Candidates
| eco | package | ver | score | signals | maint+ | seen ▼ |
|---|---|---|---|---|---|---|
| PyPI | langchain-agentx-python | 1.6.4 | 0.8333 |
rapid_release, typosquat, repo_doesnt_exist
|
2026-06-30 07:53 | |
| PyPI | legit-api-client | 1.1.4998 | 0.9 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-30 04:54 | |
| PyPI | nexus-agentos | 1.3.36 | 0.6286 |
requires_python_changed, new_dep_unknown, rapid_release, repo_doesnt_exist
|
2026-06-30 02:19 | |
| PyPI | rpds-py | 2026.5.1 | 0.95 |
shared_repo_different_publisher, repo_doesnt_exist
|
Julian Berman <Julian+rpds@GrayVines.com> | 2026-06-30 02:15 |
| npm | @autofleet/zehut | 4.13.6 | 0.9667 |
maintainer_churn, shared_repo_different_publisher, repo_doesnt_exist
|
jaydatt-af | 2026-06-29 23:34 |
| npm | @twin.org/trust-models | 0.9.0 | 0.5861 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, dependency_added_unknown, repo_doesnt_exist
|
2026-06-29 21:01 | |
| npm | circle-ir-ai | 2.20.8 | 0.8333 |
typosquat, rapid_release, repo_doesnt_exist
|
2026-06-29 20:50 | |
| npm | @twin.org/messaging-models | 0.9.0 | 0.6324 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, repo_doesnt_exist
|
2026-06-29 20:29 | |
| npm | @volo/cms-kit-pro.admin | 10.4.1 | 0.7667 |
dist_tag_anomaly, mass_publish_burst, repo_doesnt_exist
|
2026-06-29 19:41 | |
| npm | @volo/abp.aspnetcore.mvc.ui.theme.commercial | 10.4.1 | 0.7667 |
dist_tag_anomaly, mass_publish_burst, repo_doesnt_exist
|
2026-06-29 19:41 | |
| npm | @volo/abp.aspnetcore.components.server.leptontheme | 10.4.1 | 0.7667 |
dist_tag_anomaly, mass_publish_burst, repo_doesnt_exist
|
2026-06-29 19:41 | |
| npm | @oxyhq/core | 3.18.1 | 0.7879 |
rapid_release, dependency_added_unknown, repo_doesnt_exist
|
2026-06-29 19:26 | |
| npm | @twin.org/telemetry-models | 0.9.0 | 0.6446 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, repo_doesnt_exist
|
2026-06-29 18:12 | |
| npm | document360-writer | 0.5.65 | 0.6667 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-29 18:06 | |
| PyPI | geoprepare | 0.6.281 | 0.6667 |
new_dep_unknown, suspicious_classifier, repo_doesnt_exist
|
2026-06-29 17:47 | |
| npm | @twin.org/data-processing-models | 0.9.0 | 0.5736 |
dist_tag_anomaly, dependency_added_unknown, repo_doesnt_exist
|
2026-06-29 16:42 | |
| PyPI | fiche-ppi | 0.1.2.2 | 0.5645 |
repository_url_changed, maintainer_email_changed, rapid_release, repo_doesnt_exist
|
Youssef ZEROUAL <youssef.zeroual87@gmail.com> | 2026-06-29 16:06 |
| npm | @twin.org/background-task-models | 0.9.0 | 0.6698 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, repo_doesnt_exist
|
2026-06-29 15:33 | |
| PyPI | longlink | 0.1.36 | 0.6008 |
requires_python_changed, new_dep_unknown, repo_doesnt_exist, attestation_dropped
|
2026-06-29 12:31 | |
| PyPI | medicafe | 0.260629.1 | 0.7225 |
rapid_release, removed_within_window, repo_doesnt_exist
|
2026-06-29 12:00 | |
| PyPI | saasforge | 0.9.0 | 0.5629 |
rapid_release, yanked_recent, repo_doesnt_exist
|
2026-06-29 10:12 | |
| npm | @opengov/ppf-backend-types | 1.143.0 | 0.8333 |
maintainer_churn, dist_tag_anomaly, repo_doesnt_exist
|
sgholve | 2026-06-29 08:55 |
| npm | kb-cloud-client-typescript | 0.0.0-ava-inspection-saved-days-cleanup.20260629.1324 | 0.5598 |
dist_tag_anomaly, repo_doesnt_exist
|
2026-06-29 08:29 | |
| npm | @jira-deploy/core | 1.0.59 | 0.8341 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-29 04:20 | |
| PyPI | legit-api-client | 1.1.4993 | 0.9 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-29 03:14 | |
| PyPI | langchain-agentx-python | 1.5.8 | 0.8333 |
rapid_release, typosquat, repo_doesnt_exist
|
2026-06-29 01:21 | |
| PyPI | awsso | 0.6.2 | 0.8484 |
dormant_burst, superseded_quickly, removed_within_window, repo_doesnt_exist
|
2026-06-29 00:43 | |
| PyPI | haka-playwright-engine | 1.3.185 | 0.6447 |
removed_within_window, typosquat, repo_doesnt_exist
|
2026-06-28 22:15 | |
| PyPI | aps-beamline-driver | 1.0.49 | 0.6386 |
license_changed, maintainer_email_changed, repo_doesnt_exist
|
"XSD-OPT Group @ APS-ANL" <lrebuffi@anl.gov>, Luca Rebuffi <lrebuffi@anl.gov> | 2026-06-28 09:48 |
| PyPI | aps-common-libraries | 1.0.50 | 0.6471 |
license_changed, maintainer_email_changed, repo_doesnt_exist
|
"XSD-OPT Group @ APS-ANL" <lrebuffi@anl.gov>, Luca Rebuffi <lrebuffi@anl.gov> | 2026-06-28 09:47 |
| PyPI | arc-devkit | 0.4.3 | 0.6068 |
repository_url_changed, maintainer_email_changed, repo_doesnt_exist
|
Jeielsantosdev <jeielsantos.ti@gmail.com> | 2026-06-28 07:13 |
| PyPI | pygeovision | 2.0.6 | 0.5308 |
repository_url_changed, new_dep_unknown, repo_doesnt_exist
|
2026-06-28 03:51 | |
| PyPI | deepseek-agent-2026 | 3.2.0 | 0.5069 |
superseded_quickly, removed_within_window, repo_doesnt_exist
|
2026-06-27 21:40 | |
| PyPI | crprotocol | 4.1.1 | 0.5133 |
repository_url_changed, new_dep_unknown, repo_doesnt_exist
|
2026-06-27 20:31 | |
| PyPI | aps-ai-beamline-controller | 0.0.69 | 0.7661 |
sdist_only_diff, license_changed, maintainer_email_changed, repo_doesnt_exist
|
"XSD-OPT Group @ APS-ANL" <lrebuffi@anl.gov>, Luca Rebuffi <lrebuffi@anl.gov> | 2026-06-27 18:05 |
| PyPI | foxinternalclient | 6.0.5 | 0.7053 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-27 17:19 | |
| PyPI | foxclient | 6.0.5 | 0.7053 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-27 17:19 | |
| PyPI | tau-sim | 0.2.4 | 0.5549 |
new_dep_unknown, rapid_release, repo_doesnt_exist
|
2026-06-27 12:36 | |
| PyPI | toolatlas-mcp | 3.0.0 | 0.6282 |
new_dep_unknown, rapid_release, repo_doesnt_exist
|
2026-06-27 12:35 | |
| PyPI | jangada-ai | 0.33.0 | 0.6891 |
new_dep_unknown, rapid_release, repo_doesnt_exist
|
2026-06-27 11:55 | |
| PyPI | svg2many | 0.7.4 | 0.5226 |
rapid_release, removed_within_window, repo_doesnt_exist
|
2026-06-27 11:16 | |
| PyPI | fsa-food-safety-mcp | 1.0.10 | 0.5719 |
mass_publish_burst, typosquat, repo_doesnt_exist
|
2026-06-27 00:53 | |
| PyPI | pygeovision | 2.0.4 | 0.5462 |
new_dep_unknown, rapid_release, repo_doesnt_exist
|
2026-06-26 22:00 | |
| PyPI | medicafe | 0.260627.1 | 0.7214 |
rapid_release, removed_within_window, repo_doesnt_exist, attestation_dropped
|
2026-06-26 20:37 | |
| npm | @se-studio/contentful-cms | 3.1.5 | 0.9 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-26 20:17 | |
| npm | @proxy-checkout/client-js | 0.0.3 | 0.525 |
maintainer_churn, shared_repo_different_publisher, repo_doesnt_exist
|
cojo | 2026-06-26 16:56 |
| npm | kb-cloud-client-typescript | 2.3.0-alpha.136 | 0.6718 |
rapid_release, repo_doesnt_exist
|
2026-06-26 14:33 | |
| npm | @jira-deploy/core | 1.0.55 | 0.7896 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-26 14:28 | |
| PyPI | ksapi | 1.111.0 | 0.9 |
rapid_release, shared_repo_different_publisher, repo_doesnt_exist
|
2026-06-26 13:56 | |
| PyPI | corvinos | 0.9.40 | 0.7983 |
rapid_release, removed_within_window, repo_doesnt_exist
|
2026-06-26 13:50 |