Candidates
| eco | package | ver | score | signals | maint+ | seen ▼ |
|---|---|---|---|---|---|---|
| npm | @opengov/ppf-backend-types | 1.143.0 | 0.8333 |
maintainer_churn, dist_tag_anomaly, repo_doesnt_exist
|
bakulgupta, brookedaniels | 2026-07-04 17:01 |
| npm | shennian | 0.2.132 | 0.8 |
rapid_release, dependency_added_unknown, repo_doesnt_exist
|
2026-07-04 11:09 | |
| npm | @anvil-works/anvil-cli | 0.7.4 | 0.705 |
maintainer_churn, dist_tag_anomaly, dependency_added_unknown, repo_doesnt_exist
|
anvilpete | 2026-07-04 11:03 |
| PyPI | pulp-maven-client | 0.21.0 | 0.8483 |
shared_repo_different_publisher, typosquat, repo_doesnt_exist
|
2026-07-03 13:00 | |
| PyPI | flamapy | 2.5.0 | 0.7507 |
mass_publish_burst, shared_repo_different_publisher, repo_doesnt_exist
|
2026-07-03 11:29 | |
| npm | @helpai/elements | 0.59.5 | 0.9 |
rapid_release, superseded_quickly, repo_doesnt_exist
|
2026-07-03 05:16 | |
| PyPI | langchain-agentx-python | 1.8.3 | 0.8333 |
rapid_release, typosquat, repo_doesnt_exist
|
2026-07-03 05:16 | |
| npm | spirewise | 1.9.7 | 0.7691 |
maintainer_churn, maintainer_takeover, repo_doesnt_exist
|
npm-support | 2026-07-03 02:47 |
| PyPI | flamapy | 2.5.0 | 0.7374 |
mass_publish_burst, shared_repo_different_publisher, repo_doesnt_exist
|
2026-07-02 10:40 | |
| PyPI | pictograph | 1.10.0 | 0.7281 |
new_dep_unknown, rapid_release, repo_doesnt_exist
|
2026-07-02 07:30 | |
| PyPI | kiss-agent-framework | 2026.7.3 | 0.8 |
size_spike, rapid_release, repo_doesnt_exist
|
2026-07-02 05:09 | |
| PyPI | langchain-agentx-python | 1.8.0 | 0.8333 |
rapid_release, typosquat, repo_doesnt_exist
|
2026-07-02 03:27 | |
| PyPI | legit-api-client | 1.1.5006 | 0.9 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-07-02 01:04 | |
| PyPI | sapiens-transformers | 2.2.4 | 0.7792 |
stub_release, typosquat, repo_doesnt_exist
|
2026-07-01 15:11 | |
| PyPI | rsp-jupyter-extensions | 0.26.0 | 0.7235 |
maintainer_email_changed, typosquat, repo_doesnt_exist
|
Adam Thornton <adam.thornton@noirlab.edu> | 2026-06-30 20:17 |
| PyPI | medicafe | 0.260630.3 | 0.7277 |
rapid_release, removed_within_window, repo_doesnt_exist
|
2026-06-30 15:19 | |
| PyPI | langchain-agentx-python | 1.6.4 | 0.8333 |
rapid_release, typosquat, repo_doesnt_exist
|
2026-06-30 07:53 | |
| PyPI | legit-api-client | 1.1.4998 | 0.9 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-30 04:54 | |
| PyPI | rpds-py | 2026.5.1 | 0.95 |
shared_repo_different_publisher, repo_doesnt_exist
|
Julian Berman <Julian+rpds@GrayVines.com> | 2026-06-30 02:15 |
| npm | @autofleet/zehut | 4.13.6 | 0.9667 |
maintainer_churn, shared_repo_different_publisher, repo_doesnt_exist
|
jaydatt-af | 2026-06-29 23:34 |
| npm | circle-ir-ai | 2.20.8 | 0.8333 |
typosquat, rapid_release, repo_doesnt_exist
|
2026-06-29 20:50 | |
| npm | @volo/cms-kit-pro.admin | 10.4.1 | 0.7667 |
dist_tag_anomaly, mass_publish_burst, repo_doesnt_exist
|
2026-06-29 19:41 | |
| npm | @volo/abp.aspnetcore.mvc.ui.theme.commercial | 10.4.1 | 0.7667 |
dist_tag_anomaly, mass_publish_burst, repo_doesnt_exist
|
2026-06-29 19:41 | |
| npm | @volo/abp.aspnetcore.components.server.leptontheme | 10.4.1 | 0.7667 |
dist_tag_anomaly, mass_publish_burst, repo_doesnt_exist
|
2026-06-29 19:41 | |
| npm | @oxyhq/core | 3.18.1 | 0.7879 |
rapid_release, dependency_added_unknown, repo_doesnt_exist
|
2026-06-29 19:26 | |
| PyPI | medicafe | 0.260629.1 | 0.7225 |
rapid_release, removed_within_window, repo_doesnt_exist
|
2026-06-29 12:00 | |
| npm | @opengov/ppf-backend-types | 1.143.0 | 0.8333 |
maintainer_churn, dist_tag_anomaly, repo_doesnt_exist
|
sgholve | 2026-06-29 08:55 |
| npm | @jira-deploy/core | 1.0.59 | 0.8341 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-29 04:20 | |
| PyPI | legit-api-client | 1.1.4993 | 0.9 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-29 03:14 | |
| PyPI | langchain-agentx-python | 1.5.8 | 0.8333 |
rapid_release, typosquat, repo_doesnt_exist
|
2026-06-29 01:21 | |
| PyPI | awsso | 0.6.2 | 0.8484 |
dormant_burst, superseded_quickly, removed_within_window, repo_doesnt_exist
|
2026-06-29 00:43 | |
| PyPI | aps-ai-beamline-controller | 0.0.69 | 0.7661 |
sdist_only_diff, license_changed, maintainer_email_changed, repo_doesnt_exist
|
"XSD-OPT Group @ APS-ANL" <lrebuffi@anl.gov>, Luca Rebuffi <lrebuffi@anl.gov> | 2026-06-27 18:05 |
| PyPI | foxinternalclient | 6.0.5 | 0.7053 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-27 17:19 | |
| PyPI | foxclient | 6.0.5 | 0.7053 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-27 17:19 | |
| PyPI | medicafe | 0.260627.1 | 0.7214 |
rapid_release, removed_within_window, repo_doesnt_exist, attestation_dropped
|
2026-06-26 20:37 | |
| npm | @se-studio/contentful-cms | 3.1.5 | 0.9 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-26 20:17 | |
| npm | @jira-deploy/core | 1.0.55 | 0.7896 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-26 14:28 | |
| PyPI | ksapi | 1.111.0 | 0.9 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-26 13:56 | |
| PyPI | corvinos | 0.9.40 | 0.7983 |
rapid_release, removed_within_window, repo_doesnt_exist
|
2026-06-26 13:50 | |
| npm | @tangle-network/sandbox-cli | 0.3.3 | 0.7 |
dist_tag_anomaly, dependency_added_unknown, repo_doesnt_exist
|
2026-06-26 13:24 | |
| PyPI | geoprepare | 0.6.278 | 0.7667 |
rapid_release, suspicious_classifier, repo_doesnt_exist
|
2026-06-26 12:06 | |
| npm | circle-ir-ai | 2.19.1 | 0.7667 |
typosquat, dependency_added_unknown, repo_doesnt_exist
|
2026-06-26 11:11 | |
| npm | @gscdump/contracts | 0.32.7 | 0.8709 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-26 10:45 | |
| npm | gscdump | 0.32.7 | 0.9 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-26 10:45 | |
| PyPI | dj-stripe | 2.11.0 | 0.7 |
requires_python_changed, maintainer_email_changed, typosquat, repo_doesnt_exist
|
Alexander Kavanaugh <alex@kavdev.io>, Jerome Leclanche <jerome@leclan.ch>, Abe Hanoka <abe@habet.dev> | 2026-06-26 08:20 |
| PyPI | medicafe | 0.260626.0 | 0.742 |
rapid_release, removed_within_window, repo_doesnt_exist
|
2026-06-25 20:34 | |
| PyPI | khy-os | 0.1.131 | 0.725 |
repository_url_changed, license_changed, rapid_release, repo_doesnt_exist
|
2026-06-25 20:33 | |
| PyPI | haka-playwright-engine | 1.3.181 | 0.7591 |
rapid_release, removed_within_window, typosquat, repo_doesnt_exist
|
2026-06-25 18:22 | |
| PyPI | ord | 1.12.0 | 0.771 |
repository_url_changed, maintainer_email_changed, rapid_release, repo_doesnt_exist
|
Vladimir Smirnov <volodya@brandshop.ru> | 2026-06-25 09:13 |
| PyPI | legit-api-client | 1.1.4981 | 0.9 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-25 04:08 |