// npm package
weavedb-offchain
versions
113
maintainers
1
license
MIT
first publish
2023-02-24
publisher
asteroiddao
tarball
7,293 B
AUTO-PUBLISHED·1 version indexed·latest published 2026-05-27
// publisher campaignby asteroiddao
9 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @0.45.5· no static-pattern hits
- @0.45.5··AUTO-PUBLISHED·publisher: asteroiddaoheuristic 75/100static flags 0llm skippedmature-packageosv-flagged:MAL-2026-4722
// offending code· no static-pattern hits
--- package.json (entry) --- { "name": "weavedb-offchain", "version": "0.45.5", "main": "index.js", "license": "MIT", "dependencies": { "@metamask/legacy-web3": "^2.0.0", "arweave": "^1.11.4", "md5": "^2.3.0", "ramda": "^0.28.0", "weavedb-base": "^0.45.2", "weavedb-contracts": "^0.45.1" } } --- index.js (entry) --- const { tail, isNil, clone, mergeLeft } = require("ramda") const Base = require("weavedb-base") let arweave = require("arweave") if (!isNil(arweave.default)) arweave = arweave.default let contracts, handle_bpt, version, version_bpt class OffChain extends Base { constructor({ state = {}, cache = "memory", type = 1, contractTxId, noauth = false, caller = null, secure = true, local = false, _contracts = "weavedb-contracts", } = {}) { super() this._contracts = _contracts version_bpt = require(`${this._contracts}/weavedb-bpt/lib/version`) this.queue = [] this.ongoing = false this.caller = caller this.noauth = noauth this.kvs = {} this.network = "offchain" this.cache = cache this.type = type this.handles = {} ;({ handle: handle_bpt } = require( `${this._contracts}/weavedb-bpt/contract`, )) this.handle = this.type === 3 ? handle_bpt : handle_bpt this.local = local this.validity = {} this.txs = [] this.arweave = arweave.init() this.contractTxId = contractTxId || "offchain" this.domain = { name: "weavedb", version: "1", verifyingContract: thi
