Candidates
| eco | package | ver | score | signals | maint+ | seen ▼ |
|---|---|---|---|---|---|---|
| npm | jest-react | 0.16.0 | 0.7 |
typosquat, dist_tag_anomaly, shared_repo_different_publisher
|
2026-07-30 11:43 | |
| PyPI | openinference-instrumentation-llama-index | 4.4.4 | 0.7123 |
mass_publish_burst, typosquat, attestation_dropped
|
2026-07-30 11:39 | |
| PyPI | openinference-instrumentation-langchain | 0.1.68 | 0.7137 |
mass_publish_burst, typosquat
|
2026-07-30 11:39 | |
| npm | quidproquo-web-react | 0.1.14 | 0.7364 |
typosquat, mass_publish_burst
|
2026-07-30 11:36 | |
| npm | create-cloudflare | 2.70.15 | 0.8 |
typosquat, shared_repo_different_publisher
|
2026-07-30 11:26 | |
| npm | react-horizontal-scrolling-menu | 8.2.2 | 0.85 |
typosquat, dormant_burst
|
2026-07-30 11:22 | |
| npm | react-horizontal-scrolling-menu | 8.2.2 | 0.85 |
typosquat, dormant_burst
|
2026-07-30 11:21 | |
| npm | eslint-plugin-rulvar | 1.121.0 | 0.775 |
typosquat, rapid_release, shared_repo_different_publisher, repo_too_new_for_version_history
|
2026-07-30 11:19 | |
| npm | datakeen-session-react | 1.1.180 | 0.7333 |
publisher_unrecognized, typosquat, mass_publish_burst
|
2026-07-30 11:15 | |
| PyPI | django-email-learning | 2.14.0 | 0.75 |
rapid_release, typosquat
|
2026-07-30 11:12 | |
| npm | cozy-ui-plus | 12.3.6 | 0.7001 |
typosquat, rapid_release
|
2026-07-30 11:10 | |
| npm | t3 | 0.0.31 | 0.75 |
typosquat, dist_tag_anomaly
|
2026-07-30 10:56 | |
| npm | clerk | 2.3.0 | 0.8 |
typosquat, dist_tag_anomaly, shared_repo_different_publisher
|
2026-07-30 10:46 | |
| npm | snyk-docker-plugin | 9.20.0 | 0.7 |
publisher_unrecognized, typosquat
|
2026-07-30 10:41 | |
| npm | clerk | 2.3.0 | 0.8 |
typosquat, dist_tag_anomaly, shared_repo_different_publisher
|
2026-07-30 10:36 | |
| npm | kritzel-react | 0.4.5 | 0.75 |
typosquat, rapid_release
|
2026-07-30 10:35 | |
| npm | eslint-plugin-rulvar | 1.121.0 | 0.775 |
typosquat, rapid_release, shared_repo_different_publisher, repo_too_new_for_version_history
|
2026-07-30 10:30 | |
| npm | metascraper-url | 5.53.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-title | 5.52.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-uol | 5.53.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-youtube | 5.52.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-readability | 5.53.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-media-provider | 5.52.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-publisher | 5.52.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-lang | 5.52.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-soundcloud | 5.53.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-manifest | 5.53.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-spotify | 5.53.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-telegram | 5.53.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-author | 5.52.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-description | 5.53.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-iframe | 5.53.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-logo | 5.52.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-image | 5.53.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-amazon | 5.52.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-logo-favicon | 5.52.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-audio | 5.52.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-feed | 5.52.0 | 0.7257 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-date | 5.52.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | metascraper-instagram | 5.53.0 | 0.75 |
typosquat, mass_publish_burst
|
2026-07-30 10:08 | |
| npm | sb | 10.5.5 | 0.8 |
typosquat, dist_tag_anomaly, shared_repo_different_publisher
|
2026-07-30 10:00 | |
| PyPI | passagemath-gap-pkg-curlinterface | 10.8.7 | 0.7094 |
mass_publish_burst, typosquat
|
2026-07-30 09:59 | |
| PyPI | passagemath-gap-pkg-cddinterface | 10.8.7 | 0.7079 |
mass_publish_burst, typosquat
|
2026-07-30 09:58 | |
| npm | react-relay | 21.0.1 | 0.8 |
typosquat, shared_repo_different_publisher
|
2026-07-30 09:55 | |
| npm | eslint-plugin-react-x | 5.18.1 | 0.8 |
typosquat, shared_repo_different_publisher
|
2026-07-30 09:44 | |
| npm | eslint-plugin-react-rsc | 5.18.1 | 0.8 |
typosquat, shared_repo_different_publisher
|
2026-07-30 09:44 | |
| npm | eslint-plugin-react-jsx | 5.18.0 | 0.8 |
typosquat, shared_repo_different_publisher
|
2026-07-30 09:43 | |
| npm | eslint-plugin-react-debug | 5.18.1 | 0.8 |
typosquat, shared_repo_different_publisher
|
2026-07-30 09:43 | |
| PyPI | bowtie-json-schema | 2026.7.4 | 0.8 |
shared_repo_different_publisher, typosquat, attestation_dropped
|
2026-07-30 09:40 | |
| npm | corsa-oxlint | 1.3.0 | 0.7414 |
typosquat, shared_repo_different_publisher
|
2026-07-30 09:38 |