Candidates
| eco | package | ver | score | signals | maint+ | seen ▼ |
|---|---|---|---|---|---|---|
| PyPI | rtc-tools | 2.8.0 | 0.5408 |
repository_url_changed, size_spike, requires_python_changed, new_dep_unknown
|
2026-07-08 10:15 | |
| PyPI | jarbin-toolkit | 1.6 | 0.5066 |
size_spike, mass_publish_burst
|
2026-07-08 06:09 | |
| npm | @visulima/vis | 1.0.0 | 0.7272 |
shared_repo_different_publisher, bin_added, size_spike, dependency_added_unknown
|
2026-07-07 10:26 | |
| npm | @visulima/vis-binding-win32-x64-msvc | 1.0.0 | 0.6209 |
shared_repo_different_publisher, size_spike
|
2026-07-07 10:20 | |
| npm | @visulima/vis-binding-win32-arm64-msvc | 1.0.0 | 0.6209 |
shared_repo_different_publisher, size_spike
|
2026-07-07 10:15 | |
| npm | @visulima/vis-binding-linux-x64-musl | 1.0.0 | 0.6209 |
shared_repo_different_publisher, size_spike
|
2026-07-07 10:10 | |
| npm | @visulima/vis-binding-linux-x64-gnu | 1.0.0 | 0.6209 |
shared_repo_different_publisher, size_spike
|
2026-07-07 10:05 | |
| npm | @visulima/vis-binding-linux-arm64-musl | 1.0.0 | 0.6209 |
shared_repo_different_publisher, size_spike
|
2026-07-07 09:59 | |
| npm | @visulima/vis-binding-linux-arm64-gnu | 1.0.0 | 0.6209 |
shared_repo_different_publisher, size_spike
|
2026-07-07 09:49 | |
| npm | @visulima/vis-binding-darwin-x64 | 1.0.0 | 0.6209 |
shared_repo_different_publisher, size_spike
|
2026-07-07 09:43 | |
| npm | @visulima/vis-binding-darwin-arm64 | 1.0.0 | 0.6209 |
shared_repo_different_publisher, size_spike
|
2026-07-07 09:38 | |
| PyPI | ado-asana-sync | 1.27.50 | 0.6167 |
no_repo, size_spike, rapid_release, typosquat, depsdev_no_source_repo, attestation_dropped
|
2026-07-07 08:10 | |
| npm | @visulima/task-runner | 1.0.0 | 0.5463 |
shared_repo_different_publisher, size_spike, dependency_added_unknown
|
2026-07-07 07:54 | |
| npm | @visulima/task-runner-binding-win32-x64-msvc | 1.0.0 | 0.5736 |
shared_repo_different_publisher, size_spike
|
2026-07-07 07:43 | |
| npm | @visulima/task-runner-binding-win32-arm64-msvc | 1.0.0 | 0.5736 |
shared_repo_different_publisher, size_spike
|
2026-07-07 07:32 | |
| npm | @visulima/task-runner-binding-linux-x64-musl | 1.0.0 | 0.5736 |
shared_repo_different_publisher, size_spike
|
2026-07-07 07:16 | |
| npm | @visulima/task-runner-binding-linux-x64-gnu | 1.0.0 | 0.5736 |
shared_repo_different_publisher, size_spike
|
2026-07-07 07:00 | |
| npm | @visulima/task-runner-binding-linux-arm64-musl | 1.0.0 | 0.5736 |
shared_repo_different_publisher, size_spike
|
2026-07-07 06:43 | |
| npm | @visulima/task-runner-binding-linux-arm64-gnu | 1.0.0 | 0.5736 |
shared_repo_different_publisher, size_spike
|
2026-07-07 06:27 | |
| npm | @visulima/task-runner-binding-darwin-x64 | 1.0.0 | 0.5736 |
shared_repo_different_publisher, size_spike
|
2026-07-07 06:17 | |
| npm | @visulima/dev-toolbar | 1.0.0 | 0.7251 |
shared_repo_different_publisher, bin_added, size_spike, dependency_added_unknown
|
2026-07-07 04:46 | |
| npm | react-native-security-suite | 1.1.3 | 0.5864 |
typosquat, size_spike
|
2026-07-07 03:42 | |
| PyPI | ctao-wms-clients | 0.8.0 | 0.5913 |
size_spike, maintainer_email_changed
|
Volodymyr Savchenko <volodymyr.savchenko@cta-consortium.org>, Natthan Pigoux <natthan.pigoux@lupm.in2p3.fr>, Maximilian Linhoff <maximilian.linhoff@cta-observatory.org>, Luisa Arrabito <arrabito@in2p3.fr> | 2026-07-07 03:42 |
| PyPI | m3-memory | 2026.7.7.2 | 0.5912 |
size_spike, yanked_recent, attestation_dropped
|
2026-07-07 01:16 | |
| npm | @o3r/transloco | 14.4.3 | 0.5153 |
dist_tag_anomaly, shared_repo_different_publisher, size_spike, dependency_added_unknown
|
2026-07-06 18:20 | |
| PyPI | turbohtml | 1.0.0 | 0.5129 |
sdist_only_diff, size_spike, maintainer_email_changed, repo_too_new_for_version_history
|
Bernát Gábor <gaborjbernat@gmail.com> | 2026-07-06 17:51 |
| npm | @agent-phonon/protocol | 0.9.1 | 0.5343 |
superseded_quickly, shared_repo_different_publisher, size_spike, repo_too_new_for_version_history
|
2026-07-06 17:33 | |
| PyPI | kiss-agent-framework | 2026.7.7 | 0.7 |
size_spike, new_dep_unknown, repo_doesnt_exist
|
2026-07-06 12:40 | |
| PyPI | hello-fze | 0.6.4 | 0.6555 |
size_spike, rapid_release, repo_doesnt_exist
|
2026-07-06 03:30 | |
| PyPI | defirl | 1.3.20 | 0.8 |
size_spike, rapid_release, repo_doesnt_exist
|
2026-07-05 08:06 | |
| PyPI | olav | 0.22.0 | 0.5139 |
size_spike, new_dep_unknown, repo_doesnt_exist
|
2026-07-05 03:21 | |
| npm | @twin.org/move-to-json | 0.9.0 | 0.5555 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, size_spike, dependency_added_unknown
|
2026-07-04 19:33 | |
| PyPI | entroly | 1.0.43 | 0.5371 |
no_repo, size_spike, attestation_dropped
|
2026-07-04 10:03 | |
| npm | @twin.org/dlt-iota | 0.9.0 | 0.6301 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, size_spike, dependency_added_unknown, repo_doesnt_exist
|
2026-07-04 02:33 | |
| PyPI | aimeat-crewai | 0.15.0 | 0.5839 |
size_spike, rapid_release, typosquat, repo_too_new_for_version_history
|
2026-07-03 16:15 | |
| npm | @twin.org/rights-management-plugins | 0.9.0 | 0.5656 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, size_spike, dependency_added_unknown
|
2026-07-03 05:27 | |
| npm | @twin.org/rights-management-rest-client | 0.9.0 | 0.5999 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, size_spike, dependency_added_unknown
|
2026-07-03 05:11 | |
| npm | @twin.org/rights-management-service | 0.9.0 | 0.5999 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, size_spike, dependency_added_unknown
|
2026-07-03 04:55 | |
| npm | @a5c-ai/babysitter-observer-dashboard | 6.0.0 | 0.5 |
dist_tag_anomaly, size_spike
|
2026-07-03 04:39 | |
| npm | @twin.org/rights-management-pnp-service | 0.9.0 | 0.5839 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, size_spike, dependency_added_unknown
|
2026-07-03 04:39 | |
| npm | @twin.org/rights-management-pnp-service | 0.9.0 | 0.5839 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, size_spike, dependency_added_unknown
|
2026-07-03 04:34 | |
| npm | @twin.org/rights-management-pep-service | 0.9.0 | 0.5876 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, size_spike, dependency_added_unknown
|
2026-07-03 04:07 | |
| npm | @twin.org/rights-management-pap-service | 0.9.0 | 0.602 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, size_spike, dependency_added_unknown
|
2026-07-03 01:32 | |
| npm | @twin.org/rights-management-models | 0.9.0 | 0.6657 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, size_spike, dependency_added_unknown, repo_doesnt_exist
|
2026-07-03 01:16 | |
| PyPI | colette | 0.3.0 | 0.616 |
size_spike, requires_python_changed, license_changed, maintainer_email_changed, dormant_burst
|
David Horsley <david.e.horsley@gmail.com> | 2026-07-02 20:36 |
| PyPI | fluxmedia | 1.5.8 | 0.5619 |
size_spike, rapid_release, repo_too_new_for_version_history
|
2026-07-02 12:19 | |
| PyPI | oaklib | 0.7.0.0 | 0.7833 |
no_repo, size_spike, requires_python_changed, new_dep_unknown, maintainer_email_changed, dormant_burst
|
Chris Mungall <cjm@berkeleybop.org> | 2026-07-02 09:18 |
| PyPI | clickhouse-migrations | 0.12.0 | 0.5359 |
size_spike, typosquat
|
2026-07-02 06:30 | |
| PyPI | bool-hybrid-array | 9.11.30 | 0.6 |
size_spike, license_changed, rapid_release
|
2026-07-02 06:13 | |
| PyPI | kiss-agent-framework | 2026.7.3 | 0.8 |
size_spike, rapid_release, repo_doesnt_exist
|
2026-07-02 05:09 |