
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@peac/audit
Advanced tools
Audit logging, case bundle generation, and commerce evidence bundling for PEAC protocol disputes and observability.
pnpm add @peac/audit
@peac/audit provides structured audit logging in JSONL format, case bundle generation for dispute resolution, and commerce evidence bundling for multi-protocol payment observations. It includes trace correlation via W3C Trace Context, dispute bundle creation with cryptographic integrity verification, and privacy-safe logging patterns.
import { createAuditEntry, formatJsonl } from '@peac/audit';
const entry = createAuditEntry({
event_type: 'receipt_issued',
actor: { type: 'system', id: 'peac-issuer' },
resource: { type: 'receipt', id: 'jti:rec_abc123' },
outcome: { success: true, result: 'issued' },
});
const jsonl = formatJsonl([entry]);
import { createDisputeBundle, verifyBundle } from '@peac/audit';
const bundle = await createDisputeBundle({
kind: 'dispute',
receipts: [{ jws: compactJws, ref: receiptRef }],
jwks: { keys: [publicJwk] },
});
const report = await verifyBundle({ bundle });
console.log(report.summary);
import { correlateByTrace, filterByTimeRange } from '@peac/audit';
const recent = filterByTimeRange(entries, {
start: '2026-03-01T00:00:00Z',
end: '2026-03-29T00:00:00Z',
});
const traces = correlateByTrace(recent);
for (const t of traces) {
console.log(`Trace ${t.trace_id}: ${t.entries.length} events`);
}
@peac/kernel (Layer 0): Error codes and type definitions@peac/schema (Layer 1): Receipt validation schemas@peac/crypto (Layer 2): Signature verification for dispute bundles@peac/protocol (Layer 3): Receipt issuance and verificationIf you are building an AI agent or MCP server that needs evidence receipts:
@peac/mcp-server for a ready-to-use MCP tool server@peac/protocol for programmatic receipt issuance and verificationApache-2.0
PEAC Protocol is an open source project stewarded by Originary and community contributors.
FAQs
Audit logging and case bundle generation for PEAC protocol disputes
The npm package @peac/audit receives a total of 62 weekly downloads. As such, @peac/audit popularity was classified as not popular.
We found that @peac/audit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.