Candidates
| eco | package | ver | score | signals | maint+ | seen ▼ |
|---|---|---|---|---|---|---|
| PyPI | mcp-test-harness-huggingface | 3.0.8 | 0.5769 |
mass_publish_burst, typosquat
|
2026-07-21 02:18 | |
| PyPI | mcp-test-harness-openai | 3.0.8 | 0.5769 |
mass_publish_burst, typosquat
|
2026-07-21 02:18 | |
| PyPI | mcp-test-harness-groq | 3.0.8 | 0.5769 |
mass_publish_burst, typosquat
|
2026-07-21 02:18 | |
| PyPI | mcp-test-harness-cohere | 3.0.8 | 0.5769 |
mass_publish_burst, typosquat
|
2026-07-21 02:18 | |
| PyPI | mcp-test-harness-crewai | 3.0.8 | 0.5769 |
mass_publish_burst, typosquat
|
2026-07-21 02:18 | |
| PyPI | mcp-test-harness-anthropic | 3.0.8 | 0.5769 |
mass_publish_burst, typosquat
|
2026-07-21 02:18 | |
| PyPI | mcp-test-harness-fastmcp | 3.0.8 | 0.5769 |
mass_publish_burst, typosquat
|
2026-07-21 02:18 | |
| npm | react-native-turbo-image-picker | 1.1.17 | 0.5506 |
typosquat, rapid_release
|
2026-07-21 02:16 | |
| npm | react-native-turbo-image-picker | 1.1.16 | 0.5343 |
typosquat, rapid_release
|
2026-07-21 02:09 | |
| npm | homebridge-config-ui-x | 5.27.0 | 0.6 |
typosquat, dist_tag_anomaly
|
2026-07-21 02:00 | |
| PyPI | dataface | 0.2.0 | 0.5316 |
no_repo, typosquat, depsdev_no_source_repo, attestation_dropped
|
2026-07-21 01:58 | |
| npm | gm-skill | 2.0.2035 | 0.75 |
typosquat, rapid_release
|
2026-07-21 01:57 | |
| npm | qa-agent-skill | 0.2.8 | 0.5133 |
typosquat, rapid_release, repo_too_new_for_version_history
|
2026-07-21 01:56 | |
| npm | 60p82u21t54k | 1.3.57 | 0.65 |
no_repo, typosquat
|
2026-07-21 01:55 | |
| PyPI | crewai-cli | 1.15.5 | 0.7855 |
shared_repo_different_publisher, typosquat
|
2026-07-21 01:53 | |
| PyPI | crewai-core | 1.15.5 | 0.7855 |
shared_repo_different_publisher, typosquat
|
2026-07-21 01:53 | |
| PyPI | crewai-files | 1.15.5 | 0.5 |
no_repo, typosquat, depsdev_no_source_repo
|
2026-07-21 01:53 | |
| npm | eslint-plugin-react-doctor | 0.8.1 | 0.7667 |
typosquat, shared_repo_different_publisher, repo_too_new_for_version_history
|
2026-07-21 01:49 | |
| npm | react-native-turbo-image-picker | 1.1.14 | 0.5343 |
typosquat, rapid_release
|
2026-07-21 01:44 | |
| PyPI | django-cfg | 2.2.106 | 0.75 |
rapid_release, typosquat
|
2026-07-21 01:39 | |
| npm | babel-plugin-transform-react-jsx-to-rn-stylesheet | 4.2.1 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-21 01:39 | |
| npm | eslint-plugin-taro | 4.2.1 | 0.8 |
typosquat, mass_publish_burst, shared_repo_different_publisher
|
2026-07-21 01:39 | |
| npm | eslint-config-taro | 4.2.1 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-21 01:39 | |
| npm | taro-css-to-react-native | 4.2.1 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-21 01:39 | |
| npm | qa-agent-skill | 0.2.7 | 0.5033 |
typosquat, rapid_release, repo_too_new_for_version_history
|
2026-07-21 01:33 | |
| npm | eslint-config-innovorder-v2 | 2.2901.0 | 0.575 |
no_repo, typosquat, rapid_release, depsdev_no_source_repo
|
2026-07-21 01:31 | |
| npm | slint-ui-dev | 1.17.1 | 0.5932 |
typosquat, dist_tag_anomaly, shared_repo_different_publisher
|
2026-07-21 01:30 | |
| PyPI | semantic-link-functions-geopandas | 0.14.1 | 0.6762 |
mass_publish_burst, typosquat
|
2026-07-21 01:28 | |
| PyPI | semantic-link-functions-holidays | 0.14.1 | 0.6762 |
mass_publish_burst, typosquat
|
2026-07-21 01:28 | |
| PyPI | semantic-link-functions-validators | 0.14.2 | 0.6741 |
mass_publish_burst, typosquat
|
2026-07-21 01:28 | |
| PyPI | semantic-link-functions-phonenumbers | 0.14.1 | 0.6741 |
mass_publish_burst, typosquat
|
2026-07-21 01:28 | |
| PyPI | airbyte-source-google-drive | 0.5.25 | 0.7767 |
shared_repo_different_publisher, typosquat
|
2026-07-21 01:27 | |
| npm | gm-skill | 2.0.2035 | 0.75 |
typosquat, rapid_release
|
2026-07-21 01:20 | |
| npm | react-native-turbo-image-picker | 1.1.14 | 0.5147 |
typosquat, rapid_release
|
2026-07-21 01:11 | |
| npm | react-native-turbo-image-picker | 1.1.12 | 0.5147 |
typosquat, rapid_release
|
2026-07-21 01:09 | |
| npm | react-native-turbo-image-picker | 1.1.12 | 0.5032 |
typosquat, rapid_release
|
2026-07-21 01:02 | |
| PyPI | polars-baseball | 0.7.4 | 0.5506 |
rapid_release, typosquat, repo_too_new_for_version_history, attestation_dropped
|
2026-07-21 01:01 | |
| npm | gm-skill | 2.0.2034 | 0.75 |
typosquat, rapid_release
|
2026-07-21 00:59 | |
| npm | ancoder-skill-cli | 0.13.39 | 0.7108 |
typosquat, dist_tag_anomaly, repo_doesnt_exist
|
2026-07-21 00:57 | |
| PyPI | pydantic-ai-examples | 2.14.1 | 0.6 |
no_repo, typosquat, attestation_dropped
|
2026-07-21 00:42 | |
| PyPI | dv-schema-models | 0.6.0 | 0.5455 |
rapid_release, typosquat, repo_too_new_for_version_history
|
2026-07-21 00:38 | |
| npm | react-core-ts | 4.0.4 | 0.7 |
typosquat, rapid_release, commit_cadence_mismatch
|
2026-07-21 00:32 | |
| PyPI | fastapi-mongo-base | 1.7.0 | 0.6 |
new_dep_unknown, typosquat
|
2026-07-21 00:30 | |
| npm | eslint-plugin-react-doctor | 0.8.1 | 0.7667 |
typosquat, shared_repo_different_publisher, repo_too_new_for_version_history
|
2026-07-21 00:30 | |
| PyPI | langchain-agentx-python | 2.1.8 | 0.8333 |
rapid_release, typosquat, repo_doesnt_exist
|
2026-07-21 00:27 | |
| npm | create-zuplo-api | 6.73.5 | 0.8 |
typosquat, rapid_release, shared_repo_different_publisher
|
2026-07-21 00:17 | |
| PyPI | dv-schema-models | 0.6.0 | 0.5384 |
rapid_release, typosquat, repo_too_new_for_version_history
|
2026-07-21 00:12 | |
| npm | eslint-config-innovorder-v2 | 2.2900.0 | 0.575 |
no_repo, typosquat, rapid_release, depsdev_no_source_repo
|
2026-07-21 00:12 | |
| npm | react-native | 0.86.0 | 0.675 |
typosquat, dist_tag_anomaly, version_jump, shared_repo_different_publisher
|
2026-07-20 23:51 | |
| npm | nice-react-button | 9.1.0 | 0.6093 |
typosquat, mass_publish_burst, dependency_added_unknown
|
2026-07-20 23:50 |