POST the exact package-lock.json bytes. Amount is 50000 atomic USDC on Base only...
https://horizonpulse.dev/api/vuln/lockfileOverview
POST the exact package-lock.json bytes. Amount is 50000 atomic USDC on Base only. The EIP-3009 nonce is lockfileBindingNonce over those bytes, this origin, POST, /api/vuln/lockfile, payTo, asset, value, validAfter, validBefore, and snapshotId. Signing instructions: https://horizonpulse.dev/lockfile-signing. A client-chosen random nonce is rejected.
Protocol
x402 (POST)
Price
$0.05
Payment Asset
USD Coin
Payment Network
eip155:8453
Category
uncategorized
Provider
Horizon Pulse
Source
bazaar
Indexed
2026-11-09 04:07:46
Health
Status
unknown
Latency (p50)
—
Uptime (30d)
—
Reliability Score
—
Last Checked
Never
Last Healthy
Never
Consecutive Failures
0
x402 Payment Validation
Payment Requirements
—
Asset Verified
—
Facilitator
—
Input Schema
{
"body": {
"lockfileVersion": 3,
"packages": {
"": {
"name": "<package name>",
"version": "<semver>"
}
}
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Output Schema
{
"example": {
"bodyKeccak": "<keccak256 of the exact request body>",
"charge": "recorded",
"charged": true,
"ok": true,
"phase": "settled",
"snapshotId": "<snapshot id>",
"triage": {
"attribution": {
"applies": true,
"noticeForGithubRecords": "<GitHub advisory notice>",
"reason": "<attribution reason>"
},
"counts": {
"findings": 0,
"lockEntries": 0,
"unknown": 0,
"withdrawnSkipped": 0
},
"disclaimers": [
"<disclaimer>"
],
"findings": [],
"ok": true,
"privacy": "<privacy notice>",
"provenance": {
"asOf": "<ISO 8601 time>",
"coverage": {
"complete": true,
"ecosystem": "npm",
"reviewedOnly": true,
"source": "git-reviewed-npm",
"synthetic": false
},
"digest": "<snapshot digest>",
"snapshotId": "<snapshot id>"
},
"schema": "horizon-pulse.vuln-lockfile.v1",
"unknown": []
},
"tx": "<tx hash>"
},
"type": "json"
}