Index

@regulaforensics/cordova-plugin-document-reader-core-ocrandmrzrfid 9.5.2658-rc Cordova plugin for reading and validation of identification documents (Core framework) Aug 26 javascript

936edd3f867222691a9d16572aea0936f8ea5c86b664eabe2ba012028e9f5a6d O(S₂)Md(Pa₃)

35% Legitimate vendor package

@regulaforensics/cordova-plugin-document-reader-core-mrzrfid 9.5.2640-rc Cordova plugin for reading and validation of identification documents (Core framework) Aug 25 javascript

2e49da5b963ebe71e610549ab9c18a85ebcb4a7853ec1abd581f16fb935d1e1a O(S₂)Md(Pa₃)

42% Legitimate vendor package

@regulaforensics/cordova-plugin-document-reader-core-barcodemrz 9.5.2633-rc Cordova plugin for reading and validation of identification documents (Core framework) Aug 25 javascript

fecb2f8f4f43ca3b3dd3b0a2db283bec68f7620b80cfa248879e1beb5ae975ab O(S₂)Md(Pa₃)

29% Legitimate vendor package

@regulaforensics/cordova-plugin-document-reader-core-barcodemrzrfid 9.5.2634-rc Cordova plugin for reading and validation of identification documents (Core framework) Aug 24 javascript

fc9e872af70062a90adc28ceae2cdfb3b860130f9c480105413c6e0ca07ce0f4 O(S₂)Md(Pa₃)

29% Legitimate vendor package

@regulaforensics/cordova-plugin-document-reader-core-doctype 9.5.2636-rc Cordova plugin for reading and validation of identification documents (Core framework) Aug 24 javascript

d6b767595b894ffc5e3dc4c8efbaf72604d3526acc0717da59658ebbfa028684 O(S₂)Md(Pa₃)

42% Legitimate vendor package

@regulaforensics/cordova-plugin-document-reader-core-fullauth 9.5.2638-rc Cordova plugin for reading and validation of identification documents (Core framework) Aug 24 javascript

9b2f4b725114e370f6e71c6d72c7101ef373917a93978362433b74a449dafaaa O(S₂)Md(Pa₃)

36% Legitimate commercial Cordova plugin

@regulaforensics/cordova-plugin-document-reader-core-ocrandmrzrfid 9.5.2612-rc Cordova plugin for reading and validation of identification documents (Core framework) Aug 22 javascript

cf59f0c1d07b5a2c857c8681e8ab95682c57307f4e23aeddc93936e1ce92c9eb O(S₂)Md(Pa₃)

37% Legitimate commercial Cordova plugin

@regulaforensics/cordova-plugin-document-reader-core-rfid 9.5.2598-rc Cordova plugin for reading and validation of identification documents (Core framework) Aug 19 javascript

9702d44abdaf08e84763fc1a03a90226b97167c75002fb5ee436c962d38ba936 O(S₂)Md(Pa₃)

35% Legitimate vendor package

@regulaforensics/cordova-plugin-document-reader-core-barcodemrz 9.5.2496-rc Cordova plugin for reading and validation of identification documents (Core framework) Aug 12 javascript

e3d4cafd206f8b76db6865691dab36e3a9eebc7da9d2718546bb97639647f482 O(S₂)Md(Pa₃)

35% Legitimate commercial Cordova plugin

statist-browser-typed-client-hra.renewal.events 0.0.1 Service client library Aug 9 javascript

912e78e8e392768bb735f16c61559e08cdb6be5587986f8d0016117041d06fe6 ✓ O(S₂)Md(Pa₃)

97% Empty npm package, likely squatting

statist-browser-typed-client-hra.eventcalendar.events 0.0.1 Service client library Aug 9 javascript

969b0f96d154f54d4df0c73e5a4b850918fe101ddc8b0aeb90a85e0727b32f9d ✓ O(S₂)Md(Pa₃)

97% Supply chain impersonation squatting

@regulaforensics/cordova-plugin-document-reader-core-ocrandmrz 9.4.2322-rc Cordova plugin for reading and validation of identification documents (Core framework) Jul 23 javascript

725879e3bfff68cf98abd6b9262c3c0655d46632af53d2151360da5f393cd8cf O(S₂)Md(Pa₃)

35% Legitimate commercial Cordova plugin

@atlassian-test-prod/synth-check 1.0.107197 This repository contains the synthetic checks for the Artifactory Forwarder service. Jul 12 javascript

d28fff69be6b6c4ccc13137b38f14720f98ba483a4304e4d54c4851986099eb5 O(S₂)Md(Pa₃)

80% Hollow package with test name

@atlassian-test-staging/synth-check 1.0.107174 This repository contains the synthetic checks for the Artifactory Forwarder service. Jul 12 javascript

49a22d1e4302db52d78e2994e43133467971b1b96a0a03e124888619cd027c5f O(S₂)Md(Pa₃)

80% Hollow package with suspicious dependency

thirdwebb 0.0.8 A small, fast, easy-to-use library for arbitrary-precision decimal arithmetic Jun 30 javascript

2fe6fd13a0b9fb96d7d3e8d7ef53fe653b00d2f6561ddfe715c5ea8b617d184a ✓ O(S₂)Md(Pa₃)

ts-einkle-slot 0.1.1 A small, fast, easy-to-use library for arbitrary-precision decimal arithmetic Jun 27 javascript

caa006874f115ca1e64b4f68226de5160f299a58e373f360c6767e52c000b60d ✓ O(S₂)Md(Pa₃)

100% Impersonates popular library big.js

package.json Jun 27

afe6a95f6feba957ea06cb9d849dc88ab75734373082a96e3f8c2bc555ccd05e O(S₂)Md(Pa₃)

starship-timeline 1.0.1 Jun 25 javascript

56d344489fef1697b54813764cfbdc62292ca73782e247504bd992190cf636ef ✓ O(S₂)Md(Pa₃)

80% Hollow package with default test script

simplisafe-gatsby 1.0.1 Jun 25 javascript

430babee9577521c0f70df38d41c6153f4ffc264cdbba43768ae51ec15df7629 ✓ O(S₂)Md(Pa₃)

dbt-language-server 1.0.1 Jun 24 javascript

4b4c5043c8e5d80f27653e0571200241a7ab17456185b0aac4dbd0a16057116a ✓ O(S₂)Md(Pa₃)

twilio-voice-js-reference-components 1.0.1 Jun 24 javascript

bce3bf5278534d9002bda31df6fb98837c5395a59634c9ea706ebc41f0c5c33b ✓ O(S₂)Md(Pa₃)

80% Hollow package with empty metadata

rainbokit 0.0.8 Jun 23 javascript

4e7d4027534b6b8ee9644b4f8a2b18c1104eea137e045d0af827fdcdee810316 ✓ O(S₂)Md(Pa₃)

90% Typosquatting big.js with hidden loader

thurdweb 0.0.8 Jun 23 javascript

8c2cd4453c28ab5fbd8a1062bd6e4e51cec1ac83faccc6b9ebab82d38959a1a0 ✓ O(S₂)Md(Pa₃)

90% Typosquatting big.js with hidden loader

ts-escrow 0.1.0 Jun 23 javascript

054243c9dcc18f12a13e0c6578291c73d2245742607353846dd18ae7600e16af ✓ O(S₂)Md(Pa₃)

99% Impersonates big.js with hidden loader

ts-grok 0.0.8 Jun 23 javascript

44c1ae87c7683b62436fb88c6a916b4893e88eb4059d35096cb2f29d8a751aac ✓ O(S₂)Md(Pa₃)

85% Impersonates big.js with hidden loader

llm-traces-app 1.0.2 Jun 23 javascript

0c97db69dcfd0c9c7804b15c505527ff315d608d5259ad05545c56dc291c8fae ✓ O(S₂)Md(Pa₃)

80% Hollow package with empty description

energy-flow-control--types-and-enums 1.0.405 Jun 21 javascript

676666c2a90ac11f43319759cf6f6a43b5f7d0b2b83db66b7b1684b977a07d91 O(S₂)Md(Pa₃)

80% Hollow package with excessive hyphens

energy-flow-control--types-and-enums 1.0.404 Jun 21 javascript

92573653bba0223e76147f282da228357933e6d73b59c055b1967ae8b94c5259 O(S₂)Md(Pa₃)

ts-ecro 0.0.5 Jun 20 javascript

f640f87a3619060d5adc54c17f4d79414fd99903509a7e61218b6222df63b902 ✓ O(S₂)Md(Pa₃)

92% Typosquatting with malicious slot loader dependency

@mono-agent/tui 0.4.0 Jun 20 javascript

13418dcefd59f9d89516938fef68202d17ebdd3f0683776217fb5bb45cabd828 O(S₂)Md(Pa₃)

eslint-plugin-bug-overrides 1000.0.21 Jun 19 javascript

d2688c993e26fef570e1fda00b8c26c9509116ba9462df4c940d71ed7b7adefd ✓ O(S₂)Md(Pa₃)

lightweight-charts 4.1-1000.0.14 Jun 19 javascript

13b2f87cebc84b5a40ed1d6e831065dbac1d5ff3839a4e50135a84d97b7a6671 O(S₂)Md(Pa₃)

80% Unusual npm package version number

@medusajs/link-modules 2.16.0 Jun 19 javascript

6e23173ba90c1123338b8d1f9a226a51fb090375c51fb77006ec9bb5833045c7 O(S₂)Md(Pa₃)

upl-test-487 487-1.0.9 Jun 12 javascript

512e7ad4f2daaf954cd905054f194d6569b7adcea44b590a92d39ec2b198988f O(S₂)Md(Pa₃)

package.json Jun 4

2686d34fdd57b62f775d51c9187d3ebf059925fe09b983c5b8c4473224f121b7 O(S₂)Md(Pa₃)

rctay.karma-problem-matcher 1.0.1 Jun 2 vscode

cafc11e3f16cfc8ff9e0991f4b5a650a47f097328114f43cc623067ba5f17260 O(S₂)Md(Pa₃)

@illalabs/sdk 0.0.0 Jun 1 javascript

77f80a043ee8e7e3c56611f7e4f37c19d7db099e13c41618f1dea2e0c40716a0 O(S₂)Md(Pa₃)

@illalabs/interfaces 0.0.0 Jun 1 javascript

099bd92f9e6c6951e79446c6f7d9aacc6882aba26e37f893dd04fa01f8cdcbee O(S₂)Md(Pa₃)

business-bankruptcy-marketing-kit 1.0.1 May 31 openclaw

39c5e7dccb0bf5613a2f700e0c013385e963ec3979cc4e209f2f286f2b068098 O(S₂)Md(Pa₃)

@nginstack/bowser 85.0.14 May 29 javascript

99921b36dd1d1d86c6bc8aabd514ed9d9b225e4b989a8ccdf0f8cf16aba6c2ca O(S₂)Md(Pa₃)

@nginstack/admin 85.0.14 May 29 javascript

43f1f9ba456bfd3a024cd087a8730528d158c36fe6af03f1a1a4dc1cceb4259e O(S₂)Md(Pa₃)

@nginstack/color-utilities 85.0.14 May 29 javascript

38ff89bd839878e9ae00fbfb4f7b0971c8d333edca8ebaf878a54a880bf1ee25 O(S₂)Md(Pa₃)

@nginstack/dev-tools 85.0.14 May 29 javascript

d060e47da2c97a1bc9d4e03c66489f21c46abbf3604faf890a17d5a4b537cf22 O(S₂)Md(Pa₃)

@nginstack/devops 85.0.14 May 29 javascript

ee54cd5e7f95bfaf675cdb6d44591f2057387bfe3e5a105bbc7615661053ae8d O(S₂)Md(Pa₃)

@nginstack/iquery 85.0.14 May 29 javascript

0ae53816ebb98be785ae5124b5521090e9254490d4681f1fb225ca3639542a35 O(S₂)Md(Pa₃)

@nginstack/jsunit 85.0.14 May 29 javascript

42a54ed7895b0a6dc583652222e3129b020960ff7ccedbebfa4451d0f4f1144a O(S₂)Md(Pa₃)

@nginstack/orm 85.0.14 May 29 javascript

7a959a17e7390741c127c42edf92506d633208107f931c88ba45dca78dcd7c78 O(S₂)Md(Pa₃)

@nginstack/web-framework 85.0.14 May 29 javascript

268b46a5075e7735c69a9dcef4de78c8cbd4927db5f341c742a6d5f7b13cba65 O(S₂)Md(Pa₃)

@datacules 0.3.3 May 28 javascript

a7b99fb92cb5c51e42c6f1cb371b7cb0d93379acce1fe41a24fd2c833de3c6e3 O(S₂)Md(Pa₃)

hayamshoppingcartcusmod 1.0.0 May 28 javascript

776dc9953b99806b8c981fdc4477e5b6b5faaf0d1efd03b486ed8e6e9030fc23 O(S₂)Md(Pa₃)

@genesislcap 14.447.1 May 28 javascript

6639336541fd98347f07618920b43b78d5469f65bb1417be7423935ebc4ac447 O(S₂)Md(Pa₃)

@posiwise 1.0.20 May 28 javascript

1cc4a5eff7bb82aedd45413982ad27cd3686e42796ef027bd8b82efb139d8c5c O(S₂)Md(Pa₃)

@regulaforensics 9.4.2384 Cordova plugin for reading and validation of identification documents (Core framework) May 27 javascript

f734fa84aea117d3b04eeff93ce9399d6a2962011cb992bac69cfd6d5d6242c8 O(S₂)Md(Pa₃)

impersonation/clone-and-rename

@heroku-cli 1.0.2 May 27 javascript

537e182624066396e9ec42c65c5159a354a02fe3a429792fd1743ff410a65e40 O(S₂)Md(Pa₃)

robhan-cdk-lib.utils 0.0.263 May 27 python

33f250d92acaa050d3aac0ea9491ef185e5820a5a37edfcd4388cec66cb4f021 O(S₂)Md(Pa₃)

@ohif 4d-3.12.2 May 26 javascript

0fc17b4fdc4562df6bdf5b3d298695321b5465753f1f4dc0c24a096ae42c5359 O(S₂)Md(Pa₃)

ultra-base64-math 1.0.1 May 26 javascript

673016f950e87044237cff605f21f58409d69f3842c250f991c10b9515afb298 ✓ O(S₂)Md(Pa₃)

@alicloud 1.0.0 May 26 javascript

74ae056bace84b99497a2c302ad15f127454a821aa2e083dc8b0018cabcddf41 O(S₂)Md(Pa₃)

@backstage 0.1.0 May 26 javascript

72633d2be876553e8b8790b6f44f622c32a78aecd65ba57bd39ff18a1ffd68e9 O(S₂)Md(Pa₃)

hex-sl-server 99.0.0 May 25 python

0ac1a4ad32e2d47bb781e1a7eb35ec31fa36ff278924bbbd51489656e7661809 O(S₂)Md(Pa₃)

@c8y 1023.82.4 May 25 javascript

047767da07bac3a4dde4e8b54c67cea4c3af2d789dc7fe55fa18fbab8620099f O(S₂)Md(Pa₃)

@c8y 1023.82.4 May 25 javascript

637cc84456369d8c9dcdb3facce0fdeb0ee32a18cb5f908d12ea62c8ce759db4 O(S₂)Md(Pa₃)

@tracemind 2026.5.25-3 May 25 javascript

0d10c12b0f31ac2f009f51c4743ed11184b2a1763280f525598f3103ef051b9f O(S₂)Md(Pa₃)

n8n-nodes-boomerang 2.0.9 May 24 javascript

9cdf19b3a3f21bdbbed4af38f39bd7780cda0d6834a45e322450b3ab74d3b346 O(S₂)Md(Pa₃)

wirejs-web-worker 1.0.82 May 24 javascript

c8adba129c7fc11e53e07bb9f450e912113d262ed64ffc8ca1e01deca431e457 O(S₂)Md(Pa₃)

cinqcinqdev-seo 0.1.1 May 24 javascript

130fec525a1b8252f62adf001b519ce34007771997a503c960f1eded83071733 O(S₂)Md(Pa₃)

mimosa-design-system 0.2.4 May 23 javascript

1664ef6bab55903de77cc2d080125abd76044f13a4bb0461e05b5993f01de741 O(S₂)Md(Pa₃)

extra-react-store 0.2.5 May 23 javascript

17bb2a18ec3aabb762e4dc5f49c9834ee49d876af6ed1550097d932d6a2157ce O(S₂)Md(Pa₃)

@haybarn 5-3-wasm-eh-202604.27.171638 May 23 javascript

51838b9940f67ef53302f826e63b29db0cb2f25cf49d6fc896bc1c594ecd8dc5 O(S₂)Md(Pa₃)

@haybarn 5-3-wasm-mvp-202604.27.171638 May 23 javascript

f12140304c0403e467d25db47756decab296bd3638979e530f53669122121f27 O(S₂)Md(Pa₃)

@dreyyan 1.0.14 May 23 javascript

3307bd526a7a0b47e9ae2f82ef3527494bce93b8a7f51eda5ee3996d2bef8945 O(S₂)Md(Pa₃)

koishi-plugin-subscription 0.0.8 May 22 javascript

da55f6884cecf71715fc501d99d9ebbbdd3ad854cb36e60069b470f14732a531 O(S₂)Md(Pa₃)

@guardia-technology 0.0.0 May 22 javascript

7293c4e1a2d3a8143aa3da23cfe5f6934aabefd35d08498783aa8f1a70c738e3 O(S₂)Md(Pa₃)

@moonpay 0.0.0 May 22 javascript

f7d092a1dbf6eceb0c0d64000e1b069fc77bfbbc9d61f1802fe31f8d088c2792 O(S₂)Md(Pa₃)

@moonpay 0.0.0 May 22 javascript

1eb67c64ad11142d7ebac59b8585e08bb5b88b110e14bd2c472b359d68014f16 O(S₂)Md(Pa₃)

@medusajs 2.15.3 May 22 javascript

98c729fe3ff451ec550b0c3aa632e68c01424c44d59f3d91842d2aa43a9be2b8 O(S₂)Md(Pa₃)

@spotterjs 0.1.0 May 21 javascript

7079eaa441c4d0ea3077a66219c7b1511aeb69970bdd0e028153c6866dbda405 O(S₂)Md(Pa₃)

@haybarn 5-3-wasm-eh-202605.22.20034 May 21 javascript

03b574aa0267895a2ad05c4234e1d32d6f3a33c5316bf3702deeeabbf84b86bd O(S₂)Md(Pa₃)

@haybarn 5-3-wasm-mvp-202605.22.20034 May 21 javascript

51b25beadbb3888e806cfa170046aa7f3fae4364cda0ebc9ce3071e2cf458f56 O(S₂)Md(Pa₃)

@haybarn 5-3-wasm-threads-202605.22.20034 May 21 javascript

e485453b2e7f9c359f3848d94eac84a983ce6e528ce0e5bd85ddd597fb5c9c7f O(S₂)Md(Pa₃)

praia-org 1.0.4 May 20 vscode

a32e4ff9bedceffcd6a45e3134c3ca97ac5bf1037226dbc32a6f7e1b6098ae19 O(S₂)Md(Pa₃)

n8n-nodes-upptime 0.2.1 May 20 javascript

61d45cd57aa5c241a5292fddb944a2c18d0e5b17d7f1f0d7aa0245b1657a61f9 O(S₂)Md(Pa₃)

@intility 6.9.0 May 20 javascript

7e88e7b2e0870abb4d41e0d90f58a54e3194283606317c4067be58be85f1d6c7 O(S₂)Md(Pa₃)

@antv/wiki 0.1.1 Chart Wiki May 19 javascript

e8343070a996e2ca106efae71dc391a3af2d9f585d20522a7f38903b9e0314de O(S₂)Md(Pa₃)

@festo-ui 10.1.1 May 19 javascript

4d7330adeec3c3c50f39ccb0ab49818ccc6793ed20213e30d2d42f6723af5222 O(S₂)Md(Pa₃)

RYNBD 1.0.0 May 19 vscode

e035ce6dd5ec7852eda2ee3951bfa7fe69d02b091933b2550c9a27e3a0bfa65c O(S₂)Md(Pa₃)

@salesforce 9.1.0 May 18 javascript

2fc77949fa013a680052eee93d6f9252c79a9b03cfec77d665f291d8c52b4c47 O(S₂)Md(Pa₃)

theminalabs 0.0.2 May 18 vscode

c750829f4084922ae0c1f9bc09519914bd7307397165f3fb313e7553bdec4e41 O(S₂)Md(Pa₃)

Equinusocio.vsc-material-theme-icons 3.9.2 May 17 vscode

c9bb5ec964aa376f2060c320c6503690a85df7bf0b41d7b462de89853e61db2f O(S₂)Md(Pa₃)

@mrpelz 5.7.1 May 16 javascript

2a9737370ebe2623b038d8c69130b42dd11ac8b87124d648f5bfce462ee969db O(S₂)Md(Pa₃)

@digipair 0.134.0 May 16 javascript

cc95acba9668469e2e4fef0934d9f450a4f0b211710ca73b1b528a92292cb5a3 O(S₂)Md(Pa₃)

@oclif 2-0.7.121 May 16 javascript

956105c80f88a3be74733e43920c56090e704af7579b1d969e475c1759db1117 O(S₂)Md(Pa₃)

homebridge-onair 0.1.0 May 15 javascript

1beb727a4ee06be098527592746e2e485bfde3b1ab2a3335e6a81f241ef1bea3 O(S₂)Md(Pa₃)

package.json May 15

1c3e89e4ed3cc06ed86adca241801aba51769663758ab83084a00247c5ca119d O(S₂)Md(Pa₃)

package.json May 15

6b09b1e4e06e5b1fe7d2d6fcd0eda207667a5976e5725b776c566830f31f6635 O(S₂)Md(Pa₃)

package.json May 15

e19bd8443e098930e079fdc39045fbe8656a5d747f3b64e543a80bcd7e366a96 O(S₂)Md(Pa₃)

package.json May 15

59ca25c2ae719eb8959671e45a0fe286920761dec362d19867dbee003b7c5d14 O(S₂)Md(Pa₃)

package.json May 15

c6e960436a2b7852a5a613a579d9bc248ea06618ce197e693aa56a2d40649cb9 O(S₂)Md(Pa₃)

package.json May 15

62c060cba9939681c2acbb95784df06e0c6e565c0f7a63232486fe01fbeb74f8 O(S₂)Md(Pa₃)

package.json May 15

7ac8b5b78b2a0fe77497b6fe1f3ab83562b4fbfb33dd4c7a975e82c4c6d65399 O(S₂)Md(Pa₃)