Fallout

Recently scanned open-source supply-chain artifacts and public lab uploads.

HOT PARTICLE 2h ago arch hostile

bedrockboot 2.1.9.95-1

“Industrial Grade Minecraft Bedrock Edition Launcher for Windows & Linux”

100% confidenceContains DLL injection and API hooking code

d3726b3769543da25205b05b0325a54f4dc55f6c0aa190e887178daf552a751c H(F)Md₃(BkPa)
Evidence fetch.dependency-verdict View full analysis →
js2wasm Direct AOT compilation from JavaScript and TypeScript to WebAssembly GC (unscoped proxy for @loopdive/js2) 2h ago javascript
0d67610ea6bc5ade9866010269fde404b077433771e6dfc1a412f4db3ce583a5 H(Os)Md(Pa₄)
48% Legitimate JS-to-WASM compiler tool
Tempo.Blazor.Signing 2.5.3-ci-20260721185803 Signing workflow components for Tempo.Blazor, including PDF template design, recipient roles, signing form runner, document comments, verif… 4,426 installs 2h ago dotnet
e2f5493c1314f08f875aae38a59932c6dc0e62acf8690d1deaa52a306e3549d9 H₂(CrDb₂)Md(Pa)
81% Legitimate Blazor component library package
Highlight Keywords npbocibpmehdlhbhemncdkkeemfkmaap Highlight keywords on web pages, supporting various language characters 2h ago chrome
ee9df477c0ab766861e5c0ad00918c7a644ebc9eb2ad101bbb2ef5dbd0194b8b H₄(DbPoU)Md₂
59% Legitimate keyword highlighting extension
LibreMetaverse.Voice.Vivox 3.1.2 Vivox voice chat integration library for LibreMetaverse, enabling connection and communication with the Vivox voice service used by Second… 17,306 installs 2h ago dotnet
a4a75624515ad2d4ff9a7753618c767c2acb64e27e47d30472b98e280ed2d6f3 H₃(Cm₂Db₂Po₂)Md(Pa)
85% Legitimate .NET library for voice services
LibreMetaverse.StructuredData 3.1.2 Structured data serialization library for LibreMetaverse, providing parsers and writers for LLSD (Linden Lab Structured Data) in binary, XM… 452,254 installs 2h ago dotnet
9b33ecba542adb16491236cf7ca0075e4b77fb53301b7ba5044557d1f3ef3e72 H₃(CrDb₃Po)Md(Pa)
85% Legitimate .NET library package
welo 0.1.5 Weighted and Standard Elo Rates 2h ago r
3e149199c45fd4e13c8b9dd5b4ed5ed3fdb96482ad3f2f3a6426027c592845d7
twoway 0.7.0 Analysis of Two-Way Tables 2h ago r
62117b214468930d2a7dea171b048981916705f5a811e77bbd2a649eb830b6c8
Queenstown 1920x1080 nplemgijfnjjnanbhkgdfcbobddiimpi Photo from 떠오르는밤/ Original: https://grafolio.ogq.me/project/detail/8746a9a0238e4d859d55d5b4b16c83fa 2h ago chrome
1face0183b9e1da862f4ec376dc681cee6517ff4ae69f698cda6c9c6dbf5574b
pymomentum 0.1.114 A library for human kinematic motion and numerical optimization solvers to apply human motion 1,465,036 installs 2h ago python
c0c30d7180136e0a0bd7bdfb2c4dc671bc969aa0e22b1c8df24ec13d6541c992 H₄(DsF₂OsPo)Md(Bk)
agentmsg Messaging between AI agent sessions (Claude Code, Codex, ...) — end-to-end encrypted before anything leaves your machine 2h ago javascript
f1274746c59a16f48297c28b63d5eb1374f9d781e757cc3a5192528641982f0e H₄(Cm₇Cr₂Db₂F₄)Md(Pa)
71% Legitimate encrypted messaging CLI tool
cody-special 1.0.0 High-precision error functions and normal distribution (Cody's algorithm) 13 installs 3h ago python
b4460bc22f1342cbb571181be19fb7d7071cb8fc8b06e19a059553ebd364059b
ask-skills 0.4.0 Discovers, validates, and formats agent skills from project directories, user config, and installed gems. Ships built-in skills (codebase e… 944 installs 3h ago ruby
331a2843bddf5987754ecc939bcc613586eed10a1187995c779c53b37f0c81e8
Baze 0.1.4 baze/baze Language support for Baze (.baze) — syntax highlighting plus diagnostics, inferred-type inlay hints, hover, go-to-definition, completion, s… 2,530 installs 3h ago vscode
d9927d571f3183fcb8a8437f876cb7a8f05a416431d36e57eaf304ba5d3f3ee3 K(Li)O(C)H₅(Cm₆Db₆F₂Os₂Po₆)Md₃(LiPa₄Pt)
52% Legitimate VS Code language server extension
Sticky Notes medfanohdjapccnnodkilmnfcohjfiaj Beautiful sticky notes for any webpage. Simple, clean, and delightful. 3h ago chrome
d81148647f69c2fc4c6cc59735569708e4e64421f48ec22471ca62b06717a58a H₆(Cm₅Db₂PoTiU₅)Md
56% Legitimate sticky notes browser extension
g4-data-mcp 0.1.3 MCP de dados do G4: roteia perguntas para o agente comercial (Looker/CA API), Genie ou SQL puro do Databricks, em nome do usuário. 3h ago python
2c0e265a301ff8e9197ccdcdb763f7505c86b1aecb8345d170e2d74e8e7342f6 H₄(Cm₈Db₂FPo₂)Md₂(Pa)
59% Legitimate Python package with standard OAuth
fhir-code-lint 0.1.0 Validate FHIR bundle codes against their authoritative sources: catch wrong, deprecated, and mislabeled clinical codes before they bite. 3h ago python
6186d4c2dbbba1dffd0468aff7b57be79620f84bb10d4baf4638447a67f2eab9 H₂(CmDb)Md(Pa₂)
eQuantic.Core.Data.CosmosDb 5.5.0 Native Azure Cosmos DB implementation of the eQuantic.Core.Data contracts — the Cosmos SDK directly, no Entity Framework, with first-class… 3h ago dotnet
9ed8647ece4baded2612e7d4e41b5594681b770d3369f46812cf1042ee8e4822 H₂(DbPo)Md(Pa)
83% Legitimate .NET NuGet package
KeyMint 1.3.1 License key validation, activation, and management for .NET/C#. Supports node-locking and offline licensing. 909 installs 3h ago dotnet
7eada5997b6553e42fb2a4b43ea17bf3691c9e539c9915bb8530454e41785d1d H₆(CmCrDb₃FOs₂Po₃)Md(Pa)
71% Legitimate SDK with standard hardware ID logic
Xperience.Relay.Kentico 0.3.10 Kentico Xperience handlers for Xperience.Relay commands (move, get-page, get-content, ...). Depends on the Kentico Xperience SDK -- deploy… 1,897 installs 3h ago dotnet
3fb7f2ad12d91d29a7b8dbd9fe1fdcf4e4bfa29cd09d4233e11862e25177b2c8 H₃(CrDb₅Po)Md(Pa)
84% Legitimate NuGet package for Kentico
Rambla 0.3.1 High-frequency observable state for real-time .NET desktop applications. Thread-safe updates, batching, coalescing and diagnostics for UI s… 2 installs 3h ago dotnet
44a314ee5c25ba31c570c5c829a48dd29dc0a74e9bba55ed97cfc593d36f7951 H₂(CrDb)Md(Pa)
78% Legitimate .NET NuGet package
FluxGuard 0.11.2 LLM Guardrails library for .NET - Secure by Default. Includes L1 (Regex) and L2 (ONNX ML) protection layers. 1,077 installs 3h ago dotnet
8a473a1c11715d5525138d789cfdbfeafe76a619273f157a0ff69c14ecde6e38 H₂(CrDb₂)Md(Pa)
79% Legitimate AI security library
Shift Translate 2.0.48 shift-translate Быстрый перевод введённого и выделенного текста с озвучкой, всплывающим окном и поддержкой русского, украинского и английского интерфейса. 3h ago firefox
7ab5ada1158fbc3bc7cf4e2da450271370e263f031bffaf05a1dfa4b94d2049d H₅(Cm₅Db₅PoU)Md₂
68% Legitimate browser translation extension
raven-guard 0.3.2 Security analysis engine — catches vulnerabilities before they ship. CLI, pre-commit, CI/CD, AI-powered, Raven-connected. (CodeGuard Copilo… 3h ago python
2a843ec613a5e02cfe51818a73f2f744ec112b1792bcefeeaaa41c8ffb770f8c H₆(Cm₈CrDb₅F₂Os₂Po₄)Md(Pa₂)
61% Legitimate static analysis security tool
VPN 9.6.1 sandvpn Time to Level Up Privacy with SandVPN: FREE, FAST VPN PROXY! Bypass Geo-Blocking and be free and anonymous online with our Safe and Secure… 86,398 installs 3h ago firefox
d5f6542ded082c0bc57203b032b2750f649bcb2b351c17dade22d138e398e6f4 H₇(Cm₁₄Db₈Os₃Po₂TiU₄)Md₄(LiPa)
45% Legitimate VPN browser extension
My Cognitive Bias cmapeoagadpppgajnicpagcgpdklfhch A cognitive bias explained every time you open a new tab. 979 installs 4h ago chrome
bdf9d029014ed75176b1ac0e603523054e8d7c44f4d18761940db604f3bb7fc8 H₄(Cm₂DbU)Md
36% Legitimate educational browser extension