Fallout

until-async 3.0.2 Gracefully handle a Promise using async/await. 17h ago npm

9b81c47a9e4256a4a02ad79086011969e481fd19885c4d5561edaa0614e40819 Md₂(Pa₄)

38% Legitimate npm package source code

@open-draft/until 3.0.1 Gracefully handle a Promise using async/await. 17h ago npm

d0d3b2d73845768af370f6ed897b54d8659d1fe0a6524a8548d9d7b8f75a3620 Md₂(Pa₄)

@lottiefiles/dotlottie-vue Vue wrapper around the dotlottie-web library 1d ago javascript

6f0bf5d617c6001d7b0234cb15f81759ed8f3217d1d981475709baec656956f9 Md₂(Pa₄)

@negotium/adapter-sdk Shared lifecycle contract for Negotium channel adapters 1d ago javascript

94058e7dd3288ca7472453ae2edc0e78376645b3e3fd127e2f18d84dac250996 Md₂(Pa₄)

38% Legitimate npm package metadata

@wordpress/deprecated 4.44.1-next.v.202604201441.0 Deprecation utility for WordPress. 2d ago javascript

3776de922c7231109cf47a124d26341c3ba2454d2dac397b487360fca5391f74 Md₂(Pa₄)

@habemus-papadum/aiui-claude-plugin A Claude plugin (skills, commands, scripts) with a CLI for configuration info. 3d ago javascript

44e37f7a89bf806f6baf5fad218239451c5db4fe0a644d2ef6c95fd9d29c595d Md₂(Pa₄)

80% Unlisted publisher, potential takeover

@zeturn/watercolor-icons-heroicons-react Heroicons icon resolver for Watercolor UI (React). 3d ago javascript

281043a848c0a6635b041630ace6746c2ccd801ae60158d5607de24b67129468 Md₂(Pa₄)

35% Legitimate npm package

@zeturn/watercolor-icons-heroicons-vue Heroicons icon resolver for Watercolor UI (Vue). 3d ago javascript

96e47f10a7262482b04a62d3d0fb655887dd5a07b176ea080c70fce55b464e5d Md₂(Pa₄)

35% Legitimate Vue icon library package

@composius/payload-plugin-pages Payload plugin that adds a Pages collection 3d ago javascript

195fd5ec814d4e80ea2e4b0e3bd6f2b641a4ff402ee77bc62dd50ad806d7a7ff Md₂(Pa₄)

36% Legitimate npm package metadata

@composius/payload-plugin-menus Payload plugin that adds a Menus collection 3d ago javascript

2d47a4bee9682d9dfb188f5196419c02c580741a8b4a7efa96c5335eb2bf6770 Md₂(Pa₄)

@composius/payload-plugin-axiom Payload plugin that sends the Payload logger output to Axiom 3d ago javascript

b9ef421fa7c01e5ada7283fcf4e5eef9d1bc4b89345d5bb189b14aadc87443b6 Md₂(Pa₄)

35% Legitimate CMS logging plugin

@momo_vision/dental-chart Interactive dental chart components and utilities for FDI adult tooth selection. 3d ago javascript

4749bfbfc80f4f51742da11f7fee712ae2defab9f4167c60ff91d705c5de9e2f Md₂(Pa₄)

44% Legitimate UI component library

@kb-labs/infra-worker-contracts Public contracts package for infra worker plugin invoke payloads and results. 4d ago javascript

73e6a98b52f2832a218b7234ddf16c7cae9705cce38a427939347fd92a9a8c21 Md₂(Pa₄)

53% Legitimate TypeScript package with standard metadata

@kb-labs/agent-runtime Shared runtime engine and mode routing for KB Labs Agents. 4d ago javascript

2622f675e941c7bf0aa37d07b82eb17f11e11db39038fdea5cb190869e359f7e Md₂(Pa₄)

34% Legitimate npm package with standard metadata

@aiao/code-editor-react 基于 CodeMirror 6 的 React 代码编辑器组件。 4d ago javascript

2612974f0e8a1b02ce97251893b4ee74153144ad93fdb3d42cc1d7e990de72a7 Md₂(Pa₄)

38% Legitimate React code editor package

@aiao/code-editor-vue 基于 CodeMirror 6 的 Vue 3 代码编辑器组件。 4d ago javascript

98a3130c29e222c97ec263f4674dcf158753324e352716e201c13d4d4741ca54 Md₂(Pa₄)

@aiao/rxdb-plugin-graph > Implements: [US-503 图数据插件](https://github.com/aiao-io/aiao/blob/main/requirements/stories/plugin/US-503-graph-data.md) 4d ago javascript

8cf0db899bac6b29371a692d19e338aa28ca67e3d2daf0150d92caedeb4b8d6c Md₂(Pa₄)

41% Legitimate npm package metadata

@ajayg3997/shared-lib This project was generated using [Angular CLI](https://github.com/angular/angular-cli) version 22.0.0. 4d ago javascript

aa1eec7b245e098e8e9cce8ff22b7588568edb0e7cf3dfc8db5c896ecc1cac52 Md₂(Pa₄)

54% Standard Angular library package

@wcstack/accelerometer Declarative Accelerometer component for Web Components. Framework-agnostic Generic Sensor API (Accelerometer) monitor via wc-bindable-proto… 4d ago javascript

f64ba6b0dfcea21d027791e85937375e87eff852d29b338cb4dd5f04c659a251 Md₂(Pa₄)

48% Legitimate web component library

@wcstack/ambient-light-sensor Declarative AmbientLightSensor component for Web Components. Framework-agnostic Generic Sensor API (AmbientLightSensor) monitor via wc-bind… 4d ago javascript

67fd1ebf8e190f9a8eed6f7bdece6f04ec9b706e40915260057825fe8c2f5c8e Md₂(Pa₄)

47% Legitimate web component package

@wcstack/contacts Declarative Contact Picker component for Web Components. Framework-agnostic navigator.contacts.select() wrapper via wc-bindable-protocol. 4d ago javascript

60e28676559b341a8bf02d40044f811f684db79372f56bc27ae827a871b271e2 Md₂(Pa₄)

50% Legitimate web component library

@wcstack/credential Declarative Credential Management component for Web Components. Framework-agnostic navigator.credentials get/store wrapper (password/federa… 4d ago javascript

bcb975bffddf17ff6c74ca6bffae91c3e9156e77db47577c56065cea22493fca Md₂(Pa₄)

50% Legitimate web component library

@wcstack/debounce Declarative debounce/throttle components for Web Components. Framework-agnostic signal coalescing via wc-bindable-protocol. 4d ago javascript

15f2765c6fc849cd20ad30e6a11af8bfc17d0102e4dc6e9827af7fbcb5135bc2 Md₂(Pa₄)

46% Legitimate debounce library package

@wcstack/eyedropper Declarative EyeDropper component for Web Components. Framework-agnostic EyeDropper.open() primitive via wc-bindable-protocol. 5d ago javascript

c415fe4b54a5830bb0d696f215e88dcbaa4863dc47841602f13728458b713386 Md₂(Pa₄)

50% Legitimate npm package, false positive

@kosdev-code/kos-ddk 5d ago javascript

fae6327b653e09c5412cc960e503c7f4b090a147d0ceb8653468b9a3c582db79 Md₂(Pa₄)

@monterosa/sdk-consent-kit Consent Kit for the Monterosa JS SDK 5d ago javascript

175bb7e85124e53afffb00f176d899ad70b86fdce963eed2154b4e68f63d19cd Md₂(Pa₄)

37% Legitimate npm package

@monterosa/sdk-storage-kit Storage Kit for the Monterosa JS SDK 5d ago javascript

cd32ee471fa26c41e29e8912b9126bd97a43e1b0e9a6a45c05c725b183d76ffd Md₂(Pa₄)

39% Legitimate npm package source code

@ppagent/gateway PPAgent source routing, reply composition, and outbound delivery runtime 5d ago javascript

ad0b30dba2c465e86738cdbb2498e1ab573afc77fa837016c76cb9578ede5a1c Md₂(Pa₄)

@wordpress/deprecated 4.44.0 Deprecation utility for WordPress. 5d ago javascript

61267af1fb8f6015078d91f50ccba063603727e581dd43e4fd134336c4763f51 Md₂(Pa₄)

@aigne/afs-aws-cost AIGNE AFS provider for AWS Cost Explorer billing data 6d ago javascript

182d4ac0fe7485d09204a53dc36e9227e8dbc06f60bcb84b54cb9373cbe3dd7f Md₂(Pa₄)

@pfncl/gutenberg-to-puck Convert WordPress Gutenberg blocks to Puck visual builder data Jul 15 javascript

d6b4c1564877821043635d02e5e38fbf03a532f59e57ea437c6b03cdc24937d3 Md₂(Pa₄)

@typia/langchain LangChain.js integration for typia Jul 15 javascript

7dd2eb129f22e4902e3958ff7b885cbca39ddfb7d059ed83b369c0697ca276ca Md₂(Pa₄)

33% Legitimate npm package metadata

@arco-themes/vue-beflops Powered By [ArcoDesign](https://arco.design/) Jul 15 javascript

a8d0885d4844f3da9c4008b56699e0b2e8133bc3555c1cee8109ae025c8e85a5 Md₂(Pa₄)

@deebeetech/array-helper A small collection of extra methods for arrays that we mostly needed from LoDash and Underscore that we didn't want to carry the weight of… Jul 14 javascript

0de315f6db7b4b08a425cd9c7de2a125418ffdc4c827a30fc63854284d6a006a Md₂(Pa₄)

41% Legitimate array utility library

@modern-js/image <p align="center"> <a href="https://modernjs.dev" target="blank"><img src="https://lf3-static.bytednsdoc.com/obj/eden-cn/ylaelkeh7nuhfnuh… Jul 14 javascript

c6d2975b83464d5954321307df145fa304f84409c17e4db223b7dedac9282952 Md₂(Pa₄)

@lippelt/srd-core Plugin core for tabletop RPG system modules (types + registry). Each system ships in its own package. Jul 13 javascript

6327e8cfcf42f935ff429655bf34240decc34e4aa828b87689c6ddfc2e8928e7 Md₂(Pa₄)

51% Legitimate npm package for RPG systems

@compsych-ui-components/shared Shared types, design tokens, utilities, and assets for compsych UI components Jul 13 javascript

4eb61946447ddc09d58fce29abe592c2841c48cc6b1b4bf167c1f979863256ee Md₂(Pa₄)

82% Legitimate UI component library

@doubao-apps/template Doubao Apps Widget 模板库，用于快速开发卡片类 widget。模板把标题栏、内容区、信息区和操作区组合成稳定的卡片结构，开发者在 `defineWidget` 里选择模板并传入业务数据即可。 Jul 13 javascript

bff4e21f563cc5dd76ba5ac48e637ddc6d4e7206c93a350d72865b7d26eddd29 Md₂(Pa₄)

@aws-amplify/interactions Interactions category of aws-amplify Jul 13 javascript

6db8351311dfad3a4e198dc5fb3df96b0dff74adaa39eed10b9c65697f13b950 Md₂(Pa₄)

@aws-amplify/rtn-passkeys React Native module for aws-amplify webauthn support Jul 13 javascript

003054501092717d57819855847f3a90deb0101e7f3923bf1898d2b2e3e62e4b Md₂(Pa₄)

35% Legitimate AWS Amplify package

@surdeddd/wmkit Headless, framework-agnostic window manager for the web — draggable, resizable, snappable windows with first-class accessibility and 60fps… Jul 13 javascript

782673d821e84bfdbf5e52b186505d6f78688d7b5880745f72b87e4128f7735e Md₂(Pa₄)

38% Legitimate UI library package

@kadaster/ggc-map-3d De Generieke Geo Componenten (GGC) helpen softwareontwikkelaars om snel een kaartviewer te ontwikkelen. Jul 13 javascript

6fb721dac4369b6796dcba247d1b3954013ab91bc62305c78fc1d17a732f8eef Md₂(Pa₄)

@wordpress/deprecated 4.43.1-next.v.202604091042.0 Deprecation utility for WordPress. Jul 13 javascript

f4bbcfdb19202830e3da65eb7d2836b1a8975bf101b355ea5b8aa32ae010a142 Md₂(Pa₄)

@vsfedorenko/next-logger Universal logging kit for Next.js — patches Next's internal logger & console, routes output to consola, Sentry, JSON, and more. Jul 12 javascript

29419cdbccc84d337b12256f1b48224f8ef942fe079ed873d27e4b60272f1fb0 Md₂(Pa₄)

@semcore/grid 16.0.11 Semrush Grid Component Jul 11 javascript

1e9b8d67cf129ee9dbb64119cf96bf37b78e879a9baf78f94629b37fc52a1625 Md₂(Pa₄)

@eggjs/dynamic-inject tegg dynamic inject Jul 11 javascript

9e26bfd996f229540a09516580818acaf948cc4d9174bb7f7e46f36cad3ad4c4 Md₂(Pa₄)

@kurone-kito/eslint-config-base 0.20.0 My ESLint configuration for general Node.js projects Jul 11 javascript

7c1f0c7e6375b4f5ca85e1a269aa0a7054babbac89164538f81e3ccb631669ab Md₂(Pa₄)

github.com/codeyourfuture/curriculum/org-cyf-guides v0.0.0-20260709192302-9b07e95c7d6d Jul 9 go

7f9b9b90394c944db6d1c8fc9fbf4dc25ef2595fe662273b0bec1e9347dc200f Md₂(Pa₄)

40% Legitimate curriculum package metadata

github.com/CodeYourFuture/curriculum/org-cyf-guides v0.0.0-20260709192302-9b07e95c7d6d Jul 9 go

c32631e8db25fb667a22c0fe25321adfe6157e9b4b62917c8d057d955103118a Md₂(Pa₄)

@trackunit/react-table-helpers The `@trackunit/react-table-helpers` package is part of the Trackunit design system. It contains helper functions and hook used for the Tab… Jul 9 javascript

aa5c7ab687f4fb3576a00a1d3e59f598444466dea0384a3db47f1f441b9a1077 Md₂(Pa₄)

@glotblocks/glost-translation Translation extension for GLOST - adds multilingual glosses Jul 8 javascript

bbad53b1a0089c2a92a43905a8244d9920a8f7f9f08d0ed121f2e667c6eaf9b4 Md₂(Pa₄)

github.com/robert-hanuschke/robhan-cdk-lib-utils/robhancdklibutils v0.0.291 Jun 30 go

3b3c6ec324d2fc52682323ec0f47be9f5c3fe795ed6b72b85730cd3400c9e914 Md₂(Pa₄)

ros-cdk-searchengine 1.14.0 Jun 24 python

cc50976d047dd303b25e3ab2228fd5437d16af882ead7e79a06754d4e03d68ae Md₂(Pa₄)

38% Legitimate Alibaba Cloud SDK package

ros-cdk-green 1.14.0 Jun 24 python

8796e6f08aebc76850a6c941f2996014c619672adc362e2b179c2663d7bb1f73 Md₂(Pa₄)

ros-cdk-ots 1.14.0 Jun 24 python

98cad0af7368e7404d2afed266ab960a85c49a025682cf92bae98a7e9005b2fd Md₂(Pa₄)

47% Legitimate Alibaba Cloud SDK package

ros-cdk-fc 1.14.0 Jun 24 python

60b060199c1b7913e5e0866629b1eb42f7515d06baad905fd07a285312e2bee6 Md₂(Pa₄)

45% Legitimate Alibaba Cloud SDK package

ros-cdk-dashvector 1.14.0 Jun 24 python

f26c02417adf3a607cc48a5a283cbc656778a72a5b561e269cdc497d4c668a62 Md₂(Pa₄)

ros-cdk-dataworks 1.14.0 Jun 24 python

ac9c4cf63e8dff3e7d5f0efc9861d911fa2502febf03d8cb5dadab18ed54150e Md₂(Pa₄)

49% Legitimate Alibaba Cloud SDK package

ros-cdk-ebs 1.14.0 Jun 24 python

1c149bece383c82dd1201ab3987fb0ff4af3b1a67c30676408c9883bb23ead95 Md₂(Pa₄)

48% Legitimate Alibaba Cloud SDK package

ros-cdk-edsuser 1.14.0 Jun 24 python

2c507f9d8f0ea75fec00ea2a2f9ad299cd646b43dd157eaa8f88cc2d94da1d30 Md₂(Pa₄)

38% Legitimate AliCloud SDK package

ros-cdk-elasticsearchserverless 1.14.0 Jun 24 python

20858130b64950933865d1b828fca967b5b14d39cc27b766173a76941dbf6e79 Md₂(Pa₄)

46% Legitimate cloud SDK package

ros-cdk-rds 1.14.0 Jun 24 python

c2683af4aecf4ded38488a3a2708076afbc10d87ef265dfa6c10037ec5fac793 Md₂(Pa₄)

ros-cdk-cdt 1.14.0 Jun 24 python

6aeac9cff467512f977bc768ee2e839ea7862524294eebe397390bcac472e9f6 Md₂(Pa₄)

37% Legitimate Python package metadata

ros-cdk-cms2 1.14.0 Jun 24 python

737b51fb9ef650af1f925ac84ea2746d0ec73a5de6dc16af09783f1686d6d065 Md₂(Pa₄)

39% Legitimate Alibaba Cloud SDK package

ros-cdk-lindorm 1.14.0 Jun 24 python

e4e097fa3bdca61790efcb3b43176839affedf16694203b7d04bf476f8a3c4c9 Md₂(Pa₄)

ros-cdk-adblake 1.14.0 Jun 24 python

96e86e4e7fbdd272c9356cfff69e161136791a4a1e32baebe9cfbb86b91dc14f Md₂(Pa₄)

45% Legitimate Python package metadata

ros-cdk-cloudsso 1.14.0 Jun 24 python

c345f58dfab4ef2c7e0066ded0c7e9f85e6b05883dca247c86f8a16862e7b501 Md₂(Pa₄)

43% Legitimate Alibaba Cloud SDK package

ros-cdk-eflo 1.14.0 Jun 24 python

c64bf67cdb1488283e11b97eac5ffcc2d84402871e58f576fca41279da962a9d Md₂(Pa₄)

41% Legitimate Python package metadata

ros-cdk-vpc 1.14.0 Jun 24 python

e717619eeaedf00e70f26f8465027e49d692b06ee54479569578bc190be601c5 Md₂(Pa₄)

40% Legitimate Python package wheel

ros-cdk-mps 1.14.0 Jun 24 python

3ecf0693327d1942225277d4bf2551df8f9cb91eed6a572d8cfc818d25ddee8f Md₂(Pa₄)

39% Legitimate Alibaba Cloud SDK package

ros-cdk-dfs 1.14.0 Jun 24 python

b7acb17628e20fbfdb7b6f9ba019f9f5482b7532778745f408cc18c01e311f2f Md₂(Pa₄)

47% Legitimate AliCloud ROS CDK package

ros-cdk-paidatasetacc 1.14.0 Jun 24 python

94c1b40e2514bfe02937053a292e10dee835172eb5f4e2b30f432ff2bb6d6225 Md₂(Pa₄)

ros-cdk-cdn 1.14.0 Jun 24 python

3200f61d92f6092b0819f2c4a9ff27b0c75b9e69dee86abe03cb220e90421207 Md₂(Pa₄)

ros-cdk-cddc 1.14.0 Jun 24 python

7b4f39b644f65fc88cb121cb61ca794f48ccc57ed8842282026d691bb3d3959a Md₂(Pa₄)

46% Legitimate cloud SDK package

ros-cdk-eventbridge 1.14.0 Jun 24 python

e8b91e349b0e2a073760d974820d585b4c66076e740d5fec7895e9ad5d40b8d6 Md₂(Pa₄)

ros-cdk-resourcemanager 1.14.0 Jun 24 python

45631621da752a44347e03478d11a78ffc1f912b950272b091c13004820cea84 Md₂(Pa₄)

39% Legitimate AliCloud ROS CDK package

ros-cdk-kms 1.14.0 Jun 24 python

f31ec5b88605a8b31f466964b5902298804b1c7d6f38b3e382d28d4b93f4ea12 Md₂(Pa₄)

42% Legitimate Alibaba Cloud SDK package

ros-cdk-marketplace 1.14.0 Jun 24 python

ba394aea627ff134f56ecef56a49954e54b5e4b4f473f3690281c1c92963e877 Md₂(Pa₄)

ros-cdk-nlb 1.14.0 Jun 23 python

9af8b7d8e9b48e34ebb94302f33fd5dd4f69cbf25075bbffd47a7a1adc07f9e3 Md₂(Pa₄)

46% Legitimate cloud infrastructure library

@strapi 5.48.1 Jun 22 javascript

f5166b4306c06fcce4678be5fcf147b1d6cb1920ca8d9bb09400507f6e9e5f74 Md₂(Pa₄)

@praxisui/rich-content Jun 21 javascript

257d04adb45e37f6ccd47b5869eb0c34c71f238c4da8fcc84be6d270b80e103b Md₂(Pa₄)

41% Legitimate UI library package

@easbot/types Jun 20 javascript

4a85f94424055564f3c46b83f1967c4742f5f9291ab58ba28fb5de65452747a2 Md₂(Pa₄)

@simplysm/capacitor-plugin-intent Jun 20 javascript

d6c83235dc5ec904f1b296f576ce8c9dd81a93da220122da63e771b843656af7 Md₂(Pa₄)

@trackunit/react-form-wizard Jun 18 javascript

72c815aa50f9a39d7aea6ae85b657f8ec7ccc24e825c9d9e9b12575796f38a7f Md₂(Pa₄)

41% Legitimate npm package with standard code

github.com/robert-hanuschke/robhan-cdk-lib-utils/robhancdklibutils v0.0.280 Jun 17 go

2107af272ec8615fa4225cd1fc2adb921ee985912edb8c83bacc0124127a2e7e Md₂(Pa₄)

@sbb-esta 5.0.0 Jun 10 javascript

46df82cdbddbeb415490ce565edea74dca3591fdca9e39b634a39b0a29b0b1db Md₂(Pa₄)

@ethlete/theming 2.7.1 Jun 6 javascript

b5f51d1f9a373cad1958849056885bee8d7696ab64dc24c628dbe966133eff45 ✓ Md₂(Pa₄)

@progress 24.0.1 May 26 javascript

b5d905e13dad48f1bbe4e9d5f89b9b4fb064e2c0cb46ff016f484818a1b08cea Md₂(Pa₄)

65% Legitimate npm package

@praxisui 1.0.0-beta.28 May 24 javascript

920e44543eda2af1a7ec88dff8ee4f715f0bd3b21e7a52a7633418e82cec7ab7 Md₂(Pa₄)

@aws-mdaa 1.6.0 May 22 javascript

a6e15695bd9d9c5588766e6dbd2ba768e40d1fea5430d599853c46f88f7c1e2d Md₂(Pa₄)

@aws-mdaa 1.6.0 May 22 javascript

0ffde13d2e6cbb17d02d35c73567a3404913b8c614cfcb7e282a1109f713fb0c Md₂(Pa₄)

@aarongoldenthal 46.0.1 May 20 javascript

2617196441bb5df56e74dae099b84dcab6ab3259123dada6d5d46f246720823e Md₂(Pa₄)

@trackunit 1.30.1 May 20 javascript

c7ddb35a425ef2804a195278343de2012247ae57d11d742b8f7e3ed64c52ffd8 Md₂(Pa₄)

@bitgo-beta 1.0.0 May 20 javascript

2353a38ae51a0e952b4acf4080a517b2e0ccb8fd626a707af1f46388cc05e856 Md₂(Pa₄)

@bitgo-beta 1.0.0 May 20 javascript

a6f23dc79c7c5e9d2f4398f2c13cdf570a41ba5ac32b860f31ec2dc3b334b20e Md₂(Pa₄)

@bitgo-beta 1.0.0 May 20 javascript

3a983f2cdd514013b2564c04432fb9423d6aa1e8aaaf6d76c6801aa7db138a9c Md₂(Pa₄)

@bitgo-beta 1.1.0 BitGo SDK coin library for Zcash May 20 javascript

04b86d5563edeffc5d16e339ce75bf4c41e7f8001d99b5e91ae3c9843ae4d5b6 Md₂(Pa₄)

@bitgo-beta 1.1.0 May 20 javascript

0ffb4cd28aca3d2719efc756b7e51a48d05c9fd60e5a7ea1e333519955b5324c Md₂(Pa₄)

@mpxjs 2.2.28 May 20 javascript

1862286728ca337933e7f4eb97e2fd83baef84f42965c6b8624c3181bcb3d7bd Md₂(Pa₄)

@aiao 0.0.20 May 19 javascript

a0f87c9824e6326f95e3cc03b76a146a5d5241f31da8f4cf059aa675bbf38fbd Md₂(Pa₄)