Fallout

Recently scanned open-source supply-chain artifacts and public lab uploads.

@atom-js-org/electron Electron-compatible API facade powered by AtomJS without bundling Electron or a private Chromium runtime. 2d ago javascript
5f4d089f66f73efbef66d753636ac385fbb066d6144e5f1ff8431e4e98aa8c61 H(Os)Md(Pa₃)
80% Typosquatting legitimate Electron package
@nuforge/core Reactive state-management runtime for nuforge (signals-based observable AST) 3d ago javascript
c416cdc2d993a8fe90737df3436e67cb8d3d5ce1a1995658dba5a79aa73797c7 H(Os)Md(Pa₃)
33% Legitimate state management library
@axicharts/charts-full Batteries-included AxiCharts meta-package — full chart surface plus spec, runtime, and theme. 3d ago javascript
4e438eb513eedd3b101f5e6323ef63dea0fc77431234e980a5247a42bad01dd5 H(Os)Md(Pa₃)
46% Legitimate npm package metadata
@wizeworks/silicaui-panels Silica UI resizable panels — react-resizable-panels wrapped with a Silica-styled resize handle. 3d ago javascript
920f26388f3ba752a0a06d0660e98fdee24b0e3b1bd58a426aabf5d9bb6de3d2 H(Os)Md(Pa₃)
45% Legitimate UI component package
@typestyles/astro Astro integration for typestyles (dev HMR, production CSS extraction) 3d ago javascript
d863d66bb5df7b3a0491707570dfcbcf896dae84bd05e0e7b8d1b10ff73ead5a H(Os)Md(Pa₃)
40% Legitimate npm package metadata
@5stack/ui Shared 5stack design system: shadcn-vue components, Tailwind preset, and design tokens. Consumed by web and custom-page plugins; shared as… 4d ago javascript
f88dc8ceaa4b888684eaf021540020212e0353e4b5402c3b3bb4285e43edc078 H(Os)Md(Pa₃)
35% Legitimate UI component library
opencode-session-correlation OpenCode plugin that injects a stable UUID correlation header per session for configured providers, so a gateway can group requests from th… Jul 14 javascript
d12431268b38d8bccf5995810e775ab685b10710c5a143c51400e57a398b1d97 H(Os)Md(Pa₃)
typedoc-plugin-extras 4.0.1 A TypeDoc plugin to add extras (favicon, description, generation date...) to the output documentation Jul 12 javascript
f75902d5049df454748fdd9588903d950fdf92b10ce5b3f55330e90ecefb9cb0 H(Os)Md(Pa₃)
34% Legitimate TypeDoc plugin package
safegres Pure-Postgres Row-Level Security auditor: grants, RLS enforcement, policy coverage, and risky SQL policy patterns. No app framework require… Jul 12 javascript
4bd6bf2d43970fde2e5d404d1a59543d99791b8b6fa641efb05c94ffe6821421 H(Os)Md(Pa₃)
48% Legitimate PostgreSQL security audit tool