Candidates
| eco | package | ver | score | signals | maint+ | seen ▼ |
|---|---|---|---|---|---|---|
| npm | @diplodoc/cli | 5.48.2 | 0.75 |
shared_repo_different_publisher, dependency_added_unknown
|
2026-07-03 04:23 | |
| npm | af-mobile-client-vue3 | 1.6.55 | 0.6 |
no_repo, maintainer_churn, dependency_added_unknown, depsdev_no_source_repo
|
pupil_shaaob | 2026-07-03 04:12 |
| npm | @twin.org/rights-management-pep-service | 0.9.0 | 0.5876 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, size_spike, dependency_added_unknown
|
2026-07-03 04:07 | |
| npm | @twin.org/rights-management-pdp-service | 0.9.0 | 0.6173 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, dependency_added_unknown
|
2026-07-03 03:46 | |
| npm | @a5c-ai/atlas | 6.0.0 | 0.5333 |
dist_tag_anomaly, script_count_spike, dependency_added_unknown
|
2026-07-03 03:46 | |
| npm | @twin.org/rights-management-pip-service | 0.9.0 | 0.6186 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, dependency_added_unknown
|
2026-07-03 02:52 | |
| npm | @twin.org/rights-management-pmp-service | 0.9.0 | 0.6186 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, dependency_added_unknown
|
2026-07-03 01:48 | |
| npm | @twin.org/rights-management-pap-service | 0.9.0 | 0.602 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, size_spike, dependency_added_unknown
|
2026-07-03 01:32 | |
| npm | @twin.org/rights-management-models | 0.9.0 | 0.6657 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, size_spike, dependency_added_unknown, repo_doesnt_exist
|
2026-07-03 01:16 | |
| npm | fluxflow-cli | 3.0.4 | 0.7 |
rapid_release, dependency_added_unknown, repo_too_new_for_version_history
|
2026-07-03 01:05 | |
| npm | @opencrvs/toolkit | 2.0.0 | 0.7667 |
shared_repo_different_publisher, bin_added, dependency_added_unknown
|
2026-07-03 00:55 | |
| npm | @flue/cli | 1.0.0-beta.9 | 0.6924 |
mass_publish_burst, dependency_added_unknown
|
2026-07-03 00:39 | |
| npm | natureco-cli | 5.23.0 | 0.9 |
maintainer_churn, maintainer_takeover, rapid_release, repository_url_changed, dependency_added_unknown, repo_too_new_for_version_history
|
natureco1 | 2026-07-02 22:16 |
| npm | omniroute | 3.8.41 | 0.6 |
script_count_spike, dependency_added_unknown, repo_too_new_for_version_history
|
2026-06-29 22:31 | |
| npm | @cloudbase/js-sdk | 3.6.2 | 0.6 |
dist_tag_anomaly, dependency_added_unknown, repo_archived, commit_cadence_mismatch
|
2026-06-29 22:15 | |
| npm | @webpieces/nx-webpieces-rules | 0.3.190 | 0.6395 |
rapid_release, shared_repo_different_publisher, dependency_added_unknown
|
2026-06-29 21:33 | |
| npm | @twin.org/trust-models | 0.9.0 | 0.5861 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, dependency_added_unknown, repo_doesnt_exist
|
2026-06-29 21:01 | |
| npm | @shapeshift-labs/frontier-lang-compiler | 0.2.248 | 0.7 |
rapid_release, dependency_added_unknown, repo_too_new_for_version_history
|
2026-06-29 20:40 | |
| npm | @oxyhq/core | 3.18.1 | 0.7879 |
rapid_release, dependency_added_unknown, repo_doesnt_exist
|
2026-06-29 19:26 | |
| npm | @node-webrtc-rust/signaling | 0.6.5 | 0.5139 |
mass_publish_burst, dependency_added_unknown, repo_too_new_for_version_history
|
2026-06-29 19:10 | |
| npm | @twin.org/telemetry-service | 0.9.0 | 0.5535 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, dependency_added_unknown
|
2026-06-29 18:38 | |
| npm | @twin.org/data-processing-models | 0.9.0 | 0.5736 |
dist_tag_anomaly, dependency_added_unknown, repo_doesnt_exist
|
2026-06-29 16:42 | |
| npm | @twin.org/background-task-scheduler | 0.9.0 | 0.5291 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, dependency_added_unknown
|
2026-06-29 15:44 | |
| npm | @module-federation/nextjs-mf | 8.8.69 | 0.8333 |
install_script_payload, shared_repo_different_publisher, dependency_added_unknown
|
2026-06-29 15:12 | |
| npm | spine-framework | 0.3.114 | 0.6 |
dist_tag_anomaly, dependency_added_unknown, repo_too_new_for_version_history
|
2026-06-29 09:01 | |
| npm | @inetafrica/open-claudia | 2.6.55 | 0.5667 |
no_repo, rapid_release, dependency_added_unknown
|
2026-06-29 05:29 | |
| npm | @shapeshift-labs/frontier-lang-compiler | 0.2.239 | 0.7 |
rapid_release, dependency_added_unknown, repo_too_new_for_version_history
|
2026-06-29 05:18 | |
| npm | done-coding | 0.18.1 | 0.5961 |
mass_publish_burst, dependency_added_unknown, repo_too_new_for_version_history
|
2026-06-26 16:30 | |
| npm | @done-coding/cli-component | 0.6.1 | 0.6607 |
mass_publish_burst, dependency_added_unknown, repo_too_new_for_version_history
|
2026-06-26 16:24 | |
| npm | @vultisig/cli | 2.8.4 | 0.6593 |
mass_publish_burst, dependency_added_unknown
|
2026-06-26 14:28 | |
| npm | @vultisig/sdk | 2.8.5 | 0.7294 |
rapid_release, mass_publish_burst, dependency_added_unknown
|
2026-06-26 14:28 | |
| npm | @tangle-network/sandbox-cli | 0.3.3 | 0.7 |
dist_tag_anomaly, dependency_added_unknown, repo_doesnt_exist
|
2026-06-26 13:24 | |
| npm | @codemap-ai/cli | 3.1.2 | 0.566 |
mass_publish_burst, dependency_added_unknown, repo_too_new_for_version_history
|
2026-06-26 12:26 | |
| npm | @codemap-ai/mcp | 3.1.2 | 0.5329 |
mass_publish_burst, dependency_added_unknown
|
2026-06-26 12:26 | |
| npm | @glissade/browser | 0.21.0 | 0.5452 |
dist_tag_anomaly, mass_publish_burst, dependency_added_unknown, repo_too_new_for_version_history
|
2026-06-26 11:54 | |
| npm | @adobedjangir/commerce-admin-management | 0.3.5 | 0.5698 |
rapid_release, dependency_added_unknown, repo_too_new_for_version_history
|
2026-06-26 11:54 | |
| npm | @clarify-labs/cli | 0.7.2 | 0.5224 |
shared_repo_different_publisher, dependency_added_unknown, repo_too_new_for_version_history
|
2026-06-26 11:33 | |
| npm | brewcode-cli | 1.0.0 | 0.6978 |
bin_added, size_spike, dependency_added_unknown, repo_doesnt_exist
|
2026-06-26 11:32 | |
| npm | circle-ir-ai | 2.19.1 | 0.7667 |
typosquat, dependency_added_unknown, repo_doesnt_exist
|
2026-06-26 11:11 | |
| npm | @gscdump/analysis | 0.32.7 | 0.7615 |
rapid_release, shared_repo_different_publisher, dependency_added_unknown
|
2026-06-26 10:50 | |
| npm | @kungal/ui-vue | 2.7.0 | 0.7151 |
rapid_release, shared_repo_different_publisher, dependency_added_unknown, repo_too_new_for_version_history
|
2026-06-26 10:02 | |
| npm | @junejs/server | 0.0.50 | 0.6387 |
rapid_release, shared_repo_different_publisher, dependency_added_unknown, repo_too_new_for_version_history
|
2026-06-26 09:46 | |
| npm | @shapeshift-labs/frontier-lang-compiler | 0.2.167 | 0.7 |
rapid_release, dependency_added_unknown, repo_too_new_for_version_history
|
2026-06-26 09:14 | |
| npm | @twin.org/entity-storage-connector-dynamodb | 0.9.0-next.1 | 0.6039 |
provenance_dropped, size_spike, dependency_added_unknown
|
2026-06-23 05:31 | |
| npm | @twin.org/entity-storage-connector-cosmosdb | 0.9.0-next.1 | 0.6534 |
provenance_dropped, dependency_added_unknown
|
2026-06-23 05:20 | |
| npm | @twin.org/entity-storage-connector-postgresql | 0.9.0-next.1 | 0.5794 |
provenance_dropped, size_spike, dependency_added_unknown
|
2026-06-23 03:56 | |
| npm | @twin.org/entity-storage-connector-mongodb | 0.9.0-next.1 | 0.5825 |
provenance_dropped, size_spike, dependency_added_unknown
|
2026-06-23 03:50 | |
| npm | @twin.org/entity-storage-connector-mysql | 0.9.0-next.1 | 0.5855 |
provenance_dropped, size_spike, dependency_added_unknown
|
2026-06-23 02:46 | |
| npm | @twin.org/entity-storage-connector-gcp-firestore | 0.9.0-next.1 | 0.5912 |
provenance_dropped, size_spike, dependency_added_unknown
|
2026-06-23 02:20 | |
| npm | @twin.org/entity-storage-connector-scylladb | 0.9.0-next.1 | 0.6688 |
provenance_dropped, dependency_added_unknown
|
2026-06-23 02:04 |