javascript Fallout

Recently scanned open-source supply-chain artifacts and public lab uploads.

@tramvai/module-seo The module internally takes data from the page configuration, generates meta tags and adds to the page. 6h ago javascript
c64a960e05a23de6ee41ff4fc5432a73d0d483ff31f0f9015279b75f4124595d H(Db₂)Md₂(Pa₃)
57% Legitimate SEO module package
@sungen/driver-ui Sungen UI capability (Playwright) — step patterns, viewpoint gate, and phase hooks. Plugs into @sun-asterisk/sungen via the capability SPI. 6h ago javascript
e529601e2e30ebaed35bc6db81f681eff308bc0a5f110f8fcbb46375a7497e75 H₂(Db₂F)Md
38% Legitimate npm package source code
@sungen/driver-db Sungen DB capability (Data Driver) — the @query annotation, query catalog, declarative DB steps, and the specs/db.ts runtime template. Plug… 6h ago javascript
ce362903052538eed35c624261aed883ea7a4d1820ec909fcbcafcc9556467c6 H₂(Db₂F)
35% Legitimate npm package source code
organic-protocol The shared protocol of the Organic Economy: wire formats, QR codes and API contracts, verified by the TypeScript compiler. Companion of org… 7h ago javascript
e0ec5377f6318c664c81d15c32efdd0d31902e874ba3a1557a8de46f85a2da05 H(Db)Md(Pa₄)
41% Legitimate TypeScript package metadata
@momo-kits/native-kits ComposeKit là bộ UI Kit đa nền tảng phục vụ Mini App/SDK của MoMo. Toàn bộ giao diện, điều hướng, token thiết kế và layer tích hợp với MaxA… 8h ago javascript
10fd1b384424a78a074d56273dfda285258642099ad1a9dbd59c530d7041dd9d H₂(F₅Po₂)Md₂(Pa₂)
41% Legitimate build and utility scripts
vaultmd Headless markdown-vault data layer for Bun — CRUD + SQLite index, no Obsidian required 9h ago javascript
3b40f6596da665f7c5e4405928231791b68f0f6162e23cb9390eb9b80c312dcc H₃(CrDb₄F)Md(Pa₂)
53% Legitimate markdown vault library
@spezutil/hijri-view-core Pure view-model builders for Hijri calendar UIs (month grid, time grid, agenda, event layout). 9h ago javascript
efabcd2ec44101f5199d74336cae7c4ca7747256b179c95af90d8728700479ac H(Db)Md(Pa₄)
35% Legitimate calendar UI library
@litou.cjs/aa-fetcher Type-safe TypeScript client for querying Anna's Archive. Search is one of several modular sub-features, with clean interfaces reserved for… 9h ago javascript
eae198248a35c63892fbe3b7f5e582687b607b0727659e736b631f262110052a H₂(Cm₆Db)Md₂(Pa₄)
65% Legitimate library for querying Anna's Archive
@gitmyabi/melon Auto-generated TypeScript type bindings for MELON (build etherscan-melon-8b96cb83-1784620719303, commit 244048f, branch etherscan) 9h ago javascript
84bbd87186143ce8abeacd7b6282546d7b31f0fb5d75875e225e894f0030af73 H₂(DbOs)Md(Pa₃)
54% Auto-generated smart contract bindings
@getpipher/armory-todo Global, cross-session TODO for pi — persists across all sessions and is auto-injected into every prompt. The disk-backed counterpart to bra… 9h ago javascript
0bea4d2eebfd16b26d2a9e93328663b212f3286c6d08530919d636826f67c511 H₅(CmCrDb₂F₄Po₃)Md(Pt)
80% Wipe alert implies destructive capability
create-webiu CLI tool to generate, configure, and deploy Webiu community portal applications 9h ago javascript
9db1f9867dc46217403c2f8397712db4ed104b609232d47b785144279d2b3381 H₄(CmDbOsPo₂)Md(Pa₂)
80% New package, rapid releases, unusual hooks
@c4a/extract-ts TypeScript extraction plugin for C4A ExtractionResult v2 9h ago javascript
0e0f98e3298c3602f5a6c1609a92abc874b05ffadbd3d227a0e847ee382f85d3 H₄(CmDb₉OsPo)Md
39% Legitimate npm package with standard dependencies
@codebucket/vms React components to embed Codebucket VMS camera streams (live MSE, PTZ, snapshot, two-way audio) in any website. 9h ago javascript
f0038bb7ffbd9dfef60d4a61c9aaea09c7547f641bc8732f569d9137a8d2220e H₃(Db₂PoU)Md(Pa₅)
38% Legitimate React camera stream components
robinhood-chain-x402 TypeScript SDK for the MadeOnSol Robinhood Chain (chain id 4663) API — EVM-native KOL trades, the DEX trade tape, token discovery/bundles/c… 10h ago javascript
ef986bcbd16d79a3e7e8a73c0a0285cd84d45354f40deb65c2040f22d2a64418 O(I)H₄(Cm₆Db₂OsPo₂)Md(Pa₅)
92% Legitimate TypeScript SDK for blockchain API