52385425c9c1383794f296c8f338fd77a33ed5ef54a85c023e6c886ba6ab455d
H(Cm₃)Md(Pa)
Fallout
Recently scanned open-source supply-chain artifacts and public lab uploads.
Files indexed
88,999,504
49e26dc35545076ed80b26b30d66f8469ad8ed8efc38f2bd63014c759ec407c9
H(Cm₃)Md(Pa)
2d50738517c7e335c486b4081f4f3262518159e7e3730c161b5433229a1a1d9a
H(Cm₃)Md(Pa)
@le-space/aleph-bootstrap
Aleph-backed libp2p bootstrap discovery and relay registration helpers.
Jul 17
javascript
f94ecb23a66b487d00a021dfb8a6242e9a90a32070f8c66609f1d73414143f2e
H(Cm₃)Md(Pa)
ce384cbde2521c4ee89513d9dbd26bbb6b6196752625eeabdab056c69f66cdff
H(Cm₃)Md(Pa)
vigaphone-bin 1.6.2-1
ViGAPhone Synth Lab is a New Physical-Modeling Synthesizer MIDI-MPE application and VST3 plugin, Sound and Timbre Analyzer, Instrument Tune…
Jul 17
arch
d9697a8733ea4497c6c0d46ba6d96d16d1674179580b08657c232b2ce7eab14b
H(Cm₃)Md(Pa)
80%
Archive contains symlink escape vulnerability
18437dfb6106aaf2627bdb6bcada5b0a858ccdbe4357fec78feb9c922ada55a2
H(Cm₃)Md(Pa)
2a87954640d132acb97bb4c76a4329fb2a0321b25271df68997e3bf0e2ead2af
H(Cm₃)Md(Pa)
e5a191440a580908ae257512d46138312bf329bce78eafcd6eff29046c9016de
H(Cm₃)Md(Pa)
GLV.Shared.Automation 1.3.2607.1714
Avoid using if you're not affiliated with us! No public documentation or source code is provided for this!
7,317 installs
Jul 17
dotnet
8236d1627305651b48c38b7abd796ce283737c46c4a11558a0ec8bf6d65b2496
H(Cm₃)Md(Pa)
cfb9eafc2014e629978508deda16143d75ea7fc17221092c93313db9c1c5da4b
H(Cm₃)Md(Pa)
783ac63611b10eff2f2ef425edb169227cabfcc0b01a3909fdaf18136a2c82cb
H(Cm₃)Md(Pa)
japyd 1.1.9
Automate JSON:API management in Flask. No manual mapping, just clean code.
Jul 17
python
356e2a5c9dbd20876626ea937b5e9afe9a9eb45bd6ee28af1202568a7e524857
H(Cm₃)Md(Pa)
be1f4a2da098c3da6d58c90306723650a039fa24f8aba9668d0792fbc815ae5a
H(Cm₃)Md(Pa)
Soenneker.Extensions.HttpContext 4.0.704
A collection of helpful HttpContext extension methods
298,855 installs
Jul 17
dotnet
cf32a6f37278cc4ddae80029106086e58c3acc9d894c977d55801f90dd932d41
H(Cm₃)Md(Pa)
FirmarOnline.Clients.Verify 6.1.3
Cliente para acceso a la API pública de verificación de documentos firmados
1,262 installs
Jul 17
dotnet
8f7a9633b6024f3afed59e6bac760074ea7d9f67d67bedbabc6d673ea9da08e8
H(Cm₃)Md(Pa)
Soenneker.Sonarr.HttpClients 4.0.60
A thread-safe singleton HttpClient for Sonarr's OpenAPI integration.
6,658 installs
Jul 16
dotnet
111b8e8acb28f1bcb56710c3d062684b15ef18239188b6246a632a37bbb66b00
H(Cm₃)Md(Pa)
mde-client 0.2.4
Python client for the Microsoft Defender for Endpoint API with lazy results and Arrow/Polars output.
Jul 16
python
ad59b70b4203c0c19b31814669371a99e85ffceda0705d6ff91fc873257eb4b0
H(Cm₃)Md(Pa)
babbccc297ae844f4d8f14fcfc0d3597b67d818a04437bc31018d9fef781293c
H(Cm₃)Md(Pa)
Soenneker.Radarr.HttpClients 4.0.60
A thread-safe singleton HttpClient for Radarr's OpenAPI integration.
6,380 installs
Jul 16
dotnet
4f04bbc1ade36b963775026f147d15705d641ea0825ce9152adc69aa8269fd65
H(Cm₃)Md(Pa)
8d40055f6c5d9a6298643feea33935284b700ee1b38469983f91f5042f161c72
H(Cm₃)Md(Pa)
agent-of-empires-bin 1.13.0-1
Terminal session manager for AI coding agents (Claude Code, Codex, OpenCode)
Jul 16
arch
f71ff156558296a0d853eec386b95c6b4fe7c42297c9e3454cb59fd913e76e68
H(Cm₃)Md(Pa)
d1f99879956837c359b8f8bbe71e415502f80c753fee592af96d764aac899acd
H(Cm₃)Md(Pa)
Soenneker.Extensions.HttpContent 4.0.902
A collection of helpful HttpContent extension methods
1,013,410 installs
Jul 16
dotnet
962551848728a03bbfd192f9f7899c94e69d835e159a21c459788d1093f17672
H(Cm₃)Md(Pa)
bbd590b8f6d04a896064ce376c7fc632b732d4eec1458b1208f0016ec3921545
H(Cm₃)Md(Pa)
vigaphone-bin 1.6.1-1
ViGAPhone Synth Lab is a New Physical-Modeling Synthesizer MIDI-MPE application and VST3 plugin, Sound and Timbre Analyzer, Instrument Tune…
Jul 16
arch
bf8bdcd1ecef684b262027b249ea34bffc45514fc0e2ac56a897ee24e8d79262
H(Cm₃)Md(Pa)
archive.symlink-escape
a741211ddb75b55b98f27aa2a0c3ec25114c85bff9e0d4ceef6073b3aa3c0d18
H(Cm₃)Md(Pa)
4ae4d22b1dd690f44ed2aa9dda571fd8eabae4b9aea57eda27ffed7691575b22
H(Cm₃)Md(Pa)
66a2d904fcfaf9ac79dbf4d19655268aaef01c5e659d96794d666bd9a6612d82
H(Cm₃)Md(Pa)
7132cb4b99a02581f24c5b7826b9803f0342953894f06e2bcd9a0f306507b8f0
H(Cm₃)Md(Pa)
1bbb1449d0aca9ff73fc5f0f4bb05d2526d72f3def6ce31d7e236d88ad1422ae
H(Cm₃)Md(Pa)
2393ec98d23165ac960d3fffbefb987fee6e4f8034fba9177c72afc3020d43e9
H(Cm₃)Md(Pa)
cupiu-bnr 0.1.1
Official BNR (National Bank of Romania) exchange rates — zero dependencies. Live rates & history at cupiu.ro.
Jul 15
python
60ad4dce67185b2836a7e0e74a26fdd0204269dd5af806a877ac5ad218cfaadc
H(Cm₃)Md(Pa)
xgrep-search-bin 0.7.0-1
Ultra-fast indexed code search engine with MCP server for AI coding tools
Jul 15
arch
88e4673c8e6f93da5eb9e14b79108f3f4bf3f71d6d2b594fa7beb5d84869f372
H(Cm₃)Md(Pa)
xgrep-search 0.7.0-1
Ultra-fast indexed code search engine with MCP server for AI coding tools
Jul 15
arch
45db766c0f7502787192faf9bc67a4aa1464906f36b4eeac45a36977f15bd165
H(Cm₃)Md(Pa)
7497e16e7721a73b4039c2e6d2cb34f8d6c4f1ac7365a7208fdfe46ff826162d
H(Cm₃)Md(Pa)
20c12d7a7ed0bfccb6fdba971c0076b0857ac1dcd008e337e64fab43fbd6aaae
H(Cm₃)Md(Pa)
3098f34b0eae788ec18342537a36f499e3c656a5df38f65329cc35b0c0e1dbcf
H(Cm₃)Md(Pa)
3e082cf8a78671674f495d1871d0df484eed1137e3801edd4d436c621a20a391
H(Cm₃)Md(Pa)
JablotronPy 0.7.4
Client to interact with Jablotron Cloud API to control Jablotron alarm systems
Jul 15
python
56f6f36ad65f50eb90a20a9e9d5df9564342b8651a9c65f555851447327f7f00
H(Cm₃)Md(Pa)
09dd6cb7ab041d44e086c0679c27f570b21c1e7fb5b98348b5ef882ff2a904fd
H(Cm₃)Md(Pa)
@elyracode/http-tools
Elyra extension for HTTP requests -- API testing, live docs fetching, and OpenAPI parsing
Jul 15
javascript
4a1d7a745287cfb74018006b3c8991d0cb916293b07276480ed5ed201317600e
H(Cm₃)Md(Pa)
595fe79b25057ae9cada4eef49f620f48af09b0f6d373ce854b79210edf9b6ee
H(Cm₃)Md(Pa)
4519e14b19aaaa8c779ad9f864cffc9f0fb828e06c9ba4ae75fdd0e93ee63916
H(Cm₃)Md(Pa)
5fb66e4b8603f7ba2da616412577d2e5a7178c9b9a14975344b89db2eb9e921a
H(Cm₃)Md(Pa)
b4a518b914b0f3c6279a430f42794612130eec57844464a8beece4c2c3b642e0
H(Cm₃)Md(Pa)
ee1a502470fede56eb6920f8f67225f579d003be244f5eb46177445ab5151ca6
H(Cm₃)Md(Pa)
b76e3b7e6ecc7eb318db6f09699b136168a5f82f00a6520e54a186491f91554e
H(Cm₃)Md(Pa)
fb97899737c05705826fe2f048374d1150c695b79027e2f4febd780ef3a08328
H(Cm₃)Md(Pa)
d5e1ba7888475bb86d0cc9f4e3f5b1f5a26005346305c68e9ad41e66bb2db819
H(Cm₃)Md(Pa)
warp-reverse-proxy 1.0.0
Warp filter that acts as a reverse proxy, forwarding the request to a proxy address and extracting a response.
770,428 installs
Jul 14
go
948552bbb7a5fb4ba3169fd09b6c1ab53c1b2fdd82603295df550f7a1ec644c0
H(Cm₃)Md(Pa)
0b5a9c6be40ebb1b380b70b4dcaecc3e5faa68b116e8c621292ebaf82b034476
H(Cm₃)Md(Pa)
c7dd1b92d217fc9b2a793fc5d5f58a0537f8de26e0036e56650f4cb1fb588f74
H(Cm₃)Md(Pa)
cb6d8fe7d4d1f2b2a62f230254c7b7dd54e0323a7bfadc9cdcee45566ef3defa
H(Cm₃)Md(Pa)
plentymarkets-api-client 0.5.0.dev13
Async Python client for the PlentyMarkets REST API
Jul 14
python
9d1b0a76820bf82526abacfd3da48253aabd4b6d8865de5df90486d5bc5d711f
H(Cm₃)Md(Pa)
bd7851a327fc0421d738629c70c6e58b463e0cd6c1fe398be8b51514cd24c9b5
H(Cm₃)Md(Pa)
9c2de8737e3abe0d253ef1f3418f865ab78221d6f0725f76bfd7208a6c536339
H(Cm₃)Md(Pa)
netsuite-oauth-python 1.0.0
OAuth1 client for connecting to NetSuite REST APIs and RESTlets
Jul 14
python
b62e1d53bbf637abf52d11e1a1696ee63ddeef09d52c103e5a46ff698ccdcf51
H(Cm₃)Md(Pa)
e28d7f4ed12caeb1ac9c63cf6f4566a0056d4443ecbb0a9e80b8901b70cc628c
H(Cm₃)Md(Pa)
oruk 0.1.0
Official Python client for the oruk Speech API: English transcription, calibrated multilabel emotion and speaking-style labels, and unified…
Jul 13
python
2d17df3e64efa62baed5e66f9c83c0dd63a84eb4c20b54069fc72532b0cfadf5
H(Cm₃)Md(Pa)
d2c3c9378a61f5333fff6aa021f10fa033132dc55bebe404853dd3c42334f288
H(Cm₃)Md(Pa)
beetkeeper-plugin 0.5.0
A peripheral beets plugin component for event tracking in the beetkeeper application.
Jul 13
python
048981ccee4feb49fc2db82e3f56d06b34b9e33a694774e66cf790f3d04f81de
H(Cm₃)Md(Pa)
391b6895226cbacf079570a2057a63bfed373577ca779c2fbd35b040fb0b1b54
H(Cm₃)Md(Pa)
@trakt/api 0.4.23
The core library that implements Trakt API interactions using ts-rest and zod for type-safe communication and validation.
Jul 13
javascript
130414187e01656b41f629cffa56e9d3b53a49e36aaa5d28e3be378a57c22468
H(Cm₃)Md(Pa)
34%
Legitimate API client library
9387b28dff561cf3933041c113304bd3fed35ec9cfb9994444cd190de24665c9
H(Cm₃)Md(Pa)
b38ee2f7054f049322076cef4876e3671670402681962161f52c7b48cf1bd275
H(Cm₃)Md(Pa)
12a9b1d3cb8db156d94759d320aef2717af3dc3974fb3a767e994e76d57a03de
H(Cm₃)Md(Pa)
68a953e9b36c884d27b78e8be5ea1e87d59ae9db84990a1edc28e25544934cc9
H(Cm₃)Md(Pa)
31%
Legitimate Python SDK package
e59783c0929625781aae5c2cb79843fd1814a085f39b0d5b2e92486147dd2815
H(Cm₃)Md(Pa)
257328d0c3e3ab91a61d51968d53862dadb955319ff810f463bc8e1b9c3d8805
H(Cm₃)Md(Pa)
32%
Legitimate package installer script
9a84a89489f48a57243df9e53f07a80d058bf2a61ccd725042b7b7852bd39170
H(Cm₃)Md(Pa)
32%
Legitimate NuGet package installer
17fbbec63b2587d0946f95d852dd4bfaa0da42cdde3a41416c3a262accecd7a1
H(Cm₃)Md(Pa)
32%
Legitimate NuGet package with verified checksums
b0ac58cc6f8affa6fcf68806cb4a38016b1fff52c07935d4f1613cbd99e4668a
H(Cm₃)Md(Pa)
31%
Legitimate LLM router client SDK
e29553b39ef835310141c016a7ef142de7995fccc1e3ad8c701136c944c3bee0
H(Cm₃)Md(Pa)
33%
Legitimate package installer script
354a777c01ecf58df40acb22a614e83bbf65cd9fcb34a13864bd22d1950761e5
H(Cm₃)Md(Pa)
1e0bf31d42183f6cedfeee18f200763131ee21e01f7a4ee6607e755fd8bb4201
H(Cm₃)Md(Pa)
33%
Legitimate package installer script
6dc0a6b71787185d6323d71968bb7351d783e4581f50b1a0e5f1e01a5a518c41
H(Cm₃)Md(Pa)
00ce4c6cfb51426500f4c525fde646cc7512a5ac1593d70a60ec2b146f99e72f
H(Cm₃)Md(Pa)
33%
Legitimate NuGet package with installer
3932cae7eb62ffd4e3151bc1b8c086b062e8d729bc5202353cebfb84d4131179
H(Cm₃)Md(Pa)
32%
Legitimate NuGet package installer
dbce7913d7961f48aaeef1fc92e9277e744272e837936fb6483211010cdbd2cf
H(Cm₃)Md(Pa)
33%
Legitimate NuGet package installer
f5fae36bcb37a4a73ff9a92cfc0a3e060493dcf229929bcfb6669ed90c65b241
H(Cm₃)Md(Pa)
33%
Legitimate NuGet package installer
kaironull 0.1.0
Python SDK for the KairoNull Umbra Trust Protocol — AI decision evidence capture and verification
Jul 13
python
cd193e5329a18333f015b67e74675b331ca1b78e0e289b95de0540255f1d7eca
H(Cm₃)Md(Pa)
31%
Legitimate Python SDK package
caracalai-identity 0.2.0rc5
Caracal JWT verification, JWKS cache, scope evaluation, and claim shapes
Jul 13
python
ee6c9071ad9a33ae716e87fb9a4e3615b992e1933342517e916478d14899426f
H(Cm₃)Md(Pa)
vengtoo 0.2.0
Vengtoo Python SDK — authorization client for Vengtoo Cloud and the Vengtoo Agent
Jul 13
python
b68480b6f489d0afc686e5b393628bc6fcf0724d1ccd072d18254bdb8107153e
H(Cm₃)Md(Pa)
31%
Legitimate Python SDK package
65beaae0fcf94e93141c1b5f10939867096ca8822568ca3aea909466172b3fc9
H(Cm₃)Md(Pa)
33%
Legitimate NuGet package installer
7a941866e021032277d8c078e83f5233290340f3246b3d0187c5f6547c3a21c7
H(Cm₃)Md(Pa)
innerlens 0.2.0
See what your open model is really thinking — and whether it's making it up. A drop-in J-space workspace layer: live introspection + a free…
Jul 12
python
69ab5d4e41d62e6d85cd88a5b3dcf6d57b2b72b7a0004f6e9caa99cd47772062
H(Cm₃)Md(Pa)
32%
Legitimate LLM introspection tool
innerlens 0.1.0
See what your open model is really thinking — and whether it's making it up. A drop-in J-space workspace layer: live introspection + a free…
Jul 12
python
2dc0e69dc73c015a621f67dd4404e9be4beca7daa4ec904c60b1699d85cff707
H(Cm₃)Md(Pa)
32%
Legitimate LLM introspection tool
5552966bf945009b229c826b34039e86847387455ef091dc8381e10151d6321f
H(Cm₃)Md(Pa)
33%
Legitimate Discord webhook library
47cc4756db47ea80a65e8076a5e9b7378ddbf1b5acf477b42a57fb950bc5841b
H(Cm₃)Md(Pa)
kiwime-connector-gmail 0.1.0
kiwiMe Gmail connector — message metadata ingestion via Google OAuth (PKCE + secret).
Jul 12
python
4d622781be86e211e6e9d78ca8168d6f828767ac4b169e425420e38ff4452865
H(Cm₃)Md(Pa)
c2886b661c62139baa980ed66b4e9e0fc770676384ecfa2ac9773918408a93a7
H(Cm₃)Md(Pa)
c787e9a92b1af658427398f5b45c0ece315abb6c2897b0650d07c7da550ef1ba
H(Cm₃)Md(Pa)
f517730f37331d1a03bbbea2f01c2f9935529d7c953a5ec528846c1cc99fc38a
H(Cm₃)Md(Pa)
35%
Standard MCP server implementation
bedfdc149c94ecebae142cd492166cf52d1522658450588ffff372a1511409d9
H(Cm₃)Md(Pa)
6d9e5d35f00bf97c01ba03e8b5f4d44b94328db015aa5181f7439278f6f9f3aa
H(Cm₃)Md(Pa)
38%
Standard SDK source code
68b2ccd409ca65159cf182b8a12fd54a9c0c22862876e8b6851f1759722e4171
H(Cm₃)Md(Pa)
0493259367ef6b054bb50172b402882dbf2c3df02bb7e88751b16692b5dbec65
H(Cm₃)Md(Pa)
truthscan-image-detector-client 20260709.0.0
Official TruthScan Python client for AI image detection — presign, upload, detect, and poll for results.
Jul 9
python
d8d4722e7603f188878b2b7c5fad6195b8373c47a728e0961d4c009e33efae5d
H(Cm₃)Md(Pa)
32%
Legitimate Python client library
9d8780126b549e74d8e190a29fa5a779ffb3dac761153205d333e580ae1f84dd
H(Cm₃)Md(Pa)