javascript Fallout

Recently scanned open-source supply-chain artifacts and public lab uploads.

@uniclipboard/cli Cross-platform clipboard sync CLI. Installs the `uniclip` command and the `uniclipd` daemon for your platform. 1d ago javascript
e1843a238387cc0f8c585a6b8311de738969c162e12d2eafb97b79210649e2cf H₂(CmPo₂)Md(Pa)
33% Legitimate CLI launcher script
pi-cc-header Claude Code–style startup header for pi — pixel-animated Pi logo with a 9-color palette, toggleable IBM stripes and Minecraft gradient them… 1d ago javascript
df03026dae75d3d9bc7e7edc86c60b49f9eb352ccb05e203994ebd6f5c133673 H₄(Db₂F₃OsU)Md
64% Legitimate npm package for terminal UI
clooterminal A terminal multiplexer in Rust — tmux's functionality, a better-looking terminal. 1d ago javascript
275583692208758ce9f9ee5cc754f477046674b8fd095fc8416da411fb5fa077 Md(Pa)
mqtt-discovery-types Typescript Types For HomeAssistant MQTT Discovery 1d ago javascript
303aa5ed4996948f32f50e717d7a142bc3fda71065c6e1f50c574e8f5580c18f
geolibre-wasm Pure-Rust geospatial toolkit (whitebox_next_gen) compiled to WebAssembly (WASI) for GeoLibre's in-browser tool execution 1d ago javascript
95130d241cd84f393fe228218e71cc61239aedd967e74388f614b8db54e4a30a H₅(Cm₆Cr₂Db₂FPo)Md(Pa₂)
80% Unlisted publisher, potential takeover
latex-cite-editor A CodeMirror 6 based React editor with LaTeX-style \cite{} bibliography autocomplete backed by BibTeX (.bib) files 1d ago javascript
ffa6e659db04c5cdff23cadc235be935cf636dd68795e7d01aba25ae6e0196ea H₂(CmDb)Md₂(Pa₄)
41% Legitimate React LaTeX editor package
@oas-framework/pi OAS pi runtime bridge — memory session events and pre-workspace bootstrap over the runtime-neutral @oas-framework/oas kernel 1d ago javascript
82a86de74172347101924435e3b27cc27dbea1e561f46a9bfc4fb326f6debb38 H₃(DbFPo₃)
42% Legitimate npm package code
rdap-node whois and rdap lookup for node applications 1d ago javascript
d89136774b67a9e6d7a476b7a1ad9c0ba5cbf95e79869d25888858bc5daf6446 O(C)H₃(Cm₄DbPo)
60% Legitimate RDAP/WHOIS client library
@needle-tools/addressing Persistent addressing for Needle assets: deterministic needle-id computation, #needle anchors, and address resolution over glTF JSON and li… 1d ago javascript
7876c8626dda389cc023df2b142f61053a5245f839e5955a40802518ea7f17f2 H(Db)Md(Pa₄)
35% Legitimate npm package code
@tenonhq/dovetail-deploy ClickUp-status-driven ServiceNow update-set promotion orchestrator for Dovetail — resolves the update sets for a task, preview-gates, and c… 1d ago javascript
9a943351c9eea449bbf0181f10ef99d4b57b55d1c77706f3930b9a777e7137ae H₂(Db₂Po)Md(Pa₄)
49% Legitimate npm package orchestration code
@tenonhq/sass-theme SASS theme library containing color variables, typography, buttons, links, inputs, calendar, tables, navigation, cards, progress, modal, sk… 1d ago javascript
7825586be03dc027a60a0dcf834a3d37e6d50ba5d4ae823209ba339bd0d9e6c3 H(Po)Md(Pa₂)
vellum Install the full Vellum stack locally 1d ago javascript
f4d9740996fb1f496186ce609978085f64f97a9e83d6b7ea4ba3fa6452447258 H(Os)