Search 24 packages

Found detections shipping vulnerabilities yanked

Build behaviour fetched outside the registry undeclared fetch fetch went into the output linked a downloaded binary read credentials connected outside the registry

Packages1–24 of 24	Version	Findings	Description	Downloads	When
ntgcalls-sys cargo	3.0.2	1 detection 1	Raw FFI bindings to the ntgcalls C ABI	684	3h ago
ntgcalls cargo	3.0.2	1 detection 1	A Library for creating group calls and P2P calls with WebRTC and MTProto	576	3h ago
sc-executor cargo	0.51.0	clean	A crate that provides means of executing/dispatching calls into the runtime.	4M	9h ago
pallet-collective cargo	50.0.0	clean	Collective system: Members of a set of account IDs can make their collective feelings known through dispatched calls from one of two specialized origins.	921K	8h ago
pallet-whitelist cargo	49.0.0	clean	FRAME pallet for whitelisting calls, and dispatching from a specific origin	835K	1h ago
pallet-ranked-collective cargo	50.0.0	clean	Ranked collective system: Members of a set of account IDs can make their collective feelings known through dispatched calls from one of two specialized origins.	822K	8h ago
pallet-skip-feeless-payment cargo	24.0.0	clean	Pallet to skip payments for calls annotated with `feeless_if` if the respective conditions are satisfied.	636K	8h ago
sc-runtime-utilities cargo	0.11.0	clean	Substrate client utilities for frame runtime functions calls.	160K	9h ago
codex-codes cargo	0.161.0	clean	Typed Rust SDK for the OpenAI Codex agent CLI: serde models of the codex app-server JSON-RPC protocol, plus sync and async (Tokio) clients for multi-turn Codex…	23K	5h ago
rhabdomancer cargo	1.0.0	2 detections 3 vulnerabilities 23	Vulnerability research assistant that locates calls to potentially insecure API functions in a binary file.	17K	15h ago
polyc-crypto cargo		not built 2026.10.2 did not build	Provenance signatures (commonware-cryptography ed25519) for polychrome tool calls.	13K	10h ago
shvcall cargo	3.11.43	4 vulnerabilities 4	CLI utility to invoke remote SHV RPC calls	2.8K	14h ago
wicked-estate-memory-api cargo	0.21.0	clean	The memory/knowledge interface seam: traits + DTOs a host (estate binary/MCP) calls so any memory implementation (e.g. wicked-memory) can plug in. Depends on…	1.3K	1d ago
wicked-estate cargo	0.21.0	4 vulnerabilities 4	Code + infrastructure estate graph for LLM agents: definitions, who-calls-X, blast-radius, scoped context.	1.0K	1d ago
snare-interpose cargo	3.1.0	clean	Redirects a program's calls into the operating system to pluggable layers, per thread	994	5h ago
car-connectors cargo		not built 0.56.1 did not build	Remote MCP connectors for the Common Agent Runtime — connect to remote MCP servers over HTTP, register their tools, and route calls through CAR's governance…	770	4h ago
rahi-store cargo	0.5.0	clean	The application store of the rahi chassis: hiqlite in-process with txn, two read calls, migrations, and backup	469	20h ago
ironflow-ops-grafana cargo	0.1.32	clean	Grafana operations for Ironflow workflows, using direct HTTP calls	410	16h ago
rudb-qc-rt cargo	0.8.43	clean	The query compiler's runtime: the pipeline ABI, strings, hash tables and the functions compiled code calls.	247	43m ago
stellar-agent-anchor cargo		not built 0.1.0-alpha.10 did not build	SEP-24 interactive hand-off and SEP-6 discovery-only anchor client. Calls GET /info only for SEP-6; returns the interactive URL for SEP-24 without opening or…	145	2d ago
wickra-copilot-llm cargo	0.2.0	clean	Non-deterministic LLM adapter for the Wickra Copilot: renders a deterministic MarketContext into a prompt and calls the user's own OpenAI-compatible endpoint…	73	1d ago
agent-top-store cargo	0.27.1	clean	The local SQLite store behind `agent-top sync`: sessions, spans and MCP calls kept after a harness deletes its transcripts.	49	5h ago
indicatrix-web-core cargo	0.7.0	clean	The compute side of the indicatrix browser app with no DOM or Slint in it: the Web Worker protocol, the scene spec that builds the desktop's exact render…	31	7h ago
pmpx-loader cargo	0.3.2	clean	Loads a pmpx plugin and calls it across the C ABI: the host side of the contract.	27	11h ago