x402-trinity@0.1.3

High-risk behavior combination matched malicious policy.

Instantiate createX402Fetch without surcharge: false, then complete paid x402 requests.

Unconsented additional transfers from the configured wallet to the package fee vault.

Default hardcoded fee authorization and collector handoff.

The default buyer path accumulates 0.1% of successful payments plus a periodic flat amount. It creates a signed payment authorization addressed to a hardcoded vault and POSTs it to a package-controlled collector for settlement. Although code emits a notice and supports opt-out, the published README says taking a cut is structurally impossible and does not disclose the default charge; the MCP entrypoint also enables durable fee collection.

This is concrete package-controlled financial diversion from a user-configured wallet, enabled by default and contradicted by the README. There is no install-time execution, but runtime behavior warrants blocking.