w3bs.AccountStart building
PACKAGES / Profullstack

x402-client

Library and CLI that pays HTTP 402 x402 payment requests with a local key.

ThreatCrush · Malware flagged
INSTALLw3bs install profullstack.com/x402

No w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh

Get started

What to type once it is installed.

  1. w3bs install profullstack.com/x402Install x402-client and track it for updates
  2. x402 addressPrint the wallet address to fund (reads X402_PRIVATE_KEY)
  3. x402 fetch <url>Fetch a page, paying automatically if it answers 402
  4. x402 pass <url>Print a stored pass for a site, buying one if none is on file
  5. x402 passesList the passes on file

Every option: x402 --help · docs ↗

Malware scan

ThreatCrush found code shaped like malware: a hidden payload executed at runtime or secrets sent off the machine. Read the findings before installing. W3BS reviews flagged packages and delists confirmed ones.

Scanned
2026-11-01 22:56 UTC · threatcrush 0.13.30
Files
41 (installer + github.com/profullstack/x402-client)
Findings
3 medium · 1 low · 3 malware indicators
  • Malware indicator
    code sink reached indirectlysource/src/sealed.js:273js-indirect-code-sink · CWE-506
  • Malware indicator
    code sink reached indirectlysource/src/sealed.js:282js-indirect-code-sink · CWE-506
  • Malware indicator
    code sink reached indirectlysource/src/sealed.js:283js-indirect-code-sink · CWE-506
1 other finding (not malware)
  • low
    URL built from the Host headersource/test/helpers.js:50js-host-header-trust · CWE-346

Badge for your README

ThreatCrush: Malware flagged

[![ThreatCrush scan](https://w3bs.org/api/packages/profullstack.com/x402/badge.svg)](https://w3bs.org/packages/profullstack.com/x402)