addrbookFor publishers
← The evidence ledger

Evidence row 70543

Observed , by baseline/1.

Kind
listing
About
source_record x402_bazaar:https://api.x402node.dev/npm/vuln
Recorded
Previous row
None: the first of its kind about this subject
Body SHA-256
4a5b2fb37021ebb975587fe839b9fc47f50aa6ecdda91be052dc793dae10229a
Leaf
0x5ed4baa625528eb3db82cc39b08b916b4acfa166df97fa724402e67f27df49f3

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://api.x402node.dev/npm/vuln"
    ]
  ],
  "name": "api.x402node.dev/npm/vuln",
  "owner_address": "0x4466d4a84b7c49a6a094ec6eef4a0712d6dd125e",
  "raw": {
    "accepts": [
      {
        "amount": "8000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0x4466d4A84b7c49a6A094ec6eef4a0712D6dd125e",
        "scheme": "exact"
      },
      {
        "amount": "8000",
        "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
        "extra": {
          "feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
        },
        "maxTimeoutSeconds": 300,
        "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
        "payTo": "9urRvUx69HqAopg1JGV9P9wR7JdKoztzdkuNyJ8Eo1up",
        "scheme": "exact"
      }
    ],
    "description": "Query Open Source Vulnerabilities (OSV) database for known CVEs in an NPM package. Returns vulnerability list with severity, summary, affected version ranges, fix versions, references. Use ?package=react and version=18.2.0. Backed by Google-maintained OSV (industry standard). Accepts payment on Base or Solana — either network works.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "version": "string"
            },
            "type": "http"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "version": {
                      "description": "Version (optional)",
                      "type": "string"
                    }
                  },
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-06T00:42:50.891Z",
    "quality": {
      "l30DaysTotalCalls": 1,
      "l30DaysUniquePayers": 1,
      "lastCalledAt": "2026-10-06T00:42:50.554Z"
    },
    "resource": "https://api.x402node.dev/npm/vuln",
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Query Open Source Vulnerabilities (OSV) database for known CVEs in an NPM package. Returns vulnerability list with severity, summary, affected version ranges, fix versions, references. Use ?package=react and version=18.2.0. Backed by Google-maintained OSV (industry standard). Accepts payment on Base or Solana — either network works."
}

What the leaf hashes

{"body":"4a5b2fb37021ebb975587fe839b9fc47f50aa6ecdda91be052dc793dae10229a","id":70543,"kind":"listing","method":"baseline/1","observed_us":1793025480645702,"prev":null,"subject":"x402_bazaar:https://api.x402node.dev/npm/vuln","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).

  1. 0x5ed45ecce326c8c516721d3c225247060c8b3f6b95cf4c8148350b5584670759
  2. 0xe7f309b397fc4a9707327f78eb80ffee659fb48806e429b586a05f59381188cc
  3. 0x5166fdfd3f5cc0d707518e1aeecb0e45b756ef3805b4ce7c31adc3b5c74428c1
  4. 0xfb5341fcfa3c8908748225b4b33fc88657725cb2c3af93a10f0a96796c452717
  5. 0x4456ed7148a04e13b8bdb4525b5b55164cafd04028599f761c65378ad9c7571f
  6. 0x0e628bdf93b53ba49aaa1d6c3db9e362aa8b7969d646df9f7234a246d7f5c9f7
  7. 0x9ab0cd4a25e862e5ba8705f240250dc42b30bbe88d8ca06a41b2fc14330b2795
  8. 0x557ead6b2681338e93977a24f09de5b639e08301c7e543f1507fa6f5ca9f96ae
  9. 0x999d703b352a38603d62e41f9b45b41c08519f950856709c0d04ae71a108dad3
  10. 0x8a5cdded34bdb5e67f8d0ea283d9fd99467d39dd780b50b89398e9d04700430a
  11. 0x8088b42b1c11cbc36b44c4b08d0759628b035caa2738251cd28ed0e7242e65bc
  12. 0x5ab25c2fdf4695beeefb0726a5fc73e189b68f8d9fb2a3f6321ff7223b166fdd
  13. 0x66883b42f4167ade51c4909f050c5478524e23786fb0b5c48bd1a53580960a68
  14. 0x216cebb9ae5414599109a02297c4817d7d1c6b1394afeb97efe38e32f0053974
  15. 0x7726154b91b2ad65b13849ef6cb6443b1f0ff113a3089c9bd5f2bcfc16be099d
  16. 0x47b89901b0f07938a6b9a66ddf35683903f79d756a7c7763665fd632758b08d0
  17. 0x9a83be955a206deb65b995adfd92c58fa31c95fbbf926bd199d300e70b08b26d
  18. 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
  19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
Day root
0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
Chained
0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
Published
On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae

How to check it · This row as JSON