npm user-agents @2.1.78

score

0.7333 high

flagged 2026-06-02 00:19

signals by category

identity 1 topology 2

maintainers added: —

Signals fired

signal	weight	rationale
identity
publisher_unrecognized	0.7	latest published by 'CircleCI', not in maintainer set
topology
typosquat	1.0	combosquat of 'agents'
mass_publish_burst	0.8	publisher 'CircleCI' pushed 5 packages in the last 15min on npm

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "intoli"
  ],
  "versions": 2888
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-oBVz66/94Z+SAjH4cbeAxf9OWsltqKbT1xFS3JjrN4+26iQyO16VxnUzihgBJvDVSd208i2Zkvd9Okiq4BEN8Q==",
    "tarball": "https://registry.npmjs.org/user-agents/-/user-agents-2.1.78.tgz",
    "unpackedSize": 5608008
  },
  "dist-tags": {
    "latest": "2.1.78"
  },
  "latest_version": "2.1.78",
  "maintainers": [
    {
      "email": "npm@intoli.com",
      "name": "intoli"
    }
  ],
  "num_versions": 2900,
  "repository": {
    "type": "git",
    "url": "git+ssh://git@github.com/intoli/user-agents.git"
  },
  "scripts": {
    "build": "tsup",
    "gunzip-data": "node --loader ts-node/esm src/gunzip-data.ts src/user-agents.json.gz",
    "lint": "eslint src/ test/ && prettier --check src/ test/",
    "postbuild": "yarn gunzip-data && cp src/user-agents.json dist/",
    "test": "NODE_OPTIONS='--import tsx' mocha --exit --extensions '.ts, .js'",
    "update-data": "node --loader ts-node/esm src/update-data.ts src/user-agents.json.gz"
  },
  "signal_details": {
    "mass_publish_burst": "publisher 'CircleCI' pushed 5 packages in the last 15min on npm",
    "publisher_unrecognized": "latest published by 'CircleCI', not in maintainer set",
    "typosquat": "combosquat of 'agents'"
  },
  "time": {
    "created": "2013-03-03T09:58:29.319Z",
    "modified": "2026-06-01T06:38:39.404Z"
  }
}