Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
By Trevor Norris, Benjamin Barslev - Aug 21, 2026
@true402.dev/rugcheck
Advanced tools
@true402.dev/rugcheck
Terminal rug/honeypot check for any Base token — `npx @true402.dev/rugcheck 0x…` — pay-per-call over x402 (USDC, no account, no API key).
@true402.dev/rugcheck
On-chain rug / honeypot check for any Base token, from your terminal — one command, no install:
npx @true402.dev/rugcheck 0x4ed4E862860beD51a9570b96d89aF5E1B0Efefed
It tries true402's free trial first (a few free checks/day — no wallet needed). For unlimited checks, point it at a payer wallet and it pays true402's token-report over x402 (~$0.01 USDC on Base, no account, no API key — the wallet is the identity):
Works on Base (default), Ethereum and BNB Smart Chain — add --chain ethereum or --chain bsc.
Add --history to also show what has already happened to the token's liquidity — every removal
true402 has observed, and the other tokens drained in the same transaction. A honeypot simulation
answers "can I sell this right now"; it is blind to a pool that was drained last month and re-seeded.
Base only, since that is the chain the archive covers.
PAYER_PRIVATE_KEY=0x… npx @true402.dev/rugcheck 0x<token>
true402 rugcheck · 0x4ed4…Efed
🛑 AVOID (score 0/100)
• no tradeable WETH/USDC liquidity — effectively untradeable
checked on-chain: honeypot sim + liquidity + ownership · true402.dev
- Exits non-zero on an AVOID verdict — gate a script or CI step on it.
PAYER_PRIVATE_KEYis a Base wallet holding a little USDC (gas is sponsored by the facilitator).- The check refuses to sign more than $0.10 for a single call, so a rogue endpoint can't drain the payer.
The verdict is a composite of an on-chain buy/sell honeypot simulation, liquidity depth, and contract structure (mint, ownership, kill switches). Powered by true402 — the machine-native x402 marketplace on Base.
Not in a terminal? Send any Base token address to @True402bot on Telegram, or use the browser check at https://true402.dev/check — same on-chain simulation, free, no wallet.
Also available for
MCP (Claude Code / Desktop, Cursor, Hermes) · Hermes Agent · OpenClaw · ElizaOS · LangChain · CrewAI · Vercel AI SDK · Coinbase AgentKit · Virtuals GAME · CLI — same on-chain checks, one install command each: true402.dev/integrations
FAQs
Terminal rug/honeypot check for any Base token — `npx @true402.dev/rugcheck 0x…` — pay-per-call over x402 (USDC, no account, no API key).
The npm package @true402.dev/rugcheck receives a total of 225 weekly downloads. As such, @true402.dev/rugcheck popularity was classified as not popular.
We found that @true402.dev/rugcheck demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 04 Aug 2026
Related posts
Product
Socket Now Protects the Firefox Extension Ecosystem
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.
By John Tuckner - Aug 20, 2026
Research
/Security News
Popular Rust Crates Compromised in Build-Time Supply Chain Attack
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.
By Socket Research Team - Aug 20, 2026