b2eec29443acdb3c2fbdb9873d6f595bb7f77ca422b04431c27d0455aec34adb
H(Cm)Md(Pa₄)
Fallout
Recently scanned open-source supply-chain artifacts and public lab uploads.
Files indexed
89,785,264
1dc84676ec244df14fc79350933c55a5c6b037d013ede5b238aaa69904c98d5c
H(Cm)Md(Pa₄)
2a5b94471749021ffcd19ee97fa206314d810c2ca1c32614abf4556b29d4026d
H(Cm)Md(Pa₄)
e2056907c8e6811d740a8dee73172f76743a84ed14c43e08ff8d359326570914
H(Cm)Md(Pa₄)
eed54b9702f9025981592cd05b4098bc4b4c3e1b5ebc3554ae2876630c8da7c3
H(Cm)Md(Pa₄)
6f8058357a552982fc190386b1792bde9d52802022f885e2404cd7fc1ce9862d
H(Cm)Md(Pa₄)
72ef6604048309ded3de10e4b720ffb4f901a475768c137ff3964fa8adbaa89c
H(Cm)Md(Pa₄)
@rolldown/pluginutils 1.0.0-rc.3
A utility library for building flexible, composable filter expressions that can be used in plugin hook filters of Rolldown/Vite/Rollup/Unpl…
4d ago
javascript
72deb152390207199b77318960e6042e49c873c1b81eceeb0d1d9fe78ac0d216
H(Cm)Md(Pa₄)
6aa341a5f6c015e11dc81d9310f4747e0de1a3bae5d895257370f8bdf6075d81
H(Cm)Md(Pa₄)
f1ba9ff4f224a170d4c795ae9125abe5df6798b4a7dadf0719beeb3a4c2f874a
H(Cm)Md(Pa₄)
1ec69b6fcfcd2f8787e6927845bf5c2806fba0160026611f27ab34e5b25f832d
H(Cm)Md(Pa₄)
958e9e807071f827f01f096a965c15a986f2c1735a211cca33c927abd36dcee0
H(Cm)Md(Pa₄)
be06a7fca03cf431383d12ea0f30618a684fc835324b89abf38fc522b8f02ede
H(Cm)Md(Pa₄)
80ca8c4a6c57c1b6e19ec238b69b6fa75a43aa412fcc0cc7dc56faf0001dfa45
H(Cm)Md(Pa₄)
miaoda-game-euchre-rules
Verified four-player partnership Euchre rules with bidding, bowers, legal play and scoring.
5d ago
javascript
0aea68b1c18bc7969e49593dd08970258894e27103b039dc14aee5b959309588
H(Cm)Md(Pa₄)
35%
Legitimate card game rules library
0b0c852a345a81e7be5fb72da4d7f8d1666d2abfb558cd52f74e67c6ee227551
H(Cm)Md(Pa₄)
8dfcb41a0b0d5d6907b2e62cddd5d1458ea0fa0540906acc300d89316222d4bd
H(Cm)Md(Pa₄)
stylelint-plugin-tailwindcss 3.0.3
Stylelint plugin utilities for Tailwind CSS and utility-first selector rules
Jul 28
npm
80725655906d15ad26d99300262e48774521bc6a4b9b8bdb31b9d7ea5ba93d7e
H(Cm)Md(Pa₄)
@lensmcp/core 1.16.26
LensMCP core — event bus, resource store, graph store, and pattern detectors.
Jul 27
npm
352b35d5f00725f586fb55b39fbc3e2a991b6e0b02846b01431a93bcee23a71d
H(Cm)Md(Pa₄)
d22a3fa4dc9afe140bcbeca8c56ffaefd4419d0bef3f9198708a19d898618e51
H(Cm)Md(Pa₄)
@vue/devtools-shared 8.2.1
> Internal utility types shared across @vue/devtools packages.
Jul 25
npm
aff57a947a1bc98e55e6c8eba82f79882e8d599537290c2ade317f88e7b5bcb6
H(Cm)Md(Pa₄)
94e27381f44ff75f965fe5669117662d9140b5d4dcb6fc91f2a5f776eef8d285
H(Cm)Md(Pa₄)
@agent-vm/control-protocol-contracts 0.0.120
Shared Zod contracts for agent-vm Socket.IO control sessions.
Jul 24
javascript
cf4f516e2cfab6974d69397b9ee42277d1c66c477c1f8dcce6b23d6bd9879aaa
H(Cm)Md(Pa₄)
@contentful/experience-design-system-types
Shared TypeScript types, Zod schemas, and JSON schema validators for the Contentful Experience Design System import pipeline.
Jul 23
javascript
c6d5cc60d6279fffa717c49d2a9a193bf93ea00f28976ad45d25c84c7ac7667e
H(Cm)Md(Pa₄)
@agentoria/usage
Provider-neutral LLM token accounting and cost. Zero deps, isomorphic.
Jul 23
javascript
c54e6c149d7fb74f90f1b953ea789c6b4f48b1c09f1337b30ad22af66ce57dee
H(Cm)Md(Pa₄)
527cc19bb709c3df71a73a9531177d3f027c2e2f552d0c9d1d88e7c9c22d994d
H(Cm)Md(Pa₄)
d62200f332dfab070a8948de07c08c36cbccc6e5f3f76b675c877beb1e12a855
H(Cm)Md(Pa₄)
c461ed3abe766fa64aeba68408503da838edb497bee177bc7b23ae78c26c6dc5
H(Cm)Md(Pa₄)
b797aa680a5a03cdcb2259ed175b22c223ac863db1d94a1696fa296244a3c3d9
H(Cm)Md(Pa₄)
@rizom/theme-default
Simplified editorial default theme — warm neutral surfaces with restrained Rizom-inspired accents
Jul 23
javascript
ef0306cf7415dc98b5f84d0871a2c60aec3d3824aef3a5419a08b79ca4997dbf
H(Cm)Md(Pa₄)
@rizom/theme-rizom-ai
Consolidated rizom.ai theme — rev-5 design system: deep indigo ground, brass/ruby/moss room accents, warm off-white light mode, Fraunces +…
Jul 23
javascript
548480de62959aea670226d0da4baf50419071a44012f3ba04d81c3b23270911
H(Cm)Md(Pa₄)
@eslint-react/eslint-plugin 5.18.0
ESLint React's unified ESLint plugin that combines all individual plugins into one.
Jul 23
npm
1acac4225c6df0d2f147f988a143554de397d4101e811d46ab7e41e623477bec
H(Cm)Md(Pa₄)
@teeras/afterhours-mcp
Account-gated MCP tools for private coding-agent usage and AI-life balance.
Jul 22
javascript
3a92d39ed5b2a136d5c998f84d83ad189408b3478a6fa48701cdb6af97b3585b
H(Cm)Md(Pa₄)
41%
Legitimate MCP server package
32f39830e1f8453a488e535253fc7fab35196749ad76ad31c2a856f972b80e6d
H(Cm)Md(Pa₄)
@theholocron/holocron-plugin-vercel
Holocron plugin for Vercel. Implements the deployment capability against the Vercel REST API.
Jul 22
javascript
dc4ddd52c0b58376795ef06c261ca0621f08f8c8d10ba4787a4eb859d95a6f16
H(Cm)Md(Pa₄)
804ea953af7d9e3234be929273c6c8f02965d059c5d9f2529de3895bc9bdcc7d
H(Cm)Md(Pa₄)
@rizom/theme-default
Simplified editorial default theme — warm neutral surfaces with restrained Rizom-inspired accents
Jul 22
javascript
8115ab5f8a944f22a03fab294cbdc25f029459da754bdbb164b0ffc223ab3598
H(Cm)Md(Pa₄)
4476bee22f5ef26f73303fb4c08ad5b9a0f1d2312397770987c6bdf36a0a8e63
H(Cm)Md(Pa₄)
@rizom/theme-rizom-ai
Consolidated rizom.ai theme — rev-5 design system: deep indigo ground, brass/ruby/moss room accents, warm off-white light mode, Fraunces +…
Jul 22
javascript
31f0e094e68583901ba8cb889eb37b0b0ba8a9bd1b67eac208c71df759e144ed
H(Cm)Md(Pa₄)
37%
Legitimate CSS theme package
29fb19d894adee6f192e726c088b7447645d9171fb2368511f8bb426f695477f
H(Cm)Md(Pa₄)
@moltcms/static-hono
Hono JSX and Hono app renderer adapters for moltcms static sites.
Jul 22
javascript
d63a687dfe29314ce73fde94739d1b3744f2c7fa7122cac833257a9d48e75bae
H(Cm)Md(Pa₄)
34%
Legitimate npm package with minor findings
1fbf4b756cd96362de2cbc9a94b1a00a876ae842905340e034df4b3f566315c0
H(Cm)Md(Pa₄)
@rizom/theme-default
Simplified editorial default theme — warm neutral surfaces with restrained Rizom-inspired accents
Jul 22
javascript
ea3d164a7ef29b4021f6c4c169f79f5d7e968878cb8dedf35b407b85dccac558
H(Cm)Md(Pa₄)
35%
Legitimate theme package
ce688299e978e690076da2536ae7af6bd6cdd63e4b1ed9c2a7c51fbe6af34766
H(Cm)Md(Pa₄)
@rizom/theme-rizom-ai
Consolidated rizom.ai theme — rev-5 design system: deep indigo ground, brass/ruby/moss room accents, warm off-white light mode, Fraunces +…
Jul 22
javascript
f4158cdff7e485d1dfb3b52c6487169ac1f3b7ec1fce1c4027b7501039a821ca
H(Cm)Md(Pa₄)
37%
Legitimate CSS theme package
1b24ae45219cee91f21e57923d5dac6b36d966cbb6ca4d47d02b65452c875aca
H(Cm)Md(Pa₄)
427625590205147b660d9be93ed3b864802078632469dfcf7daca5f30685c2c4
H(Cm)Md(Pa₄)
@rizom/theme-default
Simplified editorial default theme — warm neutral surfaces with restrained Rizom-inspired accents
Jul 22
javascript
5610cd8d1abc9d0fc0aed480754d222975040a261f4a8f9513fec380ce05abfb
H(Cm)Md(Pa₄)
35%
Legitimate theme package
@rizom/theme-rizom-ai
Consolidated rizom.ai theme — rev-5 design system: deep indigo ground, brass/ruby/moss room accents, warm off-white light mode, Fraunces +…
Jul 22
javascript
f550d51d960ab9be797ebf91b700ee6213472873bfa4bc5bbfba370362562a8b
H(Cm)Md(Pa₄)
42%
Legitimate CSS theme package
ef08609a71c5732629e43b0aebe87d43fce521e5198f35b55704a33eb044f47d
H(Cm)Md(Pa₄)
@tpsdev-ai/langgraph-flair
LangGraph BaseStore adapter backed by Flair — durable agent memory with crypto-pinned identity, federation, and cross-orchestrator portabil…
Jul 21
javascript
bbaf5ac8add73376de6546435b3efe299176c10bfd7a1bed48ab249d738bf248
H(Cm)Md(Pa₄)
37%
Legitimate npm package metadata
@flighthq/scene-resources
Caller-driven resolution of scene-format texture resource references into live ImageResources — discovery walk, resolution policy, cancella…
Jul 21
javascript
4b9e27dd12dee0292024a134940fb32c9ad74ea076fe618868eade41bd67103c
H(Cm)Md(Pa₄)
@dokus/contracts
Validated semantic render contracts and canonical DKSD execution-plan contracts.
Jul 21
javascript
df141e99b6eda5b1941ab7cc7746e3fb5e5ccf356f06113db171e75732127a81
H(Cm)Md(Pa₄)
37%
Legitimate npm package with standard metadata
f7d40a761d462b91c37631d8ad425ca27ee309e1442a87892ec7293112d1a040
H(Cm)Md(Pa₄)
43%
Legitimate npm package metadata
@rizom/theme-default
Simplified editorial default theme — warm neutral surfaces with restrained Rizom-inspired accents
Jul 21
javascript
59df9c19f66b80712683b04a4ddcd233b0490864a5d59b23d5866a2511421d07
H(Cm)Md(Pa₄)
41%
Legitimate npm theme package
@ts-cloud/aws-types
AWS CloudFormation resource type definitions (without AWS SDK)
Jul 19
javascript
5f881ac91b55d34ef46d45e48046beeef0fc314b4a58cc652715d2155107bab3
H(Cm)Md(Pa₄)
97ce0d01ebe8d3303e4a138600430b9ece47c919b70492f81d591d682f006078
H(Cm)Md(Pa₄)
46%
Legitimate npm package metadata
@ts-cloud/aws-types
AWS CloudFormation resource type definitions (without AWS SDK)
Jul 19
javascript
d3c567e2fa662bbb16647292a620019589c4c4e71facbeb946fb8f5168b7e785
H(Cm)Md(Pa₄)
a19f4e334e97f76137cf25121e60be2b4168f88b5bd009ce2341f233df7503d2
H(Cm)Md(Pa₄)
42378541cef43f809e9b8d315b4de78e6ba2eef9f2a7a5de1ed5ffaf17b6b35f
H(Cm)Md(Pa₄)
37%
Legitimate npm package metadata
@openrfid/websocket
Real-time WebSocket broadcasting server plugin for OpenRFID Simulator.
Jul 19
javascript
3815d38393ea2c8603d0343c4d3bf812ee3bded584f87ea7101b277a466222d5
H(Cm)Md(Pa₄)
35%
Legitimate npm package metadata
@composius/payload-plugin-health
Health check endpoint with optional custom checks
Jul 19
javascript
447f9a43a0034b3ed3718e6d1d40f5a86764c800d1d3b6f91dbf6e0091d68572
H(Cm)Md(Pa₄)
36%
Legitimate health check plugin
3c7e2c5e41dd4f7c4d5728a781576067b2915ed1e8d439a2567cc9d0ae0b6547
H(Cm)Md(Pa₄)
cachetta
File-based caching for TypeScript. Part of the [Cachetta](https://github.com/thekevinscott/cachetta) project, which provides the same cachi…
Jul 18
javascript
6e849fcf6852fc613429bac33240c6c792064f9bf5797429a253f58741d16a1b
H(Cm)Md(Pa₄)
37%
Legitimate npm package with standard metadata
@kb-labs/quality-contracts
Type-safe contracts for Quality Plugin. Types, schemas, and constants for monorepo analysis and quality checks.
Jul 18
javascript
d8dc6c5ba28da7928befaba2bf9e38f5309a599c6cf4b134bb50df4df2530427
H(Cm)Md(Pa₄)
39%
Legitimate TypeScript package metadata
0d7c46cda3afce10e61a80916071f1d2e497bf65ad16ad2d983c050c07bd3bbf
H(Cm)Md(Pa₄)
@kb-labs/plugin-contracts 2.98.0
Plugin System Contracts - Pure types with 0 runtime dependencies
Jul 18
javascript
0c6fdffe43a9bf885aeda1fa2a851c8be45b8b722abd19c48844a39d96f0cf34
H(Cm)Md(Pa₄)
617cc81f6d37cfa666a02a7c2332cfa2833723b65f51aebfab888a1fc90b054c
H(Cm)Md(Pa₄)
36%
Standard npm package metadata
defb52e70beb8dcb4dc375788351269821a0d6f70d2f8bfa5c7602021e3cfb17
H(Cm)Md(Pa₄)
35%
Standard npm package structure
@archward/eslint-plugin
Deterministic DDD + clean architecture ESLint rules for TypeScript backends.
Jul 18
javascript
e1fb234d60bb9cbc84269857482245e43d9d658f4d5afacfc94f87879be039e6
H(Cm)Md(Pa₄)
38%
Legitimate ESLint plugin package
@lostcoords/lumi-reader-react
React 19 wrapper for @lostcoords/lumi-reader-core: mounts the reader engine and bridges the neutral store + SettingsPort to hooks
Jul 18
javascript
723bd783520332752218d367c85f96a2ae1f2be0f45a752e415695adbfd9a28a
H(Cm)Md(Pa₄)
32%
Legitimate React wrapper package
d205dfcd40e0080ce361466d20999db483d05a9bdb573ade13d9680cf2cb2de1
H(Cm)Md(Pa₄)
8af7e4f03c0d3b5df021fcae281089bfcafcadce02325ae466126c4da3fcaac4
H(Cm)Md(Pa₄)
768633419b64fcc5ac0e0d4c7a66a4b62e2ac3dad49a2bf703c676c148054f0d
H(Cm)Md(Pa₄)
@scalar/openapi-upgrader 0.2.11
Upgrade OpenAPI documents to the latest and greatest version
Jul 17
npm
f75d107f39600877ebe379bbc344ef89b50d60953e1381c09e97e1d161702195
H(Cm)Md(Pa₄)
@bitblit/ratchet-warden-server
Typescript library to simplify using simplewebauthn and secondary auth methods over GraphQL
Jul 17
javascript
6628122769cb19bc6c55b76e6ac74a91d590bd4f1d16c6cec8326089ed2ed7ad
H(Cm)Md(Pa₄)
1fb68a9a966e93c66328d07705cea4ab6cb6f0a2c6f4aeb8f47549c81e6d89fd
H(Cm)Md(Pa₄)
816f3a5d3f340c6b6c96c3bca52914a2bb5d35bf2415b79de83ca6e2d2b4d9c6
H(Cm)Md(Pa₄)
@ts-cloud/aws-types 0.7.30
AWS CloudFormation resource type definitions (without AWS SDK)
Jul 16
javascript
f31286af69ecd64746d35387c9ae19e01f0b54f687e36a6874f8c5a03e8130b7
H(Cm)Md(Pa₄)
edc75837eca9418fb454ae180f66a86b7ad2b2ccbf404eadafe4ea1cc04b4765
H(Cm)Md(Pa₄)
dec3c45cf6be3a1b5f9cc04a15c75c5975c212b8eb96a2338d8e434f70404fc0
H(Cm)Md(Pa₄)
@storm-software/tsdoc
This package contains shared TSDoc configurations used in Storm Software projects.
Jul 16
javascript
405736d8ec0d2eb746f512622e666a19a9e5135801bf59c919d9e489aa89aab4
H(Cm)Md(Pa₄)
80c6d3948733867ed6b8eb0692b06600facf83b95a84028c29df30c1f970c02e
H(Cm)Md(Pa₄)
@atlaskit/editor-plugin-content-format 6.0.0
ContentFormat plugin for @atlaskit/editor-core
Jul 16
javascript
5aa5a82ca6fb3506cf8dda081ef5db8cc3b1753fba5f6f55c776d839950033d2
H(Cm)Md(Pa₄)
@atlaskit/editor-plugin-user-intent 10.0.0
UserIntent plugin for @atlaskit/editor-core
Jul 16
javascript
d87f3ff3433a1572690635078a03e02924c6cc07bfdc87c06a83769cfe60042e
H(Cm)Md(Pa₄)
@scalar/openapi-upgrader 0.2.10
Upgrade OpenAPI documents to the latest and greatest version
Jul 16
vscode
62fc39240d381206e97fc6705befae51dec42ecb5099a2bebfd0d349367a6fb8
H(Cm)Md(Pa₄)
@agentsworklog/core 0.5.0
Shared domain types, zod schemas, and constants for AgentsWorklog (the source-available core).
Jul 15
javascript
d8a8012980501d36acd7d5c6cf4a5d5f9418dcc9165db5ae21c323e622192c8c
H(Cm)Md(Pa₄)
@eslint-react/eslint-plugin 5.14.10
ESLint React's unified ESLint plugin that combines all individual plugins into one.
Jul 14
go
22ce1a2a40a47016ba4c8a44c29cc94fc5f9d70585311c1b57d8726a3d59be13
H(Cm)Md(Pa₄)
@o3r/eslint-plugin
The module provides in-house eslint plugins to use in your own eslint configuration.
Jul 14
javascript
a5e701e452a9b1f5dd6511b92a74afa281df326d1d480e4e141bfae63f38e47f
H(Cm)Md(Pa₄)
35%
Legitimate ESLint plugin package
@lokalise/universal-testing-utils 3.5.1
Reusable testing utilities that are potentially relevant for both backend and frontend
Jul 14
javascript
607196dc1fb8117752ed984f482927837c718847e4b68121a11674860028f47f
H(Cm)Md(Pa₄)
52%
Legitimate npm testing utility package
@pnpm/resolving.registry.pkg-metadata-filter 1100.0.10
Filters the package metadata from the registry
Jul 14
go
28bc0c27a75f25e82dd25f02e426f143f955fed4c43d4180f60a8c9b228e1f1d
H(Cm)Md(Pa₄)
7bb3773eecd6d330c54f87d65ba0ad93abc01002a409aae310690c93ca85120e
H(Cm)Md(Pa₄)
36dd989d9220b1b7fe2d84d9282f0e290156f419a546f880035a57c4cca05b54
H(Cm)Md(Pa₄)
9dc1f5b4de035ee9cdf82f70c1f40c8ff108ab7689f1b537983b7a0be859c90c
H(Cm)Md(Pa₄)
a20e0ff3714617e35737180fbd96916bd0ec91208b24f76440f03de4d6d659bb
H(Cm)Md(Pa₄)
2717e74fb16c989c275c056dd742959b857f58a791af0d6bc35700f72509e579
H(Cm)Md(Pa₄)
32%
Legitimate npm package metadata
@orgops/coax
Typed, provider-agnostic, self-repairing structured output from LLMs. Pure TypeScript — no native modules, no codegen, no vendor lock-in.
Jul 13
javascript
31a5b30f5edc8cb50872b85651cf825edd9137b75da02c956e05bec87879d439
H(Cm)Md(Pa₄)
40%
Legitimate npm package metadata
eda3f298c6261b7e389f7472ddaa19dc01575665741e862c3d0dacb14161b360
H(Cm)Md(Pa₄)
b580183ed608680004f54a3abe29724b22754430e664bc2db33b5040690c8313
H(Cm)Md(Pa₄)
34%
Legitimate HTTP client library
@eslint-react/kit 5.14.6
ESLint React's utility module for building custom React rules with JavaScript functions.
Jul 12
go
56708e6670c76333bd13b60bce2dc2ecbb410e36d3bc435dda885d1f1d06d9ce
H(Cm)Md(Pa₄)