Fallout

Recently scanned open-source supply-chain artifacts and public lab uploads.

FFmpegKit.Net.Full 8.1.2.3 One API over the FFmpegKit bindings for Android, iOS and macOS: run FFmpeg/FFprobe commands with awaitable calls, typed media information,… 483 installs 2d ago dotnet
3ca43133e9c74ee40046c6052937c13eac5e7a6edd6d8433dae044d8ca587efa H(Db)Md₂(BiPa)
45% Legitimate NuGet package metadata
Hexalith.Memories.Aspire 2.19.4 .NET Aspire hosting extensions for Hexalith.Memories — adds the Memories search-index server (FalkorDB graph store, secret store, conversat… 4,280 installs 2d ago dotnet
f6e0f3bdaf193cc3bd1d5f571ec723e03c3a49689154a41eff918ffd421abd2a H(Db)Md₂(BiPa)
44% Legitimate .NET NuGet package
OrionAudit.Testing 0.11.3 Testing helpers for OrionAudit. Provides AuditCapture, fluent assertions, and InMemory resolvers. Framework-agnostic - no xUnit/NUnit/Fluen… 4,866 installs 2d ago dotnet
35649e3cbcb6e6b7d65159977889299794c24b66b01c1f780555286e5f501c9e H(Db)Md₂(BiPa)
41% Legitimate NuGet package metadata
ShadowDusk.Core 0.15.0 ShadowDusk core types (IShaderCompiler, Result, ShaderError, CompilerOptions, IR, SPIR-V reflection). Part of the ShadowDusk.Compiler cross… 7,129 installs 3d ago dotnet
bc064141fecbaf42e7c053b60874fac065ce26a20870f18aa90d35eeef2ffaaa H(Db)Md₂(BiPa)
50% Legitimate NuGet package metadata
FunFair.CodeAnalysis 7.2.12.2243-main Code analysis rules that are used throught FunFair dotnet packages to pick up common issues that are encountered. 877,663 installs 3d ago dotnet
712fa583cf8b6b7af29a899ed34aced84683c4a87415962ec7c84b54e2cbff5b H(Db)Md₂(BiPa)
53% Legitimate NuGet code analysis package
AdoNet.Async 1.3.4-alpha.21 Async-first interfaces and base classes for ADO.NET (System.Data). Drop-in replacement with modern async/await, IAsyncEnumerable, and Value… 14,591 installs 3d ago dotnet
8a3362926790e1daa5d74097052568c3bb19469440ca5b03f6db58ab083ecd9f H(Db)Md₂(BiPa)
NetEvolve.Pulse.SqlServer 0.70.16 SQL Server persistence provider for the Pulse outbox pattern using plain ADO.NET. Provides SqlServerOutboxRepository implementing IOutboxRe… 2,436 installs 3d ago dotnet
0a99b4b39ef9d440fad4a40cc86f207fe00cf889f7a01b3d4ec18da90e1b061b H(Db)Md₂(BiPa)
LogicalOptimizer 2.1.0 Dependency-free boolean expression optimizer: provably minimal results with explicit proof status (exact Quine-McCluskey backend), built-in… 3d ago dotnet
6d723cf6d63619f992d4d01f8aeba7df90a801dc12f1616f187b7aa6749ebcf4 H(Db)Md₂(BiPa)
49% Legitimate .NET boolean optimizer library
NetEvolve.Pulse.Kafka 0.70.16 Apache Kafka transport for the Pulse CQRS mediator outbox. Delivers outbox messages directly to Kafka topics using the Confluent.Kafka prod… 206 installs 3d ago dotnet
5f899bc007bdd52fe35ca53698e8609dd48d6c63440e0152ec3ef5eb2ea226eb H(Db)Md₂(BiPa)
NetEvolve.Pulse.AspNetCore 0.70.16 ASP.NET Core Minimal API integration for the Pulse CQRS mediator. Provides IEndpointRouteBuilder extension methods that map mediator comman… 1,898 installs 3d ago dotnet
c2a852a17e7dcade687859db6b9bb079a771bb58eed74b6c9930c44737976221 H(Db)Md₂(BiPa)
redb.Route.Validation.Adapters 3.4.0 Validation adapters for redb.Route: FluentValidation and DataAnnotations integrations exposed as IMessageValidator implementations. 1,054 installs 3d ago dotnet
ec48542ad1dcf3215dff4075c3c1343a715078e0b4aa78529a4805ba6f42fa5b H(Db)Md₂(BiPa)
49% Legitimate NuGet package metadata
Kahuna.Shared 0.8.14 .NET client for Kahuna: Distributed locks and reliable key-value store 7,781 installs 3d ago dotnet
0b28dc6e70aa53a664c58bc2960a265cbebd3568d577009cf0e4dc310ef346fd H(Db)Md₂(BiPa)
67% Legitimate .NET library package
Fotbiler.RuleGate.Core 0.2.0-preview.2 Fail-closed policy authorization engine, role, permission, logical, and typed attribute evaluators, dispatcher, in-memory policy provider,… 62 installs 3d ago dotnet
a8c02e4091c1fcad4fd95ac7f05511350d859f5364713585f911c0984766f6c1 H(Db)Md₂(BiPa)
48% Legitimate .NET library package
Fotbiler.RuleGate.Manifest 0.2.0-preview.2 YAML manifest loading, validation, compilation, and policy domain mapping for Fotbiler RuleGate, including typed attribute requirement comp… 64 installs 3d ago dotnet
c8a602a84936978ae2a9f06c08139f7f0a84e810286bbe9588e20f5d870a1308 H(Db)Md₂(BiPa)
42% Legitimate .NET NuGet package
JasperFx.SourceGenerator 2.36.2 Source generators for JasperFx: OptionsDescription (IDescribeMyself.ToDescription() without Reflection), CLI command discovery, and command… 628,462 installs 3d ago dotnet
61eab11607d88bb7cebb00a1451170bfd4a00b731f4d4a922ed8a6ebb03c3a5e H(Db)Md₂(BiPa)
46% Legitimate NuGet package
DotBoxD.Abstractions 0.1.0-ci.4134 DotBoxD.Kernels plugin-to-host contracts: plugin marker attribute, event kernel, hook context, message sink, and event adapter abstractions. 8,576 installs 3d ago dotnet
b3c953ac043cb44d858b79bffda973534796c7e66f9bbe258ff8aa787a4b8845 H(Db)Md₂(BiPa)
41% Legitimate .NET NuGet package
Tidal.ReportDesigner.Rendering.Excel 1.0.0 Excel (XLSX) renderer for the Tidal Report Designer: a data-faithful workbook (real typed numbers and dates) written with DocumentFormat.Op… 3d ago dotnet
324a99492b3a00ed710386da118921f0d20f811ad94e1efbe7e6b19b66fc231b H(Db)Md₂(BiPa)
45% Legitimate NuGet package for Excel rendering
Weasel.Storage 9.19.0 Dialect-neutral document-storage contracts (session/serializer/version-tracker/dialect seams) shared across the Critter Stack, spin off of… 66,882 installs 4d ago dotnet
3b48b9f4d09ca6fea0ca8dcd5002ce1be750f57310b5603a1ae2908e099acfb3 H(Db)Md₂(BiPa)
54% Legitimate NuGet package metadata
FFmpegKit.Net.MinGpl 8.1.2-beta.4.18 One API over the FFmpegKit bindings for Android, iOS and macOS: run FFmpeg/FFprobe commands with awaitable calls, typed media information,… 370 installs 4d ago dotnet
c4fb5689db0cba506adea7ee11c8ce9d2504fa155468b9faea8e1ab4d9160950 H(Db)Md₂(BiPa)
45% Legitimate FFmpeg .NET library package
FFmpegKit.Net.HttpsGpl 8.1.2-beta.4.18 One API over the FFmpegKit bindings for Android, iOS and macOS: run FFmpeg/FFprobe commands with awaitable calls, typed media information,… 210 installs 4d ago dotnet
7995d985dbde506711ee1c43f48800737a19fc18eee1b1dee90a1fc3b3967d2a H(Db)Md₂(BiPa)
45% Legitimate FFmpeg library package
JustyBase.NetezzaSqlParser 0.3.0-preview.3 .NET libraries for Netezza SQL parsing, authoring, DDL generation, catalog metadata queries, and UI-agnostic schema/DDL integration. 285 installs 4d ago dotnet
fde83b1d78674a80628ef6367ccc514b8e3853b82579be28eebbdd9f2eb0446b H(Db)Md₂(BiPa)
46% Legitimate .NET SQL parser library
Picket.Rules 0.1.11 AOT-safe rule and allowlist models for Picket secret scanning. 4d ago dotnet
ee138844f6c574377f49a2ef6825a7a7784cfd7c7506ced02d035cc53cb5a591 H(Db)Md₂(BiPa)
45% Legitimate .NET NuGet package
SsalKit.RecurrenceSchedule 0.0.4 Time-zone-aware recurring reset boundaries (daily/weekly/monthly) over TimeProvider: previous/next boundary, current window, crossing detec… 4d ago dotnet
7ce0bfe31d570106171976067706f4b0535f5688548dc6c7a0efc89a9e3daaf8 H(Db)Md₂(BiPa)
42% Legitimate NuGet package
ModulusKit.Generators 3.1.0 Incremental source generators for Modulus, including StronglyTypedId. 1,238 installs 4d ago dotnet
e6d5591f67e22cfc3298e948408f32d1144a26c9325cc5cd05e109fa781cb7cb H(Db)Md₂(BiPa)
45% Legitimate NuGet source generator package
Corvus.Text.Json.Yaml 5.2.10 High-performance zero-allocation YAML to JSON converter for Corvus.Text.Json, supporting YAML 1.2 (and optional 1.1 compatibility) with str… 3,149 installs 4d ago dotnet
194816a41d6e2e81f7724454b34a15c02190a151ae6e2dceb1c119d2ea6a39ec H(Db)Md₂(BiPa)
74% Legitimate NuGet package metadata
Corvus.Text.Json.Toon 5.2.10 High-performance TOON (Token-Oriented Object Notation) to JSON converter for Corvus.Text.Json. 2,729 installs 4d ago dotnet
05203a28f5bc39efb7f872b93baaea9e6a1d963d9d4993c50030cc2781d60e56 H(Db)Md₂(BiPa)
59% Legitimate NuGet package metadata
Corvus.Text.Json.Compatibility 5.2.10 Compatibility layer for Corvus.Text.Json providing bridge types and helpers for interoperating with System.Text.Json types and APIs. 3,303 installs 4d ago dotnet
3680ec09d30d0ca53f3be7d0bf76c0caa8517363b32d609636d5d550ae1c0709 H(Db)Md₂(BiPa)
58% Legitimate NuGet package metadata
Corvus.Json.CodeGeneration.CSharp 5.2.10 A support library for generating code from .NET types representing data types found in JSON Schema, emitting C# code. 45,109 installs 4d ago dotnet
8c66231de67d5ac98a8ae9ee885c7356c40936307ce811f3c73cad1d34d9699c H(Db)Md₂(BiPa)
53% Legitimate NuGet package from known vendor
Picket.Rules 0.1.7 AOT-safe rule and allowlist models for Picket secret scanning. 4d ago dotnet
da45fcf1728b9f9226c9407623cd3ea078383cbb4b8358c8acdc29d01b256a2b H(Db)Md₂(BiPa)
45% Legitimate .NET NuGet package
Ryn.Plugins.MenuBar 0.27.4 Native application menu bar plugin for Ryn — App/Edit/Window menus, roles, and accelerators 3,572 installs 4d ago dotnet
7dacb62f349d0c2036526c2da738f349f6c25f62f2681b7b8c08bdae0a1ada1e H(Db)Md₂(BiPa)
44% Legitimate NuGet plugin package
Ryn.Plugins.GlobalShortcut 0.27.4 System-wide hotkey plugin for Ryn — register global shortcuts that fire even when the app is in the background 3,413 installs 4d ago dotnet
cad9505a74c7c7b9b7e244ced25f3165f659995ea94af4a54f18b38556b0a123 H(Db)Md₂(BiPa)
38% Legitimate NuGet plugin package
SurrealForge.Analyzer 0.4.0 Roslyn analyzer (SRDB0001) that bans string-interpolated / concatenated SurrealQL outside the parameterized query builder. 521 installs 5d ago dotnet
21e2f400dad6536ee5cb50c0688bce56f3ef4f31162b5b65bd0e68cde19550e5 H(Db)Md₂(BiPa)
44% Legitimate Roslyn analyzer package
HartsyInference.World 2.0.0-alpha.3 Interactive world models for HartsyInference — action-conditioned real-time streaming sessions, camera/Plücker conditioning, FOV memory ret… 74 installs 5d ago dotnet
3bea4b51302206498d2fd34a88f4165f544de440734f8430d93ae0fb00b667df H(Db)Md₂(BiPa)