Fallout

Recently scanned open-source supply-chain artifacts and public lab uploads.

mage2kishan/module-not-found-page 1.0.6 Custom 404 Not Found Page for Magento 2. Replaces the default CMS 404 page with a modern, fully configurable design featuring dynamic categ… 34 installs Jul 7 php
da3b8d5e67c3ea850d7d05678e481c999fbfe09f64051ea5e77f1c5e97fe6919 H₃(CmDbOs)
mage2kishan/module-order-cleanup 1.0.6 Panth Order Cleanup — safely delete test orders, invoices, shipments, and credit memos from Magento 2 with double verification, deletion lo… 8 installs Jul 7 php
0a49e73d2fd1d3e058fc8f0ce29b5e3b521ef2c6e47524450e0f650f2366e987 H₃(CmDbOs)
mage2kishan/module-ordered-items 1.0.6 Panth Ordered Items — adds a rich 'Order Items' column to the Magento 2 admin Sales Order Grid. Displays product thumbnails, names, SKUs, a… 13 installs Jul 7 php
771e35b5644b07fcea2480a3c7200968d93dc2a69e895162a8cc994e8deb20b7 H₃(CmDbOs)
80% Phoning home with hardcoded credentials
scrapedatshi-mcp 0.1.6 MCP server for the scrapedatshi RAG pipeline API — use scrapedatshi tools directly from Claude Desktop Jul 5 python
4c2c7ae22c7496b0327a36f3062a5c8cc4a71e7868def21d919885218a553361 H₃(CmDbOs)
kaeris-mcp 0.1.2 MCP server for KAERIS i18n — AI-native localization for Claude Desktop, Cursor & agents Jul 2 python
8b58a9aa99d8688f62832689c7835dd916b29a4c64f954faf0ed49996488cfe3 H₃(CmDbOs)
38% Legitimate Python package metadata and code
BACnet.Ethernet 4.0.0-beta.1 pcap-based BACnet/Ethernet (ISO 8802-3) transport for the BACnet library. Optional add-on that keeps the native SharpPcap/PacketDotNet depe… Jul 2 dotnet
0d2e85dbca846c6761c14f14744eda7d267fbdc0b33248a80d5f0f5dfa2ae97c H₃(CmDbOs)
46% Legitimate BACnet library package
signalops 0.1.1 Operational intelligence for AI agents. Human judgment should compound, not evaporate. Jul 1 python
81143a0a833013ed22b03d4b5df8d5fa1b436f31f860a8264dbb1081e6195228 H₃(CmDbOs)
Havit.Core 2.0.38 HAVIT .NET Framework Extensions - Basic Class Library 707,389 installs Jun 30 dotnet
5ffddc6ec8d410850b7b672c094f1253d073529f77bcb022c5ee87e9673b4492 H₃(CmDbOs)
41% Legitimate .NET library package
launchdarkly-observability 0.3.0 OpenTelemetry-based observability instrumentation for the LaunchDarkly Ruby SDK. Works with Rails, Sinatra, and any Rack-compatible framewo… 631 installs Jun 29 ruby
b2a01605df539aa8d7d34cfded54aa69eed928ab7542415a42217334a449bc0a H₃(CmDbOs)
48% Legitimate Ruby gem library
Shiny.Core 5.1.0 The Shiny Core Foundation where all Shiny modules are built on 2,093,779 installs Jun 28 dotnet
e0042f5c867785e3dfd49428d553a3d08dc3138545cffeb22a0cc1630578b504 H₃(CmDbOs)
44% Legitimate library strings
raggity 0.1.1 Local-first, top-tier RAG over your notes, docs, and PDFs — answered by Claude. Jun 28 python
021a11724785ea53b46e1bcbb5c018d2ac22e5d88942a1b81d09e3b9c1fa2b78 H₃(CmDbOs)