Fallout

Recently scanned open-source supply-chain artifacts and public lab uploads.

anacal 0.8.0 Analytical Shear Calibration 86,318 installs Jul 21 python
3337e682299b7948285422643e19f4441884a3ae33cc595dcfcf27593eb33fd8 H(Po)Md(Bi)
parquet-format-2.6.1.crate Apache Parquet Format - thrift definition and generated Rust file 2,262,089 installs Jul 16 go
a5bc6b23543b5dedc8f6cce50758a35e5582e148e0cfa26bd0cacd569cda5b71 H(Po)Md(Bi)
parquet-format-4.0.0.crate Apache Parquet Format - thrift definition and generated Rust file 2,262,089 installs Jul 16 go
1f0c06cdcd5460967c485f9c40a821746f5955ad81990533c7fae95dbd9bc0b5 H(Po)Md(Bi)
libvterm 0.3.3-r7 Abstract library implementation of a VT220/xterm/ECMA-48 terminal emulator Jul 13 wolfi
5a098feef3f93436edc838b4c48d702d6249ca10938776ccc81011d0472a72e2 H(Po)Md(Bi)
TieXiu 0.2.0 High-performance PEG parsing (a port of TatSu to Rust) Jul 9 python
b7f8e959944340ef29b7fa3f0ac6501abef97a2609aef66bc291f4ae1ac243ba H(Po)Md(Bi)
qrcode-ai-scanner 0.7.1 QR decoding + scannability scoring for artistic, AI-generated, and photo-captured QR codes — Rust core via PyO3. Jul 8 python
bba781f656cbf6adf216bcf2657e6a72fcd337904d3f36d473c5572258b6fb27 H(Po)Md(Bi)
qrcode-ai-scanner 0.5.0 QR decoding + scannability scoring for artistic, AI-generated, and photo-captured QR codes — Rust core via PyO3. Jul 5 python
e97364af5a50d230236dee4e77ce8f56fa085042f746d72f20f7d12bc7e3c461 H(Po)Md(Bi)
lcax 3.5.0 LCAx is an open, machine and human-readable data format for exchanging LCA results. Jul 5 python
b6361c68afb0fed48a4a534b782e602c40ab669fd26f836c83a999343aaf0512 H(Po)Md(Bi)
dtcs 0.3.0 Reference implementation of the Data Transformation Contract Standard (DTCS) Jul 2 python
f490183c806f090f06d3b10643ebfbfed2ad8befb89b86fd11c32ca499b3ff74 H(Po)Md(Bi)
38% Legitimate Python package with standard structure
xofz.Core98 1.9.19 Framework for building testable, maintainable software for .NET. 134,713 installs Jul 1 dotnet
069036c0fd7d84d862de3b50e6300098204a16155ac177008837c21e899768be H(Po)Md(Bi)
80% Obfuscated process execution tokens
xofz.Core98 1.9.17 Framework for building testable, maintainable software for .NET. 134,654 installs Jun 30 dotnet
ba0294e47e8f046fc2206bf6ab4c792b73694ba93804a1464d009ef50b043563 H(Po)Md(Bi)
turbotext 0.1.0 Boundary-aware fuzzy keyword matching with pluggable conflict resolution Jun 30 python
2f29c9174ee6880db7e5a84a249d2608350490d6c345d441890e839bc34c8150 H(Po)Md(Bi)
41% Legitimate Python C extension package
arraykit 1.3.1 Array utilities for StaticFrame Jun 29 python
279670d910f17f04a929c2641dd5d2d021e6118cfa94f241c6ace802497230f8 H(Po)Md(Bi)
50% Legitimate Python package with C extensions
xofz.Core98 1.9.9 Framework for building testable, maintainable software for .NET. 134,536 installs Jun 29 dotnet
550c4c25968328ae59816e2f639e04dd79db478f25426fc1f5b1ee209c9ad189 H(Po)Md(Bi)
80% Obfuscated process execution tokens
Persiltech.Membership.Shared 1.0.1 Contains basic classes and interfaces for use in backend and frontend membership projects. 105 installs Jun 28 dotnet
5b73a1a14ad4b7a936a908be348897eca98eedab76b5d9ecbb84827764ff2fd4 H(Po)Md(Bi)
45% Standard .NET library metadata
_adb Jun 28
7c2f561ab630e975e1747fcc9e205a99b32d0dab768fd2d5c2bd925d08f14856 H(Po)Md(Bi)
abook Jun 28
83ee75c616d346abd1a959fab4a94caac5b3477cb30dfac1e60537149dd8e926 H(Po)Md(Bi)
ri Jun 28
339e6a80094384619939a9f6470e3581f7f74e127700f79573a98b1499357675 H(Po)Md(Bi)