Evidence row 62894

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://agents.citiviewgroup.com/v1/vulns"
    ]
  ],
  "name": "Citiview Agent Market",
  "owner_address": "0xd2bc1daa83f64729bfb3f825e690f3fce13e1aa2",
  "raw": {
    "accepts": [
      {
        "amount": "3000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:8453",
        "payTo": "0xD2bc1DaA83F64729BfB3f825e690F3fce13e1AA2",
        "scheme": "exact"
      },
      {
        "amount": "3000",
        "asset": "0x60a3E35Cc302bFA44Cb288Bc5a4F316Fdb1adb42",
        "extra": {
          "name": "EURC",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:8453",
        "payTo": "0xD2bc1DaA83F64729BfB3f825e690F3fce13e1AA2",
        "scheme": "exact"
      },
      {
        "amount": "3000",
        "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:137",
        "payTo": "0xD2bc1DaA83F64729BfB3f825e690F3fce13e1AA2",
        "scheme": "exact"
      },
      {
        "amount": "3000",
        "asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:42161",
        "payTo": "0xD2bc1DaA83F64729BfB3f825e690F3fce13e1AA2",
        "scheme": "exact"
      },
      {
        "amount": "3000",
        "asset": "0x79A02482A880bCE3F13e09Da970dC34db4CD24d1",
        "extra": {
          "name": "USDC",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:480",
        "payTo": "0xD2bc1DaA83F64729BfB3f825e690F3fce13e1AA2",
        "scheme": "exact"
      }
    ],
    "description": "Package vulnerability check for coding agents: known CVEs/GHSAs for an npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet or Packagist package version, with severity, fixed versions and the latest release (OSV.dev).",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "ecosystem": "npm",
              "package": "lodash",
              "version": "4.17.15"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "count": 4,
              "latest_version": "4.17.21",
              "package": "lodash",
              "version": "4.17.15",
              "vulnerabilities": [
                {
                  "fixed_in": [
                    "4.17.21"
                  ],
                  "id": "GHSA-...",
                  "severity": "HIGH"
                }
              ],
              "vulnerable": true
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "ecosystem": {
                      "description": "npm (default), pypi, go, maven, crates.io, rubygems, nuget, packagist",
                      "type": "string"
                    },
                    "package": {
                      "type": "string"
                    },
                    "version": {
                      "type": "string"
                    }
                  },
                  "required": [
                    "package"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1791910960/bazaar-icons/3353556b4881df8e.png",
    "lastUpdated": "2026-10-15T05:39:32.081Z",
    "quality": {
      "l30DaysTotalCalls": 2,
      "l30DaysUniquePayers": 2,
      "lastCalledAt": "2026-10-15T05:39:31.359Z"
    },
    "resource": "https://agents.citiviewgroup.com/v1/vulns",
    "serviceName": "Citiview Agent Market",
    "tags": [
      "security",
      "vulnerabilities",
      "cve",
      "dependencies",
      "npm"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Package vulnerability check for coding agents: known CVEs/GHSAs for an npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet or Packagist package version, with severity, fixed versions and the latest release (OSV.dev)."
}

What the leaf hashes

{"body":"cc6abce6e66703db53feeaf76665233c3caa51e6da59a971206c963b09d55e01","id":62894,"kind":"listing","method":"baseline/1","observed_us":1793025454031813,"prev":null,"subject":"x402_bazaar:https://agents.citiviewgroup.com/v1/vulns","subject_kind":"source_record"}

Proof

Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.