
Research
/Security News
Laravel Lang Compromised with RCE Backdoor Across 700+ Versions
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.
arweave-unbundle
Advanced tools
A command-line interface tool for downloading and unbundling Arweave ANS-104 data bundles. This tool retrieves raw data from the Arweave network, unbundles it using the @dha-team/arbundles package, extracts exactly two data items, and saves them as JSON.
@dha-team/arbundlesgit clone <repository-url>
cd unbundle-ans104
npm install
npm link
If you prefer not to install globally, you can run directly:
node cli.js <arweave-id>
Unbundle an Arweave data bundle:
arweave-unbundler <arweave-id>
Example:
arweave-unbundler 1234567890123456789012345678901234567890123
Specify a custom output file path:
arweave-unbundler <arweave-id> --output custom-output.json
Check if an Arweave ID is valid without downloading:
arweave-unbundler validate <arweave-id>
Display help information:
arweave-unbundler --help
The tool generates a JSON file with the following structure:
[
{
"id": "item-id",
"signature": "item-signature",
"owner": "owner-address",
"target": "target-address or null",
"anchor": "anchor or null",
"tags": [
{
"name": "tag-name",
"value": "tag-value"
}
],
"data": {
"your": "json-data"
}
},
{
"id": "second-item-id",
"signature": "second-item-signature",
"owner": "second-owner-address",
"target": null,
"anchor": null,
"tags": [],
"data": {
"_type": "binary",
"_encoding": "base64",
"data": "base64-encoded-binary-data"
}
}
]
If a data item contains binary data that cannot be parsed as JSON, it will be encoded as base64 with the following structure:
{
"_type": "binary",
"_encoding": "base64",
"data": "base64-encoded-content"
}
The CLI provides detailed error messages for common issues:
$ arweave-unbundler ABC123_-abc123_-abc123_-abc123_-abc123_-ab
Starting unbundle process for ID: ABC123_-abc123_-abc123_-abc123_-abc123_-ab
Downloading bundle from: https://arweave.net/raw/ABC123_-abc123_-abc123_-abc123_-abc123_-ab
Downloaded 45632 bytes
Parsing bundle...
Found 2 items in bundle
Processing item 1/2...
Processing item 2/2...
Successfully wrote output to: output.json
Unbundle completed successfully in 2.34s
Extracted 2 items to: /path/to/output.json
$ arweave-unbundler validate invalid-id
✗ Invalid Arweave ID: Invalid Arweave ID length. Expected 43 characters, got 10
$ arweave-unbundler ABC123_-abc123_-abc123_-abc123_-abc123_-ab --output results/bundle.json
Starting unbundle process for ID: ABC123_-abc123_-abc123_-abc123_-abc123_-ab
...
Successfully wrote output to: results/bundle.json
Currently, the project includes manual testing scenarios. To test:
unbundle-ans104/
├── cli.js # Main CLI implementation
├── package.json # Project configuration
├── README.md # This file
└── output.json # Default output file (generated)
The code is structured for easy extension:
validateArweaveId()unbundleData()writeOutput()"Cannot reach Arweave network"
"Bundle not found with ID"
"Expected at least 2 items in bundle"
"Permission denied writing to"
--outputISC License - see package.json for details
Contributions are welcome! Please:
For issues or questions:
FAQs
CLI tool to download and unbundle Arweave ANS-104 data bundles
We found that arweave-unbundle demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.

Security News
Socket found a malicious postinstall hook across 700+ GitHub repos, including PHP packages on Packagist and Node.js project repositories.

Security News
Vibe coding at scale is reshaping how packages are created, contributed, and selected across the software supply chain