb-base") const PROTO_PATH = __dirname + "/weavedb.proto" const grpc = require("@grpc/grpc-js") const protoLoader = require("@grpc/proto-loader") const packageDefinition = protoLoader.loadSync(PROTO_PATH, { keepCase: true, longs: String, enums: String, defaults: true, oneofs: true, }) const weavedb_proto = grpc.loadPackageDefinition(packageDefinition).weavedb let Arweave = require("arweave") class SDK extends Base { constructor({ rpc, contractTxId, wallet, name = "weavedb", version = "1", EthWallet, web3, arweave, arweave_wallet, network, port = 1820, secure, cert = null, rollup, }) { super() this.rollup = rollup this.contractTxId = !isNil(rollup) ? rollup.txid : contractTxId this.arweave_wallet = arweave_wallet if (isNil(arweave)) { if (network === "localhost") { arweave = { host: "localhost", port, protocol: "http", } } else { arweave = { host: "arweave.net", port: 44
