Candidates
| eco | package | ver | score | signals | maint+ | seen ▼ |
|---|---|---|---|---|---|---|
| npm | oh-my-openagent-linux-x64 | 4.19.0 | 0.7432 |
typosquat, shared_repo_different_publisher
|
2026-07-22 08:04 | |
| npm | oh-my-openagent-darwin-x64 | 4.19.0 | 0.745 |
typosquat, shared_repo_different_publisher
|
2026-07-22 08:04 | |
| npm | hermes-client-typescript | 1.8.79 | 0.75 |
typosquat, rapid_release
|
2026-07-22 07:53 | |
| PyPI | pulpcore-client | 3.115.2 | 0.8 |
rapid_release, shared_repo_different_publisher, typosquat
|
2026-07-22 07:51 | |
| PyPI | pulp-file-client | 3.115.2 | 0.8 |
rapid_release, shared_repo_different_publisher, typosquat
|
2026-07-22 07:51 | |
| PyPI | pulpcore | 3.115.2 | 0.7667 |
rapid_release, typosquat, attestation_dropped
|
2026-07-22 07:51 | |
| PyPI | pulp-certguard-client | 3.115.2 | 0.8 |
rapid_release, shared_repo_different_publisher, typosquat
|
2026-07-22 07:51 | |
| npm | gm-skill | 2.0.2057 | 0.75 |
typosquat, rapid_release
|
2026-07-22 07:46 | |
| npm | snyk-mvn-plugin | 4.9.0 | 0.7 |
publisher_unrecognized, typosquat
|
2026-07-22 07:32 | |
| npm | gm-skill | 2.0.2056 | 0.75 |
typosquat, rapid_release
|
2026-07-22 07:25 | |
| PyPI | daytona-toolbox-api-client | 0.200.1 | 0.775 |
mass_publish_burst, shared_repo_different_publisher, typosquat, repo_too_new_for_version_history
|
2026-07-22 07:23 | |
| PyPI | daytona-toolbox-api-client-async | 0.200.1 | 0.775 |
mass_publish_burst, shared_repo_different_publisher, typosquat, repo_too_new_for_version_history
|
2026-07-22 07:23 | |
| PyPI | pyserialsensors | 0.17.3 | 0.749 |
superseded_quickly, removed_within_window, typosquat
|
2026-07-22 07:14 | |
| npm | apify-cli | 1.7.1 | 0.8833 |
install_script_payload, typosquat, dist_tag_anomaly
|
2026-07-22 06:58 | |
| PyPI | pyserialsensors | 0.17.1 | 0.7514 |
superseded_quickly, removed_within_window, typosquat
|
2026-07-22 06:56 | |
| npm | gm-skill | 2.0.2056 | 0.75 |
typosquat, rapid_release
|
2026-07-22 06:54 | |
| npm | gm-skill | 2.0.2054 | 0.75 |
typosquat, rapid_release
|
2026-07-22 06:53 | |
| npm | prisma-next | 0.16.0 | 0.8 |
typosquat, shared_repo_different_publisher
|
2026-07-22 06:38 | |
| npm | hermes-client-typescript | 1.8.78 | 0.75 |
typosquat, rapid_release
|
2026-07-22 06:37 | |
| npm | eslint-plugin-react-doctor | 0.8.3 | 0.7667 |
typosquat, shared_repo_different_publisher, repo_too_new_for_version_history
|
2026-07-22 06:24 | |
| npm | seo | 0.2.22 | 0.7283 |
typosquat, rapid_release, repo_too_new_for_version_history
|
2026-07-22 06:20 | |
| PyPI | pyserialsensors | 0.17.2.post3 | 0.7213 |
removed_within_window, typosquat
|
2026-07-22 06:09 | |
| npm | t3 | 0.0.28 | 0.75 |
typosquat, dist_tag_anomaly
|
2026-07-22 06:01 | |
| npm | datakeen-session-react | 1.1.179 | 0.7 |
publisher_unrecognized, typosquat
|
2026-07-22 06:00 | |
| npm | run402-mcp | 4.10.2 | 0.7667 |
typosquat, shared_repo_different_publisher, repo_too_new_for_version_history
|
2026-07-22 05:46 | |
| npm | eslint-plugin-react-doctor | 0.8.3 | 0.7667 |
typosquat, shared_repo_different_publisher, repo_too_new_for_version_history
|
2026-07-22 05:43 | |
| npm | auth | 1.6.23 | 0.7567 |
typosquat, dist_tag_anomaly, shared_repo_different_publisher
|
2026-07-22 05:33 | |
| npm | stream-chat-react | 14.10.0 | 0.9167 |
install_script_payload, typosquat, dependency_added_unknown
|
2026-07-22 05:26 | |
| npm | efiber-prisma-schema | 2.4.0 | 0.7667 |
typosquat, dependency_added_unknown, repo_doesnt_exist
|
2026-07-22 05:23 | |
| npm | eslint-config-next | 16.2.11 | 0.7 |
typosquat, dist_tag_anomaly, shared_repo_different_publisher
|
2026-07-22 05:20 | |
| npm | gm-skill | 2.0.2053 | 0.75 |
typosquat, rapid_release
|
2026-07-22 05:09 | |
| npm | prisma-next | 0.16.0 | 0.8 |
typosquat, shared_repo_different_publisher
|
2026-07-22 04:59 | |
| npm | rumdl-wasm | 0.2.40 | 0.8 |
typosquat, shared_repo_different_publisher
|
2026-07-22 04:48 | |
| npm | gm-skill | 2.0.2052 | 0.75 |
typosquat, rapid_release
|
2026-07-22 04:41 | |
| npm | react-session.manager.sk | 3.1.13 | 0.7079 |
typosquat, rapid_release
|
2026-07-22 04:37 | |
| npm | prisma-next | 0.16.0 | 0.8 |
typosquat, shared_repo_different_publisher
|
2026-07-22 04:34 | |
| npm | react-magma-dom | 5.1.0 | 0.7 |
typosquat, dist_tag_anomaly, shared_repo_different_publisher
|
2026-07-22 04:31 | |
| npm | homebridge-cmd4-advantageair | 3.12.1 | 0.7428 |
typosquat, dormant_burst
|
2026-07-22 04:27 | |
| npm | gm-skill | 2.0.2051 | 0.75 |
typosquat, rapid_release
|
2026-07-22 04:26 | |
| npm | hermes-client-typescript | 1.8.77 | 0.75 |
typosquat, rapid_release
|
2026-07-22 04:25 | |
| PyPI | pyserialsensors | 0.17.2.post1 | 0.7514 |
superseded_quickly, removed_within_window, typosquat
|
2026-07-22 04:24 | |
| PyPI | trustgraph-vertexai | 2.7.11 | 0.75 |
mass_publish_burst, typosquat
|
2026-07-22 04:23 | |
| PyPI | trustgraph-unstructured | 2.7.11 | 0.75 |
mass_publish_burst, typosquat
|
2026-07-22 04:23 | |
| npm | gm-skill | 2.0.2051 | 0.75 |
typosquat, rapid_release
|
2026-07-22 04:19 | |
| npm | eslint-plugin-react-doctor | 0.8.3 | 0.7667 |
typosquat, shared_repo_different_publisher, repo_too_new_for_version_history
|
2026-07-22 04:16 | |
| npm | tailwindcss-react-aria-components | 2.2.0 | 0.725 |
typosquat, dist_tag_anomaly, mass_publish_burst, shared_repo_different_publisher
|
2026-07-22 04:11 | |
| npm | datakeen-session-react | 1.1.179 | 0.7 |
publisher_unrecognized, typosquat
|
2026-07-22 04:10 | |
| npm | react-aria-components | 1.19.0 | 0.725 |
typosquat, dist_tag_anomaly, mass_publish_burst, shared_repo_different_publisher
|
2026-07-22 04:08 | |
| npm | react-aria | 3.50.0 | 0.8 |
typosquat, mass_publish_burst, shared_repo_different_publisher
|
2026-07-22 04:06 | |
| npm | react-stately | 3.48.0 | 0.8 |
typosquat, mass_publish_burst, shared_repo_different_publisher
|
2026-07-22 04:05 |