@paystage/preflight 0.2.0 → 0.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/known-drainers.js +20 -0
- package/package.json +2 -2
package/dist/known-drainers.js
CHANGED
|
@@ -46,6 +46,16 @@ export const SOURCES = [
|
|
|
46
46
|
url: "https://www.0xcert.com/advisory/0xCERT-2026-0303",
|
|
47
47
|
retrieved: "2026-11-05",
|
|
48
48
|
},
|
|
49
|
+
{
|
|
50
|
+
name: "0xCERT advisory 0xCERT-2026-0314 (Loopscale attack campaign; EVM addresses named by Loopscale)",
|
|
51
|
+
url: "https://www.0xcert.com/advisory/0xCERT-2026-0314",
|
|
52
|
+
retrieved: "2026-11-07",
|
|
53
|
+
},
|
|
54
|
+
{
|
|
55
|
+
name: "0xCERT advisory 0xCERT-2026-0309 (CoreVault exploit; attacker EOA and exploit contract, BNB Chain per CertiK)",
|
|
56
|
+
url: "https://www.0xcert.com/advisory/0xCERT-2026-0309",
|
|
57
|
+
retrieved: "2026-11-07",
|
|
58
|
+
},
|
|
49
59
|
];
|
|
50
60
|
/**
|
|
51
61
|
* Small curated subset. Do not add addresses without a public citation.
|
|
@@ -101,6 +111,16 @@ export const KNOWN_DRAINERS = Object.freeze([
|
|
|
101
111
|
// also flagged on Base/Arbitrum/Optimism (0xCERT-2026-0308, per Bitquery)
|
|
102
112
|
// https://www.0xcert.com/advisory/0xCERT-2026-0303
|
|
103
113
|
"0xe485e7a70b1131216cb47ca4555c4bbb2c742478",
|
|
114
|
+
// --- Added 2026-11-07 NZDT ---
|
|
115
|
+
// Loopscale attack campaign, EVM addresses named by Loopscale (0xCERT-2026-0314; chain not stated by the feed)
|
|
116
|
+
// https://www.0xcert.com/advisory/0xCERT-2026-0314
|
|
117
|
+
"0xb7ec7ef24fd73f3000c651ca9d0fa45b61dcf854",
|
|
118
|
+
"0xb8959aca4e4c796a3bada66833eae60b1bc0bfb2",
|
|
119
|
+
// CoreVault exploit, BNB Chain: attacker EOA (sender) and the exploit contract it created
|
|
120
|
+
// (0xCERT-2026-0309; CertiK-cited transaction, on-chain)
|
|
121
|
+
// https://www.0xcert.com/advisory/0xCERT-2026-0309
|
|
122
|
+
"0xd3565b191b28b49cc517189b984dacdb1ff05304",
|
|
123
|
+
"0xc28cfeee046e1421e9dbfb2cf689074bf9f387e2",
|
|
104
124
|
]);
|
|
105
125
|
const SET = new Set(KNOWN_DRAINERS.map((a) => a.toLowerCase()));
|
|
106
126
|
export function isKnownDrainer(addr) {
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@paystage/preflight",
|
|
3
|
-
"version": "0.2.
|
|
3
|
+
"version": "0.2.1",
|
|
4
4
|
"description": "Evaluate x402 PaymentRequired against a local spending policy before an agent pays",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"type": "module",
|
|
@@ -13,7 +13,7 @@
|
|
|
13
13
|
}
|
|
14
14
|
},
|
|
15
15
|
"bin": {
|
|
16
|
-
"paystage-preflight": "
|
|
16
|
+
"paystage-preflight": "dist/cli.js"
|
|
17
17
|
},
|
|
18
18
|
"files": [
|
|
19
19
|
"dist",
|