tab
Agents pay per call over HTTP 402 and x402: 8,600+ API routes, signed budgets and receipts.
3.0.0version the registry lists (2 published)
1reported issue
Yeslisted version affected
Hold off. At least one reported issue affects the version the registry lists. The package may have a newer release, so read the issue below and check before you install.
Registry name io.github.paidwithtab/tab
· Source code · Website
Reported issues
Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.
| Issue | Severity | Listed version | Reported |
|---|---|---|---|
| MAL-2026-18521Malicious code in paidwithtab (npm)Also filed as GHSA-vwm6-r9cc-qg37 | unrated | Affected | Nov 3, 2026 |
Versions in the registry
3.0.0 (listed), 2.3.1