
Research
/Security News
Popular Rust Crates Compromised in Build-Time Supply Chain Attack
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.
@t2000/discovery
Advanced tools
Probe and validate x402 seller endpoints on Sui — 402 accepts[] / WWW-Authenticate probing plus OpenAPI paid-endpoint extraction. The discovery half of the @t2000 serve stack.
Probe and validate x402 seller endpoints on Sui — the discovery half of the
@t2000/serve stack.
probe(url) — expect a 402; reads accepts[] and
WWW-Authenticate: Payment, normalizes known-USDC amounts.fetchOpenApi / extractEndpoints — {origin}/openapi.json → paid ops.validateOpenApi — catalog contract lint.discover / check — origin-level sweeps.import { probe, extractEndpoints, validateOpenApi } from '@t2000/discovery';
Zero runtime dependencies. @t2000/serve ships a serve↔probe integration
test so the two packages cannot drift in CI.
MIT © t2000
FAQs
Probe and validate x402 seller endpoints on Sui — 402 accepts[] / WWW-Authenticate probing plus OpenAPI paid-endpoint extraction. The discovery half of the @t2000 serve stack.
The npm package @t2000/discovery receives a total of 1,344 weekly downloads. As such, @t2000/discovery popularity was classified as popular.
We found that @t2000/discovery demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.