Fallout

Recently scanned open-source supply-chain artifacts and public lab uploads.

vigaphone-bin 1.6.2-1 ViGAPhone Synth Lab is a New Physical-Modeling Synthesizer MIDI-MPE application and VST3 plugin, Sound and Timbre Analyzer, Instrument Tune… Jul 17 arch
d9697a8733ea4497c6c0d46ba6d96d16d1674179580b08657c232b2ce7eab14b H(Cm₃)Md(Pa)
80% Archive contains symlink escape vulnerability
japyd 1.1.9 Automate JSON:API management in Flask. No manual mapping, just clean code. Jul 17 python
356e2a5c9dbd20876626ea937b5e9afe9a9eb45bd6ee28af1202568a7e524857 H(Cm₃)Md(Pa)
mde-client 0.2.4 Python client for the Microsoft Defender for Endpoint API with lazy results and Arrow/Polars output. Jul 16 python
ad59b70b4203c0c19b31814669371a99e85ffceda0705d6ff91fc873257eb4b0 H(Cm₃)Md(Pa)
vigaphone-bin 1.6.1-1 ViGAPhone Synth Lab is a New Physical-Modeling Synthesizer MIDI-MPE application and VST3 plugin, Sound and Timbre Analyzer, Instrument Tune… Jul 16 arch
bf8bdcd1ecef684b262027b249ea34bffc45514fc0e2ac56a897ee24e8d79262 H(Cm₃)Md(Pa)
archive.symlink-escape
cupiu-bnr 0.1.1 Official BNR (National Bank of Romania) exchange rates — zero dependencies. Live rates & history at cupiu.ro. Jul 15 python
60ad4dce67185b2836a7e0e74a26fdd0204269dd5af806a877ac5ad218cfaadc H(Cm₃)Md(Pa)
JablotronPy 0.7.4 Client to interact with Jablotron Cloud API to control Jablotron alarm systems Jul 15 python
56f6f36ad65f50eb90a20a9e9d5df9564342b8651a9c65f555851447327f7f00 H(Cm₃)Md(Pa)
warp-reverse-proxy 1.0.0 Warp filter that acts as a reverse proxy, forwarding the request to a proxy address and extracting a response. 770,428 installs Jul 14 go
948552bbb7a5fb4ba3169fd09b6c1ab53c1b2fdd82603295df550f7a1ec644c0 H(Cm₃)Md(Pa)
oruk 0.1.0 Official Python client for the oruk Speech API: English transcription, calibrated multilabel emotion and speaking-style labels, and unified… Jul 13 python
2d17df3e64efa62baed5e66f9c83c0dd63a84eb4c20b54069fc72532b0cfadf5 H(Cm₃)Md(Pa)
@trakt/api 0.4.23 The core library that implements Trakt API interactions using ts-rest and zod for type-safe communication and validation. Jul 13 javascript
130414187e01656b41f629cffa56e9d3b53a49e36aaa5d28e3be378a57c22468 H(Cm₃)Md(Pa)
34% Legitimate API client library
glanvu Jul 13 windows
257328d0c3e3ab91a61d51968d53862dadb955319ff810f463bc8e1b9c3d8805 H(Cm₃)Md(Pa)
32% Legitimate package installer script
routewise 0.1.2 Client SDK for the routewise cost-aware LLM router Jul 13 python
b0ac58cc6f8affa6fcf68806cb4a38016b1fff52c07935d4f1613cbd99e4668a H(Cm₃)Md(Pa)
31% Legitimate LLM router client SDK
kaironull 0.1.0 Python SDK for the KairoNull Umbra Trust Protocol — AI decision evidence capture and verification Jul 13 python
cd193e5329a18333f015b67e74675b331ca1b78e0e289b95de0540255f1d7eca H(Cm₃)Md(Pa)
31% Legitimate Python SDK package
vengtoo 0.2.0 Vengtoo Python SDK — authorization client for Vengtoo Cloud and the Vengtoo Agent Jul 13 python
b68480b6f489d0afc686e5b393628bc6fcf0724d1ccd072d18254bdb8107153e H(Cm₃)Md(Pa)
31% Legitimate Python SDK package
innerlens 0.2.0 See what your open model is really thinking — and whether it's making it up. A drop-in J-space workspace layer: live introspection + a free… Jul 12 python
69ab5d4e41d62e6d85cd88a5b3dcf6d57b2b72b7a0004f6e9caa99cd47772062 H(Cm₃)Md(Pa)
32% Legitimate LLM introspection tool
innerlens 0.1.0 See what your open model is really thinking — and whether it's making it up. A drop-in J-space workspace layer: live introspection + a free… Jul 12 python
2dc0e69dc73c015a621f67dd4404e9be4beca7daa4ec904c60b1699d85cff707 H(Cm₃)Md(Pa)
32% Legitimate LLM introspection tool
dhooks-lite 2.0.0 A wrapper for sending messages to Discord webhooks. Jul 12 python
5552966bf945009b229c826b34039e86847387455ef091dc8381e10151d6321f H(Cm₃)Md(Pa)
33% Legitimate Discord webhook library
ho 0.0.10 Http Objects - Tools to make python interfaces to http services Jul 11 python
c787e9a92b1af658427398f5b45c0ece315abb6c2897b0650d07c7da550ef1ba H(Cm₃)Md(Pa)
gui-mcp MCP server for the Gua runtime UI automation protocol. Jul 11 javascript
f517730f37331d1a03bbbea2f01c2f9935529d7c953a5ec528846c1cc99fc38a H(Cm₃)Md(Pa)
35% Standard MCP server implementation
gui-mcp MCP server for the Gua runtime UI automation protocol. Jul 11 javascript
bedfdc149c94ecebae142cd492166cf52d1522658450588ffff372a1511409d9 H(Cm₃)Md(Pa)