javascript Fallout

Recently scanned open-source supply-chain artifacts and public lab uploads.

dynenv Dynamically loads environment variables from modules and then spawns a child process with them 21h ago javascript
c2d3d9165233fbb5ed225a20c4d828adc52a9f25563d21372ccbd51000e22f17
q-type Librería para parsear/serializar protocolos de mensajería con delimitadores 21h ago javascript
dbbeaab031c133029a8611573af6d07d07d7eed1631f4dae176e9759c9d9383c H(Db₂)Md(Pa₂)
60% Legitimate npm package
@pramen/react React hooks for a pramen backend — useLiveQuery (reactive) + useMutation. 21h ago javascript
f98ada15287d76331875361a1b31aa900c0bde3d8b7b2790c1918369a5a142ef O(S)H(F)Md(Pa₃)
44% Legitimate React hooks library
@pramen/cms-astro Astro integration for @pramen/cms — a build-time content-collection loader + a BlockRenderer for rendering CMS blocks in .astro pages. 21h ago javascript
d36b94e5fcf3d09d5b74ce182f3a2b2e5551d2fdecfc6544a9b73730f41e43c6 H₂(Cm₄Db)Md(Pa₂)
34% Legitimate npm package for Astro CMS
@mirk/store-postgres PostgreSQL source adapter for @mirk/store's async key-value and collection ports. 21h ago javascript
783ac69917d18d2afdd58e5dcaf611870d3059974a71a365afd4be02440e65be H₂(DbF)Md(Pa₄)
48% Legitimate npm package with standard code
next-intlayer Simplify internationalization i18n in Next.js with context providers, hooks, locale detection, and multilingual content integration. 21h ago javascript
9e2aebdf3b249188dccdf61ed8502fe0f401afdf0550f007b046abc0e0c3e94a O(S)H₄(Cm₄DbOsU)Md₃(LiPa₄)
49% Legitimate Next.js internationalization library
react-scripts-intlayer Integrate Intlayer with Create React App using custom React scripts for internationalization i18n and advanced Webpack configurations 21h ago javascript
5e0b948d9d5102c0ea6dc8a112f69760b28290c7045e2ab9e9588b8db4d33aa1 O(S)H₂(DbPo₂)Md₂(Pa₄)
54% Legitimate npm package with standard scripts
intlayer-cli Lightweight CLI tool for Intlayer, enabling content audits, dictionary management, and CMS sync. Ideal for JavaScript developers using Reac… 21h ago javascript
cd290ef5f99e88907bf898e7eaa04f2806a360805a08a6f723477e873a8445fa O(S)H(Db)Md₂(Pa₄)
41% Legitimate npm package with standard scripts
@intlayer/i18next i18next API adapter for intlayer — drop-in compatibility layer that exposes the i18next interface while using @intlayer/core under the hood 21h ago javascript
02274283878d29cf754700a22b482226cb9a62210d55b1c81ebde5df05355c06 O(S)H₂(CmDb)Md₂(Pa₄)
55% Legitimate i18next plugin package
webcrypt-kit webcrypt-kit es un wrapper sobre la [Web Crypto API](https://developer.mozilla.org/en-US/docs/Web/API/Web_Crypto_API), pensado para simplif… 21h ago javascript
d81d5917f5d9b02ab03cf637d79df12b73fc90ba9b3b8eaf35ddaccb11a32b79 H(Cr)Md₂(Pa₆Pt)
80% New package, publisher takeover signals
@baiyibai-antora/jira-publisher Create and update Jira Cloud issues from AsciiDoc: a seed manifest plus .adoc bodies become issues with native ADF descriptions via @baiyib… 21h ago javascript
4205104089147c4cad9b6bf70fae79e8a1abb2835c810a636eddb3d9b4b50a9a H₂(CmPo)Md(Pa)
60% Legitimate npm package with standard dependencies
create-a4ui Scaffold a new A4ui app (Solid + Vite + Tailwind) with `npm create a4ui@latest`. 1d ago javascript
9daa4d7c2fc5d8dcf479855fe37f70586e27c7bb89ed6b1626857cc589e3a551 O(S)H₃(F₄OsPo)
48% Legitimate project scaffolding tool
clipatra-mcp Deprecated alias for the `clipatra` package. Install `clipatra` instead. 1d ago javascript
43703e3f9eeb7cb11c6015e92d20c786128389a612f054f4b5598dfbe24a973a O(S)H(Cm₂)Md(Pa₂)
46% Legitimate npm deprecation shim
@smoothbricks/columine Columine - Generic columnar processing pipeline (Parse, Reduce, Compact, Undo) for Arrow column data 1d ago javascript
912167eb7097b2ed42f3bc40b7d0504abcaa154622b8eed161e99323bb490c9f H₃(CmDbPo)Md(Pa₄)
51% Legitimate WebAssembly processing library
@astryxdesign/theme-y2k Hot pinks, lime greens, and Poppins. Bubbly, playful, and unmistakably retro. 1d ago javascript
2ae5c44a917ae4cf3f7bb83d5d44827c165af0c7f2901864b43ef9d5ee00a619 Md(Pa₂)
34% Legitimate theme package metadata
@overworld-engine/content Content packs for Overworld: validate-then-apply versioned dialogue/quest/item/achievement bundles into engines 1d ago javascript
5625e8661e3b178be76830e79a364b4cd91b740f9aacc255ecd87027d51965db H₂(DbF)Md₂(Pa₃)
52% Legitimate game engine content module
@tenphi/glaze OKHST-based color theme generator with WCAG contrast solving for light, dark, and high-contrast schemes 1d ago javascript
a4611b15c349c21916e0619f7225286028626255c3253e4653e759a456cedfdd H₂(Db₄U)Md₂(Pa₃)
53% Legitimate color theme generator package