
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
@true402.dev/rugcheck
Advanced tools
Terminal rug/honeypot check for any Base token — `npx @true402.dev/rugcheck 0x…` — pay-per-call over x402 (USDC, no account, no API key).
Stable · production-ready — semver-stable public API (v1.0).
On-chain rug / honeypot check for any Base token, from your terminal — one command, no install:
npx @true402.dev/rugcheck 0x4ed4E862860beD51a9570b96d89aF5E1B0Efefed
It tries true402's free trial first (a few free checks/day — no wallet needed). For unlimited checks, point it at a payer wallet and it pays true402's token-report over x402 (~$0.01 USDC on Base, no account, no API key — the wallet is the identity):
PAYER_PRIVATE_KEY=0x… npx @true402.dev/rugcheck 0x<token>
true402 rugcheck · 0x4ed4…Efed
🛑 AVOID (score 0/100)
• no tradeable WETH/USDC liquidity — effectively untradeable
checked on-chain: honeypot sim + liquidity + ownership · true402.dev
PAYER_PRIVATE_KEY is a Base wallet holding a little USDC (gas is sponsored by the facilitator).The verdict is a composite of an on-chain buy/sell honeypot simulation, liquidity depth, and contract structure (mint, ownership, kill switches). Powered by true402 — the machine-native x402 marketplace on Base.
FAQs
Terminal rug/honeypot check for any Base token — `npx @true402.dev/rugcheck 0x…` — pay-per-call over x402 (USDC, no account, no API key).
The npm package @true402.dev/rugcheck receives a total of 46 weekly downloads. As such, @true402.dev/rugcheck popularity was classified as not popular.
We found that @true402.dev/rugcheck demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.