Candidates
| eco | package | ver | score | signals | maint+ | seen ▼ |
|---|---|---|---|---|---|---|
| PyPI | pulp-certguard-client | 3.114.0 | 0.8667 |
shared_repo_different_publisher, typosquat, repo_doesnt_exist
|
2026-07-14 08:22 | |
| PyPI | pulp-file-client | 3.114.0 | 0.8667 |
shared_repo_different_publisher, typosquat, repo_doesnt_exist
|
2026-07-14 08:22 | |
| PyPI | susatest-agent | 0.7.22 | 0.7311 |
repository_url_changed, rapid_release, repo_doesnt_exist
|
2026-07-14 00:58 | |
| npm | @trackunit/filters-asset-filter-definitions | 2.4.2 | 0.8667 |
rapid_release, mass_publish_burst, repo_doesnt_exist
|
2026-07-13 18:42 | |
| npm | @agorapulse/ui-wysiwyg-editor | 21.0.1 | 0.8333 |
maintainer_churn, dist_tag_anomaly, repo_doesnt_exist
|
jean-loup-marquis | 2026-07-13 18:15 |
| npm | @pisell/pisellos | 2.3.31 | 0.7667 |
rapid_release, dist_tag_anomaly, repo_doesnt_exist
|
2026-07-13 18:00 | |
| PyPI | handcuff | 1.10.0 | 0.7225 |
rapid_release, superseded_quickly, removed_within_window, repo_doesnt_exist
|
2026-07-13 14:47 | |
| PyPI | khy-os | 1.1.2 | 0.9 |
rapid_release, removed_within_window, repo_doesnt_exist
|
2026-07-13 11:23 | |
| PyPI | legit-api-client | 1.1.5045 | 0.9 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-07-13 06:27 | |
| npm | @e-llm-studio/instant-learning | 1.3.0-alpha.103 | 0.875 |
maintainer_churn, shared_repo_different_publisher, dependency_added_unknown, repo_doesnt_exist
|
amber_techo | 2026-07-13 03:19 |
| npm | @carto/meridian-ds | 4.2.0 | 0.7667 |
bin_added, script_count_spike, repo_doesnt_exist
|
2026-07-13 01:32 | |
| PyPI | conjunto | 0.7.14 | 0.7105 |
rapid_release, suspicious_classifier, repo_doesnt_exist
|
2026-07-12 23:03 | |
| npm | @kenyaemr/esm-express-workflow-app | 5.4.3 | 0.8 |
dist_tag_anomaly, shared_repo_different_publisher, repo_doesnt_exist
|
2026-07-12 17:53 | |
| npm | @techsee/techsee-nway-media-service-client | 1.243.1-alpha-Omer-RabiHY-307-958320412707718.0 | 0.8333 |
maintainer_churn, dist_tag_anomaly, repo_doesnt_exist
|
pavel_ratnitsky | 2026-07-12 10:38 |
| npm | @techsee/techsee-media-service-client | 50.245.1-alpha-Omer-RabiHY-307-958320412707718.0 | 0.8333 |
maintainer_churn, dist_tag_anomaly, repo_doesnt_exist
|
pavel_ratnitsky | 2026-07-12 10:38 |
| PyPI | legit-api-client | 1.1.5034 | 0.9 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-07-12 04:03 | |
| PyPI | pictograph | 1.61.3 | 0.8333 |
repository_url_changed, rapid_release, repo_doesnt_exist
|
2026-07-11 12:43 | |
| npm | @opengov/ppf-backend-types | 1.143.0 | 0.8333 |
maintainer_churn, dist_tag_anomaly, repo_doesnt_exist
|
divyanshu-og, ntekwani1 | 2026-07-11 06:59 |
| PyPI | langchain-agentx-python | 2.0.1 | 0.8333 |
rapid_release, typosquat, repo_doesnt_exist
|
2026-07-11 06:50 | |
| PyPI | leafmesh | 2.4.48 | 0.7909 |
superseded_quickly, removed_within_window, repo_doesnt_exist
|
2026-07-11 06:50 | |
| npm | @bondsports/types | 2.4.74-ori-4 | 0.8333 |
maintainer_churn, dist_tag_anomaly, repo_doesnt_exist
|
shirgilboa | 2026-07-10 19:56 |
| npm | soloforge | 1.1.131 | 0.7257 |
rapid_release, dist_tag_anomaly, repository_url_changed, repo_doesnt_exist
|
2026-07-10 19:45 | |
| npm | @smg-automotive/eslint-config | 7.1.4 | 0.7333 |
dist_tag_anomaly, repository_url_changed, repo_doesnt_exist
|
2026-07-10 16:23 | |
| npm | @twin.org/identity-connector-iota | 0.9.0 | 0.745 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, repo_doesnt_exist
|
2026-07-10 15:30 | |
| PyPI | ksapi | 1.131.1 | 0.9 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-07-10 13:43 | |
| PyPI | june-bench | 0.0.32 | 0.7207 |
repository_url_changed, new_dep_unknown, maintainer_email_changed, repo_doesnt_exist, attestation_dropped
|
Junemind <access@januraine.ai> | 2026-07-10 00:49 |
| PyPI | bem-prediction-models | 2.1.1 | 0.7023 |
repository_url_changed, maintainer_email_changed, repo_doesnt_exist, attestation_dropped
|
katherine.fleming@nlr.gov | 2026-07-09 23:06 |
| npm | @netlify/agent-runner-cli | 1.140.0 | 0.7 |
size_spike, dependency_added_unknown, repo_doesnt_exist
|
2026-07-09 16:36 | |
| PyPI | sapiens-transformers | 2.2.8 | 0.7868 |
stub_release, typosquat, repo_doesnt_exist
|
2026-07-09 16:23 | |
| npm | @twin.org/identity-models | 0.9.0 | 0.72 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, dependency_added_unknown, repo_doesnt_exist
|
2026-07-08 18:59 | |
| PyPI | duppla-slack | 2026.7.6 | 0.7311 |
new_dep_unknown, dormant_burst, repo_doesnt_exist
|
2026-07-08 12:33 | |
| PyPI | pulp-maven-client | 0.22.0 | 0.8509 |
shared_repo_different_publisher, typosquat, repo_doesnt_exist
|
2026-07-08 12:06 | |
| PyPI | leafmesh | 2.4.47 | 0.7909 |
superseded_quickly, removed_within_window, repo_doesnt_exist
|
2026-07-08 09:31 | |
| PyPI | khy-os | 0.1.173 | 0.7667 |
new_dep_unknown, rapid_release, repo_doesnt_exist
|
2026-07-08 05:12 | |
| PyPI | nsj-integracao-api-client | 2.2502.0.78 | 0.7667 |
new_dep_unknown, rapid_release, repo_doesnt_exist
|
2026-07-07 11:42 | |
| npm | document360-writer | 0.5.87 | 0.7038 |
shared_repo_different_publisher, repo_doesnt_exist
|
2026-07-07 09:03 | |
| PyPI | legit-api-client | 1.1.5028 | 0.9 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-07-07 05:40 | |
| npm | @decentnetwork/lan | 0.1.150 | 0.7754 |
rapid_release, dependency_added_unknown, repo_doesnt_exist
|
2026-07-07 02:33 | |
| npm | @things-factory/operato-tools | 9.2.31 | 0.7667 |
dist_tag_anomaly, mass_publish_burst, repo_doesnt_exist
|
2026-07-06 17:12 | |
| npm | @things-factory/integration-email | 9.2.31 | 0.7 |
dist_tag_anomaly, dependency_added_unknown, repo_doesnt_exist
|
2026-07-06 16:19 | |
| PyPI | kiss-agent-framework | 2026.7.7 | 0.7 |
size_spike, new_dep_unknown, repo_doesnt_exist
|
2026-07-06 12:40 | |
| PyPI | legit-api-client | 1.1.5018 | 0.9 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-07-06 04:48 | |
| PyPI | nao-core | 0.2.9 | 0.8299 |
rapid_release, removed_within_window, repo_doesnt_exist
|
2026-07-06 04:34 | |
| PyPI | agent-forge-installer | 0.4.30 | 0.8024 |
rapid_release, typosquat, repo_doesnt_exist, attestation_dropped
|
2026-07-05 20:31 | |
| PyPI | prefact | 0.1.62 | 0.8712 |
rapid_release, typosquat, repo_doesnt_exist
|
2026-07-05 12:39 | |
| npm | @trackunit/filters-asset-filter-definitions | 2.1.90 | 0.9333 |
maintainer_churn, mass_publish_burst, repo_doesnt_exist
|
bch-trackunit | 2026-07-05 09:51 |
| PyPI | defirl | 1.3.20 | 0.8 |
size_spike, rapid_release, repo_doesnt_exist
|
2026-07-05 08:06 | |
| npm | document360-writer | 0.5.86 | 0.7038 |
shared_repo_different_publisher, repo_doesnt_exist
|
2026-07-05 05:52 | |
| npm | @autohq/cli | 0.1.330 | 0.8 |
rapid_release, dependency_added_unknown, repo_doesnt_exist
|
2026-07-05 00:33 | |
| PyPI | agent-forge-installer | 0.4.27 | 0.8064 |
rapid_release, typosquat, repo_doesnt_exist
|
2026-07-04 17:42 |