javascript Fallout

@biomejs/backend-jsonrpc Bindings to the JSON-RPC Workspace API of the Biome daemon 10h ago javascript

3d2833a3f33d962d9dd5135e6663ba97cb6e54b1174c96104430248597fafc96 Md(Pa₂)

32% Legitimate Biome package

alpic The command-line interface for Alpic 10h ago javascript

42276de9f9aab497f60a9ba0687749ee24d31f61f5c30307640598159155f764 O₂(CoP)H₆(Cm₇Db₃F₄Os₄Po₆U₂)Md(Pa₂)

67% Legitimate npm package with telemetry

@madeonsol/plugin-robinhood-chain ElizaOS plugin for Robinhood Chain (chain id 4663) — EVM-native KOL trade intelligence, token discovery & bundle detection, deployer reputa… 11h ago javascript

51317378dd083d90f47c04820772c9850f2c086fafae7d634cc2570474bbbfbf O(I)H₄(CmDbOsPo)Md(Pa₂)

86% Legitimate blockchain analytics plugin

jeo-code Clean, highly optimized AI coding agent using spec-first loop 11h ago javascript

e82b72b50a54774109bd25016b7a2662266ccf0391c29939477353482d1d7889 K₂(AmMc)O₄(C₃As₂PS₄)H₉(Cm₂₅Cr₂Db₁₃F₁₁HfOs₉Po₁₅TiU₂)Md₃(Pa₃)

29% Legitimate AI agent CLI tool

runfusion.ai Launch Fusion with `npx runfusion.ai` — tiny alias for @runfusion/fusion. 12h ago javascript

ee17e488a0ee2d4365a98c0dae7e1433240b6c87ac3969923f2b3bc3d8a8875c H₄(Cm₃DbF₃Os₂)Md(Pa₂)

73% Legitimate npm package update checker

@biomejs/cli-linux-arm64-musl 12h ago javascript

71381e468d6325a3a95d481ae264cb64e6ae848feab37f458a73fc48768afdcb K(Li)H₅(Cm₅Cr₃FOsU)Md₂(BiPa₂)

37% Legitimate Biome CLI binary

@whalent/agent Stable wrapper for Whalent Agent core runtime 12h ago javascript

4484092651f4ce9bb8f649e676dcc0ef2677366d5f8113eb09331b48e0ba0539 O₄(C₃As₇CaS)H₆(Po₄Cm₆CrDb₆F₂Os₃)Md₂(Pa₄)

99% Obfuscated agent with C2 and backdoor capabilities

@a5c-ai/genty-runtime Agent runtime layer (L5) — daemon, session, resource management, telemetry 12h ago javascript

6ddb2b43c13f649aa7cc052272aa50264e0f0a6a9b1b184093cbeffc7c90a070 H₆(Cm₆CrDb₂F₂OsPo₆)Md(Pa₄)

76% Legitimate npm package with standard features

@dcf-micro/locales 12h ago javascript

257ed30bd4c4f7f7f1b8c9ca7d721b6c28cf2859faf6adc47c2fe11ecec0fccd H(Db)Md(Pa₄)

34% Legitimate Vue i18n locale package

@cubejs-client/ngx Cube.js client for Angular 12h ago javascript

20ca967aa80c84d0077db54e1a77598e902cd3b9be808bdb49a73f85b04dcc76 H(Db₂)Md₃(Pa₄)

43% Legitimate npm package metadata

@cubejs-backend/shared Shared code for Cube.js backend packages 12h ago javascript

be49ef7d730d893c46999efbcc691f9dd513b4b6d64842e25b7fee15e91af691 O₂(DyS)H₆(Cm₄Cr₂Db₆F₃Os₄Po₂)Md(Pa₃)

53% Legitimate Cube.js backend package

@cubejs-backend/maven Cube.js Maven Wrapper for java dependencies downloading 12h ago javascript

427f146ecb39849e42b22669a6154611ccd2a336d52cbf5a70f12d4b42cafdca H₅(Cm₂Db₂F₃OsPo₂)Md(Pa₃)

73% Legitimate npm package for Maven integration

@cubejs-backend/base-driver Cube.js Base Driver 12h ago javascript

7ab56d065f6c7d3ddabc9a3c77a0ddc0a4489f58db46f39981510f5412aa3463 H₃(Cm₂Db₃F₂)Md(Pa₃)

56% Legitimate npm package metadata and source

@kudzujs/core HTML-first TSX framework with synchronous state semantics and no virtual DOM 12h ago javascript

13b74e1c98b8ffc0e0aae90f7996b8e69449339ff49331247481281ff63140bd H₅(CmDbFOsPo)Md₂(LiPa₄)

54% Legitimate frontend framework package

@cubejs-backend/templates Cube.js Templates helpers 12h ago javascript

578158f293afb67742fdc101ab90cc5e53996caed90b69cf475726b4c2a99da5 H₅(Cm₄Db₄F₂OsPo)Md(Pa₃)

68% Legitimate npm package scaffolding tool

@cubejs-client/react React components for cube.js 12h ago javascript

66847ff0a0513201eef53e04d54fe2683c27685dfc470b79d8afd85ac26e284f O(S)H₃(CmDb₂Os)Md₄(BkPa₂)

63% Legitimate npm package documentation

@dcf-micro/customize 12h ago javascript

b43371cf0ac6b638ee9cba94e2cc248d8f1f9bb8921b40b6c549276d220dc146 H(Db₂)Md(Pa₄)

51% Legitimate npm package metadata

@cubejs-backend/mongobi-driver Cube.js MongoBI driver 12h ago javascript

4b93d2846665b63dd1f845139b18f2582016caebcae82e9c9e2fdfcc16288484 H₂(DbF)Md(Pa₃)

43% Legitimate npm package metadata

pi-cliproxyapi-provider Pi provider package for CLIProxyAPI with automatic model discovery and models.dev enrichment. 12h ago javascript

0982a9b9b88d8bf4bd088159127972afb41782c6f3581402c9afc68dabbef79a H₅(Cm₂Db₂F₄Os₂Po)Md(Pa)

47% Legitimate npm package code

@cubejs-backend/sqlite-driver Cube.js Sqlite database driver 12h ago javascript

005fffd5a0f0f3920661ffad5194376fdfd7b1c585421bba7cc21e26230fcb60 H(Db)Md(Pa₂)

41% Legitimate npm package with standard tests

@cubejs-backend/cubestore-driver Cube Store driver 12h ago javascript

79a382b970837b9896bfcf8e7a5d7d26be501483f886d3fd26ac7aa2f916cfe6 H₃(Cm₃Db₂F)Md(Pa₃)

48% Legitimate npm package code

@cubejs-backend/druid-driver Cube.js Druid database driver 13h ago javascript

a146a96c465c9d9cc60db0e59aab0218de3c106fc11a0780e5ea5be68e4cdd68 H₃(Cm₃Db₂F)Md(Pa₃)

51% Legitimate npm package driver

@cubejs-backend/ksql-driver Cube.js ksql database driver 13h ago javascript

76df35c18dc80c6e273adad8baaa59eca3704b9ccbbf858f952eb6c23ebbc637 H₂(Db₃F)Md(Pa₃)

41% Legitimate npm package metadata

@dcf-micro/micro-app 微前端业务应用的受支持平台入口 13h ago javascript

a2a29f10982cf747ec68ed7bae177ba8cfef415836bf3a0ee1397794adafd9a1 H₂(DbOs)Md(Pa₄)

62% Standard npm package metadata

@qualweb/core QualWeb evaluator core engine 13h ago javascript

0bb40ef98efafd5c3c6aeb582d53c1aca54f0d1e26b31de067f5c9b9f94e7607 H₃(Cm₄Db₃Os)Md₂(LiPa₃)

73% Legitimate web accessibility testing library

@cubejs-backend/bigquery-driver Cube.js BigQuery database driver 13h ago javascript

d804a6dbec6634b1da49ef5a0c874f496a1c42747f4561deb58105e4cdec6417 H₃(Cm₂Db₂F)Md(Pa₃)

51% Legitimate npm package with standard build scripts

@peac/net-node SSRF-safe network utilities for PEAC Protocol with DNS resolution pinning (Node.js only) 13h ago javascript

f741993c6c06cf7c18c582c826faf012c9fd37fe3644acf441048fdaefd36178 O(Dy)H₆(Cm₄Cr₃Db₅FOsPo)Md(Pa₄)

51% Legitimate SSRF-safe network library

@cubejs-backend/postgres-driver Cube.js Postgres database driver 13h ago javascript

07a6dc6e77e2d04c176316fe35dec8ba3d95d195254e0fbe982f1258cee3f7dc H₂(Db₂F)Md(Pa₃)

46% Legitimate npm package metadata

@sys9/chord-cli Chord CLI package used by @sys9/cli 13h ago javascript

c9d4a897dde5a370fe8a85ce75de3c624fe79c6b7de51c7cc3d1eb766ce68d0d H₃(DbOsPo₂)Md(Pa₂)

39% Standard CLI with native binaries

@peac/cli PEAC protocol command-line tools 13h ago javascript

791709b027b91debfc921ffd8c85157963c6be0d3f0a76bf8b88ae26d3586709 K(Li)H₆(Cm₃Cr₂Db₄F₆Os₂Po₄)Md(Pa₄)

57% Legitimate CLI tool for PEAC protocol

@cubejs-backend/testing Cube.js e2e tests 13h ago javascript

a1482fd27e8a569df7143e453513ba46021437728621e869fceff142ae1d2827 H₅(Cm₂DbF₃Os₃Po₅)Md(Pa₅)

59% Legitimate testing package infrastructure

@json-eval-rs/common Shared TypeScript types and utilities for JSON Eval RS bindings 13h ago javascript

3eb9af4cd140502294035e662468b26c4a5bb8ee70c2155436a2263f97f580e9 H(Db)Md(Pa₂)

@peac/adapter-did DID document resolution for PEAC receipt verification (did:key, did:web) 13h ago javascript

27d189b8fa0420679274524a54d5cf155316eb3d2b175c860accbf3508f60102 H₃(CmDbF)Md(Pa₄)

39% Legitimate npm package metadata

@peac/transport-grpc PEAC gRPC transport layer with carrier adapter and HTTP StatusCode parity 13h ago javascript

ce9cc23d4a2368c8af82789de88fed8728edb26d7c62f601581945e2c964d7d1 H₃(CrDbF)Md(Pa₄)

44% Legitimate npm package code

@peac/mappings-intoto in-toto v1.0 attestation mapping for PEAC provenance extension 13h ago javascript

b8a580bc888c47b689543d0ab31eee340132f0fa3e83765e618b999330fe6ddf H₂(CmF)Md(Pa₄)

37% Legitimate npm package metadata

@rizom/site-docs Docs site package for docs.rizom.ai hosted deployments 13h ago javascript

1f42bc50d5bae5a78073d50a0b8075236605f34bd819c769d73a7f87534a4fff Md(Pa₂)

@rizom/ui Shared Rizom UI primitives for app-owned Rizom site variants. 13h ago javascript

9052df9199a6cbc5a38145d8c92fda599be4a4d84ab25b1d9f2d47d58201f5cd H₂(CmDb)Md(Pa₄)

38% Legitimate UI library package

@rizom/theme-rizom-ai Consolidated rizom.ai theme — rev-5 design system: deep indigo ground, brass/ruby/moss room accents, warm off-white light mode, Fraunces +… 13h ago javascript

a1849ac7c2d0029b4e356b58db9496ac457c2e9a2b5446f052290f966b976038 H₂(CmU)Md(Pa₄)

45% Legitimate CSS theme package

@rizom/site-rizom-ai Rizom AI site package for hosted Rover deployments 13h ago javascript

bb1fd066e8f14a3782fcaf3a6ca716ab545830bdbd051c8ebf81fb9ddeb0d709 H₂(CmDb)Md(Pa₂)

34% Legitimate frontend package with standard configs

@rizom/theme-default Simplified editorial default theme — warm neutral surfaces with restrained Rizom-inspired accents 13h ago javascript

59df9c19f66b80712683b04a4ddcd233b0490864a5d59b23d5866a2511421d07 H(Cm)Md(Pa₄)

41% Legitimate npm theme package

@rizom/site-rizom Shared Rizom site core — structural base for rizom.ai, rizom.foundation, and rizom.work 13h ago javascript

5152f015893f2ef6765d520fc85bd14223364ccb66f394843f2922c6b5d65c3a O₂(AsS)H₄(Cm₂Db₉Os₄U₂)Md₃(Pa₄Pt)

60% Legitimate npm package with standard dependencies

@rizom/brain Brain runtime + CLI — scaffold, run, and manage AI brain instances 13h ago javascript

fd6e70781d8ddc371cc66bd22593e1d7e8a492401c35408e8531a83e6aa802e0 K₂(Li₂Te)O₁₀(C₂S₄AsCaCoDyEuI₂LaXe)H₁₀(Cm₃₄Cr₄Db₂₃F₁₁HfOs₁₃Po₁₇TiU₇)Md₅(Li₅Pa₇Pt)

63% Legitimate AI agent framework code

pm-graph Knowledge graph and dependency graph extension for pm CLI workspaces, with optional Neo4j sync. 14h ago javascript

a63cdec845da9717cfb5c6c7e4665fdc1862aa58338db8c084779df207b1baec H₅(CmDb₂FOs₂Po₅)Md(Pa₄)

58% Legitimate npm package with standard build scripts

cmp-aws-database The package "cmp-aws-database" is for its database, which defines global tables. These tables are designed to be imported and used across m… 14h ago javascript

59dd0d5290c840a07599e27f1789e8a2dcd60b007e6667b4d6addbd09e1ce41d O(Co)H₃(CmDb₃Po)Md₃(Pa)

59% Legitimate npm package with standard code

@fails-components/assets Supplies asset storage for use within the fails ecosystem 14h ago javascript

d66a2e5168fd59db3e1b1c7dd2957b803fd8e647df7d0505d507391403b2196f H₄(Cm₁₀Cr₃Db₃F)Md₂(Pa₃Pt)

60% Legitimate S3 asset management library

@activepieces/piece-mailchimp 14h ago javascript

987880f1c97799f77c8b64cc6d5345b1db7c6c519d0774abb86a7411590fbce2 O₂(CoS)H₇(Cm₁₄Cr₂Db₉FOs₂PoTi)Md₃(InPa₂)

48% Legitimate Mailchimp integration package

@fails-components/data Supplies data format classes for use within the fails ecosystem 14h ago javascript

dbdfed029ea813010ef9caa952de41956a99226a37501897519b2b64b3773177 H(Db₂)Md(Pa₃)

35% Legitimate TypeScript library package

@tsed/platform-exceptions Platform exceptions module for Ts.ED Framework 14h ago javascript

77c98cd063c008c2a6d4628ed09ae8fb3392a2a9a8c19a1772c30d8cdfc9a2e7 H(Db)Md(Pa₃)

34% Legitimate npm package metadata

@fails-components/avreactwidgets The audio/video React widgets build on top of FAILS audio video functionality 14h ago javascript

d7170b9c5847a20ce2d125eb82d172afd6454b20a34a7f1e9b3a31f0c499af78 H₂(CmU)Md(Pa)

@tsed/normalize-path Utils to normalize path 14h ago javascript

925fd7dbe58a484e01d2c5e954e1bbd177f6a6ddd776eea04f3cef07ba29d8e8 Md(Pa₄)

37% Legitimate npm package metadata

55c8115641754b94a8ad055eecf5bf808e24de267f84d8da4b18112c40b71176 14h ago javascript

55c8115641754b94a8ad055eecf5bf808e24de267f84d8da4b18112c40b71176 K(Te)O₃(CAs₃Xe)H₂(Db₃F₂)Md

99% Obfuscated WSH dropper writing payload

@chenglou/freerange Static numeric range analysis for TypeScript 14h ago javascript

0b32b903ed9c9378a9f5e5ade4bd18bf549a2e0744b4446ff76a034b38d7181f H₂(DbU)Md₂(Pa₂Pt)

33% Legitimate TypeScript static analysis tool

@cristianocarlos/formigo ```css @source "../../node_modules/@cristianocarlos/formigo/dist/**/*.{js}"; 14h ago javascript

7dea83e7a5fd2181d848ebedf692a3a23e896fe33a6f54a728102edcccc361c9 H₄(Cm₅Db₅Os₂U₂)Md₂(Pa₃)

41% Legitimate React UI component library

mcp-apple-image-playground AI image generation MCP server via Apple Image Playground — on-device styles (animation, illustration, sketch) + ChatGPT external styles (o… 14h ago javascript

c894f20eb0d459806408af84d584593b69bc23db9f62c8a7ff0dd0f082990d9d O(S)H₄(Cm₃Db₃F₄Po₈)Md(Pa)

76% Legitimate macOS image generation tool

@thzero/library_cli A cli tool for the opinonated libraries. 14h ago javascript

4666dd1ba75c77b25c39342c7755967b193ad7891c3e803d1463bb6c714bca78 H₂(DbPo)Md(Pa)

@homepages/create-workspace Scaffold a HomePages template workspace. 14h ago javascript

0179b1aa51b023ba0c5e2fc1ddf3c1ab67cf0e5bc2eb47e1dcd792bcaf642201 H₃(DbFPo₄)Md(Pa)

59% Legitimate npm scaffolding tool

@danielsimonjr/mathts-arithmetic Standalone arithmetic functions for MathTS, re-exported as a focused package 14h ago javascript

15304f42f2f5aa02769daf9581096fb8e4cc9c0ab9f609148a5db823d51f2807 H(F)Md(Pa₄)

37% Legitimate math library package

@danielsimonjr/mathts-compat mathjs compatibility layer for MathTS 14h ago javascript

b649f5e39d0cd0b6d54b853e68a00759e3ba04d1d39d45d47fb557dea1215db3 H(Db)Md(Pa₄)

34% Legitimate math library package

@ai-dev-methodologies/rlp-desk Fresh-context iterative loops for Claude Code — autonomous task completion with independent verification 15h ago javascript

d12260e0c4ec778bd24f6b3a5a976548f0fe60431c864d77138f0711b653a4da K(Mc)O₂(CS)H₈(Cm₅Cr₂Db₃F₁₄HfOs₃Po₁₅U)Md(Pa₂)

54% Legitimate AI agent orchestration tool

claude-resume-hub Run Claude Code and auto-continue the moment a usage/session limit resets — with a live dashboard and desktop alerts. Cross-platform, zero-… 15h ago javascript

3aa3ba8dd1569f8d26d07b18f6ee6d834ae7aa65b075ceebe8ae19a38eda953c O₂(PS)H₆(Cm₉Db₂F₃OsPo₇U)Md₃(InPt)

85% Supply chain takeover, suspicious publisher

@instantdb/core Instant's core local abstraction 15h ago javascript

b9bfcf515b6c86e1df01f84e653f9071f34a8fd115bc52f7f62874aaa0df28bc O(As₂)H₆(Cm₁₁Db₇F₂Os₃TiU)Md₂(Pa₇)

52% Legitimate npm package source code

@instantdb/react-native-mmkv React Native MMKV interface for Instant DB 15h ago javascript

651d0ecab1074fdb1fda1ba87990021cb4f813dde079af7cbe6ca6764fb6a899 H₂(DbF)Md₂(Pa₃)

58% Legitimate npm package metadata

@instantdb/vue Vue client for InstantDB 16h ago javascript

51b43525ed5ecf7eeeacfea2ac315511b811c97e900fe59be2b02b575d024fe1 O(S)H₂(DbF)Md₂(Pa₃)

50% Legitimate Vue library package

@theholocron/holocron-plugin-vercel Holocron plugin for Vercel. Implements the deployment capability against the Vercel REST API. 16h ago javascript

47b97f113226162f21e7d6b893692fcaaa403a2b084bece3f4beaf9594ab2efe H₂(Cm₆Db₂)Md(Pa₄)

63% Legitimate Vercel API plugin code

@runpod/ai-sdk-provider The **Runpod provider** for the [AI SDK](https://ai-sdk.dev/docs) contains language model and image generation support for [Runpod's](https… 16h ago javascript

dffe0e784ab8acf76d3b94c56dea795e4052940131d63861abf96329c05a2197 H₄(Cm₅Db₅FPo)Md₂(Pa₅)

45% Legitimate npm package source code

@runpod/mcp-server MCP server for interacting with Runpod API 16h ago javascript

118014ecb78e50d254645eaa5af1b310d8805c7e847e133ccdbea22d1a9ff8de H₅(Cm₉Db₅F₅Os₄Po₅)Md₂(Pa₅)

59% Legitimate MCP server package

@runpod/pulumi Manage RunPod GPU cloud resources. 16h ago javascript

80a50bfd32fd2623c144414c3e3f403537a3d95d7ba2a5e89b38ce2a09d3e793 H₂(DbOs)Md(Pa)

33% Legitimate infrastructure-as-code library

@jaredboynton/rtinfer Always-on loopback rtinfer/1 inference daemon (gpt-realtime + codex/responses over Codex OAuth). Shared by cse-tools and unifable. 16h ago javascript

1380c8650b13bbe6e7f81be1cd6f529ef94c3278a98a8ee6374fd4ff4d053d2e O(S)H₅(Cm₆Db₂FOsPo₆)Md(Pa)

56% Legitimate npm package with standard postinstall

@instantdb/solidjs SolidJS client for InstantDB 16h ago javascript

1bc2920e051d2690aee5904fc1ca899f88a966e9391d95b0d6cda5b6747aff1c H₆(Cm₁₁Db₆FOs₂TiU)Md(Pa₅)

63% Legitimate InstantDB client library

xast AST parsing library 16h ago javascript

bfe9b2f5c19039896e161694d9ab44e2e8fdf560d673265c881e46b13bdac8f9 H₂(Db₂Os)Md(Pa₄)

51% Legitimate TypeScript AST parsing library

oxc-config-seek 16h ago javascript

e677474f8ce48737039fe7b6531490e90d28c5c35ba825d385ec84e6cc8cc15d Md(Pa₄)

@instantdb/react-common Instant DB shared components for React and React Native 16h ago javascript

ed9112ea19c1c80d584e92ea6cae119b78f5834ff796cdbb6b38e95faced86e1 H₆(Cm₁₁Db₆FOs₂TiU)Md₂(Pa₅)

55% Legitimate InstantDB client library

@orkestrel/contract Zero-dependency contract toolkit — type guards, combinators, parsers, and a shape DSL that compiles one contract shape into a guard, parser… 16h ago javascript

61bfe35cbcf001e70afcfc4cb43c5a6beb166c8189ac2b69b0e83fe916472da6 H₂(Db₂Po)Md(Pa₅)

55% Legitimate TypeScript validation library

@promptster/teams-cli-win32-arm64 promptster-teams binary for win32-arm64 16h ago javascript

8be67082dcd56e9b792620b60af48dcb19bda2d087ca5b1fc0f6191d66121cbf K(Am)O₆(Ca₄Co₂AsCEu₂S)H₇(Cm₂₅Cr₇Db₁₁F₃Os₈Po₅U)Md₂(Pa₂)

92% Legitimate CLI tool binary

@promptster/teams-cli-win32-x64 promptster-teams binary for win32-x64 16h ago javascript

5825dc22fffac1b17b47736e2863083350ccaec3dc4a1f8b6ed991a42f55c296 K(Am)O₆(Ca₄Co₂AsC₂Eu₂S)H₇(Cm₂₇Cr₇Db₁₂F₃Os₈Po₇U)Md₂(Pa₂)

91% Legitimate CLI tool binary

@instantdb/react-native Instant DB for React Native 16h ago javascript

da3dbfcb20d9f82396d1b0443c82825e82853b2a258b58bdf9657d094f3cf298 H₄(Cm₂DbFOs)Md₂(Pa₃)

71% Legitimate React Native library package

@tlua/tlua-darwin-arm64 Typed Lua compiler, language service, and JavaScript API 16h ago javascript

71385b8151eb037088e83f69d1c8fa4627f2c0c3034aec49525447c2804f489b H₃(Cm₈FPo₃)Md₂(Pa₃Si₃)

34% Legitimate compiler binary with standard APIs

@react-native/community-cli-plugin 0.86.0-nightly-20260421-b111c0efa Core CLI commands for React Native 16h ago javascript

298f20812078be5055015554f81382413b530a5895ce7964815d1fc08d315987 H₅(Cm₈Db₃FHfPo₂)Md(Bi)

41% Legitimate React Native CLI plugin

@instantdb/admin Admin SDK for Instant DB 16h ago javascript

2f654d0777fef8fff192e8d18cfe4838c6907e08d1769b733241ade7379d3fa6 H₄(Cm₁₀Db₄F₂Os₂)Md₂(Pa₅)

42% Legitimate InstantDB admin SDK

@vibes.diy/vibe-types [](https://discord.gg/vnpWycj4Ta) 16h ago javascript

080fffb20f81ba7070f39e022eaebbd91bab6f49819ab0e2545b5cbb8680bea3 H(Db)Md(Pa)

35% Legitimate npm package code

@ampcode/cli-darwin-x64 Native binary for Amp CLI on darwin-x64 17h ago javascript

23dcba9af9d8447e3d248021dac37b39126f017193427798f0d41d2c354f89cc K(Li)O₅(AsCo₂Dy₂ErS)H₈(Cm₁₉Cr₅Db₄Ds₂F₉Os₁₀Po₉U)Md₆(Bi₂HePaSi₃)

42% Legitimate CLI tool binary

@bedrock-layout/appboundary 3.2.16 bedrock-layout appboundary 17h ago javascript

e1319c0b7cc4a7104d0ab0e42d4a78c23c15fee452103406c5f91341dd81c181 Md(Pa₄)

32% Legitimate UI component library

plpgsql-deparser PL/pgSQL AST Deparser - Converts PL/pgSQL function ASTs back to SQL 18h ago javascript

e9e2cb52f1f40972c3f4a48ab958212b058285f2d805502f974fa4f222f41af5 H₂(DbPo)Md(Pa₄)

38% Legitimate PL/pgSQL deparser package

@webpresso/agent-kit-session-memory-win32-arm64 Prebuilt win32-arm64 session-memory native addon for @webpresso/agent-kit 18h ago javascript

286ecd445423c543b8afe9407eb33f4e8ee9f930538a3acef6509a462b0d3c7a K(Li)H₆(Cm₅Db₂DsF₄Os₃Po₃)Md₂(Bi₂Pa₄)

83% Legitimate native Node.js addon

@vibes.diy/identity [](https://discord.gg/vnpWycj4Ta) 18h ago javascript

e9d7dd0d167deeb1b169aec902a051547c8b6c4d9ed64fb7e010863fba6fd8c7 O(Ca)H₅(Cm₈CrDb₆F₂Os)Md₂(Pa₂)

87% Legitimate identity library code

@quip.network/hashsigs-wasm SHRINCS hash-based signature verifier/signer, compiled from the audited hashsigs-rs crate to WebAssembly. Works in Node.js and the browser. 18h ago javascript

ad977f2362d0e9eef73b028a93299bae7e18fdf0da614c9d7c08e24f0ffc4757 H₄(CmDb₂FPo₂)Md₂(Pa₅)

47% Legitimate WebAssembly crypto library

@vibes.diy/api-pkg WebSocket-based API for vibes.diy chat persistence and app deployment. Supports both HTTP POST and WebSocket connections using the same han… 18h ago javascript

378cb984387d9390265574067c84ed6ffb42c3bf2707da1174a73216d03a61fc H₃(Cm₂DbU)Md(Pa)

53% Legitimate UI component library

@deliverart/sdk-js-image Deliverart JavaScript SDK for Image Management 19h ago javascript

c410f541908df1f883f7bc0352f3df4307ed83c39a01e368fd53d05f51f21d1d H₂(Cm₂Db)Md(Pa₃)

48% Legitimate SDK package

@deliverart/sdk-js-company Deliverart JavaScript SDK for Company Management 19h ago javascript

ac3df7e75c075b5f120c17dc8a06453bc26e318c0832b1556a426f6a622c97ea O(Co)H₂(Cm₂Db)Md(Pa₃)

44% Legitimate SDK package

@deliverart/sdk-js-menu Deliverart JavaScript SDK for Menu Management 19h ago javascript

1df5d842641ebde563c24303da1c7ff28ce493c0a1081823b397358748d3c2a3 H₂(Cm₂Db)Md₂(Pa₃)

47% Legitimate npm SDK package

@deliverart/sdk-js-point-of-sale Deliverart JavaScript SDK for Point of Sale Management 19h ago javascript

ae4ea9fb26a397f2bb66cee16b36401ce52cf59a63d9fc3f4e9d92c237d415f6 H₃(Cm₂DbF)Md₂(Pa₃)

47% Legitimate SDK package

@deliverart/sdk-js-printer Deliverart JavaScript SDK for Printer Management 19h ago javascript

096f6991812ce15b33f326428f6a88ffcec5c807f2b4be64953e43c74eb98313 H₂(Cm₂Db)Md(Pa₃)

42% Legitimate SDK package

@deliverart/sdk-js-order Deliverart JavaScript SDK for Order Management 19h ago javascript

1a3bd2c5c9f91c45efb038ccd600282fb39cc1ddacfcd513cf797d750cd12563 O(Co)H₂(Cm₂Db)Md₂(Pa₅)

48% Legitimate SDK package

@geometra/ui Starter UI primitives built on @geometra/core 20h ago javascript

59d4e588d8b57dbc4a077085ec8731abf18fd0bf3d3bea543434102b1a7d1d34 H₃(DbFU₂)

36% Legitimate UI library with standard build scripts

@darklylaunch/sdk-js Browser client SDK for DarklyLaunch feature flags. 20h ago javascript

680f29172253c19ad3c749588465866f68d7fe8e4dd446bb2d2047aefc07a239 H₂(Cm₃Po)Md(Pa₄)

80% Fresh, unestablished npm package

@geometra/router Routing primitives for Geometra 20h ago javascript

049c2f4e9092053df56b1b23b0167190cea4e4cf939187b4edafb9c72efb4cf0 H₄(CmDb₂FOs)

53% Legitimate npm package with standard build scripts

@applaunchflow/mcp MCP server for AppLaunchFlow — create App Store & Google Play screenshots with AI. 20h ago javascript

b0cee94f08adce8771730a3c8a346aaaa14aa82c22bf8abb88c07f4ae77c4b2b H₅(Cm₈Db₄F₂Os₂Po₄)Md(Pa)

71% Legitimate MCP server package

@reddb-io/client Thin remote-only RedDB driver. Downloads the `red_client` binary on install. Speaks RedWire/gRPC/HTTP. Embedded URIs (memory://, file://, r… 20h ago javascript

5fb482ff07ef2b893473c556d778d3f6ed17e5c4e91c893e1fb49ab8682047d2 O(S)H₇(Cm₁₁Cr₂Db₇F₄OsPo₂U)Md(Pa₂)

85% Legitimate npm package with standard postinstall

@reddb-io/mcp Zero-install npx launcher for the RedDB MCP surface — fetches the matching red binary and spawns `red mcp` over stdio. 20h ago javascript

74b70e779e5707f023a3664ea80f4f096af082700790d597a4aa6d493b3d04eb O(C)H₅(Cm₇Cr₂F₃OsPo₄)

78% Legitimate npm package with standard features

@geometra/proxy Chromium proxy (headed by default) — stream live DOM geometry as Geometra WebSocket frames for MCP and clients 20h ago javascript

44a3455cca5b43b8aaa2e2ce811e0704e1a7344dff5e4438a265516c3976bc2a H₇(Cm₃Cr₃Db₃FOs₂Po₃U₂)Md(Pa₅)

71% Legitimate browser automation proxy tool