AUTO-PUBLISHED/pypi/
disposable-email-domains2 versions·0.0.196→0.0.197
A set of disposable email domains
steals →Chromium logins
reads-chromium-credswebhook-binarchive-then-uploadclipboard-access
weekly
1.1M
/wk
h-score
20
patterns
탐지
분석 파이프라인이 auto-published로 분류한 패키지 전체. 주간 다운로드 기준으로 정렬하면 영향력이 큰 케이스부터 먼저 보입니다.
A set of disposable email domains
A Durable Task Client SDK for Python
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
## Getting Started
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Tricentis Sealights Python Agent - Quality Intelligence and Code Coverage
Collection of tools to reconcile services with their desired state as defined in the app-interface DB.
AdiaUI A2UI training corpus — canonical v0.9 catalog + chunks + eval fixtures + feedback + gap registry. Consumed by the compose engine's retrieval layer + the MCP pipeline.
Parse byte string to byte number, e.g. 1.2 Kb -> 1228.8, Kb, Mb, Gb, Tb, Pb, Eb, Zb, Yb supported.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 4 other host(s).
Benjamin CLI Generator
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
RTExit - AI-assisted Red Team methodology installer
정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.
JavaScript cryptography library providing hashing, HMAC, PBKDF2, AES encryption, and encoding utilities
Serveur MCP pour piloter Bricks Builder (WordPress) depuis Claude/Codex — édition de pages, gestion d'éléments, audit technique, audit design visuel, upload optimisé WebP. Communauté Discord : https://discord.gg/rX22zHRzH
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
AgenticMail Enterprise — cloud-hosted AI agent identity, email, auth & compliance for organizations
Unified MCP pipeline for recommend-page filtering and screening on Boss Zhipin
→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.
Моя библиотека для работы с MongoDB
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Terminal logger utilities
F5 Distributed Cloud branded Starlight documentation theme
→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
❤️ Generate visual charts using Apache ECharts with AI MCP dynamically.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
Unified theme + template helpers for Stelnyx CLI reports (LuxScope, LuxFaber, SecGate).
WorkRally CLI — 面向 AI Agent 的 AIGC 漫剧视频创作全流程工具集
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).
CWAO SDK makes CosmWasm AO development a breeze.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
AdminForth completion adapter for the OpenAI Responses API.
Bit-level JSON encoder + delta-chain protocol (weavepack-json reference implementation). Smaller than MessagePack/CBOR for structured/repetitive JSON; ships per-payload-addressable chains for storing edit histories.
A minimal MCP server demo exposing a hello tool.
→ 의심 전송지 없음, 원격 실행 형태 없음 — extraction empty.
a domain ssl cert admin
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
Shared rootfs contract parsing, reference profile assets, and build helpers.
Node and GitHub Actions adapters for shared Aleph tooling.
Pi agent extension for LiteLLM proxy auto-discovery and model configuration
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
Smart handoffs allow users to link from one application to another while carrying with them certain parameters that set a specific context (e.g. open up the same dataset, temporal range, and spatial search in a new tool). This code simplifies the creation
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
Real-time music generation models.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
Verify mnemonic phrases haven't been compromised. Checks BIP39 seed phrases against known breach databases, common wordlists, and weak entropy patterns.
Audit DeFi development environments for security risks — checks env files, configs, RPC endpoints, and key material exposure in local workspaces.
Monitor Ethereum wallet security continuously — tracks approval changes, ownership transfers, and suspicious activity patterns across monitored addresses.
Coding agent CLI with read, bash, edit, write tools and session management
Audit deployment keys before mainnet launch. Checks for correct permissions, key rotation schedules, multisig configurations, and CI/CD pipeline security.
Feishu (Larksuite) channel plugin for OpenClaw Chinese
→ 의심 전송지 없음, 원격 실행 형태 없음 — 2 known-vendor host(s).
This document describes the management of vulnerabilities for the project and all modules within the organization.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
Coding agent CLI with persistent memory, sub-agents, intelligent routing, and orchestration
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
X6 shape for rendering vue3 components.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
Internal database utilities with connection pooling, query builder and migration support
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
Colorized TypeScript logger with pretty output, log levels, and timestamps.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
Internal database utilities with connection pooling, query builder and migration support
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
Internal database utilities with connection pooling, query builder and migration support
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
Internal database utilities with connection pooling, query builder and migration support
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
tbank utilities
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).
Shared code between Beabee projects
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
LintHTML Config for HTML Academy CODEGUIDE
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
security holding package
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
Typed async workflows with automatic error inference. Build type-safe workflows with Result types, step caching, resume state, and human-in-the-loop support.
Internal database utilities with connection pooling, query builder and migration support
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream Axonaut Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
AI-powered autonomous web testing engine — discover, test, and report on any website
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
JishuShell — Raspberry Pi server management panel (Core + Web UI)
→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
→ Encoded payload + dynamic execution combo (event-stream / flatmap-stream shape) — embedded blob decoded and executed at install time. Fast-tracked.
→ 크리덴셜 읽기 (reads-seed-phrase, reads-npmrc, reads-wallet-files) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.
→ 크리덴셜 읽기 (reads-npmrc, reads-wallet-files, reads-seed-phrase) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.
→ 크리덴셜 읽기 (reads-npmrc, reads-wallet-files, reads-seed-phrase) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.
→ 크리덴셜 읽기 (reads-npmrc, reads-wallet-files, reads-seed-phrase) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.
→ 크리덴셜 읽기 (reads-ai-api-keys, reads-gitlab-tokens) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.
Worker-based trigger for Blok workflows - supports background job processing with concurrency, retries, and scheduling
→ 크리덴셜 읽기 (reads-aws-creds) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Consentmo cookie banner and Web Accessibility widget integration for Hydrogen storefronts.
Web Client for WeaveDB on Execution Machine
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).
A Python package for Azure Genome.
Show a small widget on top of the page with some of the most crucial web vitals.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream Swell Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream Telnyx Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream Appwrite Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream Checkvist Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).
Pipedream Rejoiner Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream FlexiSign Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream Proofly Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream ReachMail Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream Short.io Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream Klipfolio Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream Pivotal Tracker Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).
Pipedream Pumble Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream Pushcut Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream SARE Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream Slybroadcast Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream Faunadb Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).
Pipedream Lighthouse Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream LiveSwitch Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream Process Street Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream Productlane Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream TimeCamp Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream Favro Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream Google Merchant Center Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Internal configuration loader with env, vault and remote config support
Pipedream pCloud Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).
Pipedream Woodpecker.co Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).
Pipedream CodeREADr Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Pipedream Leap Components
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
Autonomous CVE remediation system with AI patching, runtime validation, KinD testing, and zero-trust deployment gates.
→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.
Lattice AI v3 local-first AI workspace platform with knowledge graph, vector index, hybrid search, agents, and workspace modes.
→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.
Security helper for Zudoku
→ 크리덴셜 읽기 (reads-aws-creds, reads-npmrc, reads-github-tokens) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.
Github action for the Infer CLI
→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.
Open-source coding-agent CLI. Terminal-first, multi-agent, self-improving. Supports OpenAI, Anthropic, Gemini, Ollama, and 13 more providers.
→ 정적 분석기가 reverse-shell 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.
SPCSN Taro runtime API entry
Local-first, BYOK multi-host ops + SEO control plane — scan, diagnose and fix across 12 hosts from your own machine.
→ 크리덴셜 읽기 (reads-github-tokens, reads-gitlab-tokens, reads-gcp-creds, reads-aws-creds, reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.
P2P AI Document Agent - 全局安装后执行 `bolloon` 启动产品
→ 크리덴셜 읽기 (reads-ai-api-keys, reads-seed-phrase) + 외부 전송지 http-to-public-ip, dest-via-hostname-var 조합 — 전형적인 유출 패턴.
SMS Phone Verification API using AWS SNS HTTP API with Hono server on Cloudflare Workers
AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (439 CVEs / 177 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate,
→ Worm self-propagation: package reads .npmrc _authToken AND invokes npm publish in install-path code. Shai-Hulud-class shape — no legitimate package re-publishes OTHER packages from the user's machine.
Unified Ethereum dev toolkit — Ganache-compatible API powered by Foundry (Forge + Cast + Anvil + Chisel) with LevelDB persistence
The official GitHub Action for Orkestra — runs the full ork CLI surface from any workflow
→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.
Switchboard plugin for the PROOF command line interface.
Claws — Terminal Control Bridge for VS Code. One command to install.
→ Worm self-propagation: package reads .npmrc _authToken AND invokes npm publish in install-path code. Shai-Hulud-class shape — no legitimate package re-publishes OTHER packages from the user's machine.
Consolidated Xema OS kernel wire contracts — pure types + zod schemas for the 32 kernel protocol surfaces. One package, one npm scope, wildcard per-surface subpath exports. No framework/runtime deps.
Node.js in your browser. Just like that.
→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 http-to-public-ip 조합 — 전형적인 유출 패턴.
ACTAgent ACP runtime backend with plugin-owned session and transport management.
ACTAgent Amazon Bedrock provider plugin with model discovery, embeddings, and guardrail support.
cue — Agent Profile Manager for Claude Code & Codex. Pick a profile, launch with the right skills, MCPs, and plugins.
→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.
Node.js in your browser. Just like that.
→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 http-to-public-ip 조합 — 전형적인 유출 패턴.
Background jobs plugin for AdminForth to run and manage long tasks from resources
AI-aware security scanner for VS Code — code vulnerabilities, LLM risks, secrets, dependencies, MCP & agent security
→ 크리덴셜 읽기 (reads-github-tokens, reads-aws-creds, reads-ai-api-keys, reads-azure-creds) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.
The cli specific package
Node.js integration layer for Autodesk Forge
Harper is an open-source Node.js performance platform that unifies database, cache, application, and messaging layers into one in-memory process.
→ 크리덴셜 읽기 (reads-aws-creds) + 외부 전송지 http-to-public-ip 조합 — 전형적인 유출 패턴.
Harper is an open-source Node.js performance platform that unifies database, cache, application, and messaging layers into one in-memory process.
→ 크리덴셜 읽기 (reads-aws-creds) + 외부 전송지 http-to-public-ip 조합 — 전형적인 유출 패턴.
Identity module for user management, authentication and authorization.
Hierarchical deterministic (HD) wallet and DID document management for OwlMeans identity.
Project subsystem bootstrapper CLI
→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.
Dashboard plugin for AdminForth
AI agent plugin for AdminForth with tool-based workflows and persistent chat sessions
Pinclaw Claude Code bridge — discovers local Claude Code sessions and syncs their state to Pinclaw cloud (read-only v1).
→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.
Unified LLM API with automatic model discovery and provider configuration
Coding agent CLI with read, bash, edit, write tools and session management
Totem LLM – Your Private AI. Run a self-hosted AI assistant locally on Linux, macOS, or Windows.
→ 크리덴셜 읽기 (reads-npmrc, reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.
Engineering discipline and workflow guardrails for AI coding agents (Claude, Cursor, Codex, Gemini).
→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.
logging step
→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.
Types for Microsoft Graph objects
Microsoft Application Insights Common JavaScript Library
JavaScript library of crypto standards.
A comprehensive list of all free email domain providers
Zero Knowledge Provable JSON
A deploy plugin for warp contracts
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
A decentralized NoSQL database powered by Arweave.
A decentralized NoSQL database powered by Arweave.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 3 known-vendor host(s), 1 other host(s).
A decentralized NoSQL database powered by Arweave.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
WeaveDB on Execution Machine.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).
A decentralized NoSQL database powered by Arweave.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 2 other host(s).
A deploy plugin for warp contracts
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
[Documentation](../docs/docs/pages/api/hbsig.mdx)
`cwao-units` runs [AO compatible units](https://ao.arweave.dev/#/spec) for CosmWasm.
`cwao-tools` makes CosmWasm contract development & testing too easy.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
