Candidates
| eco | package | ver | score | signals | maint+ | seen ▼ |
|---|---|---|---|---|---|---|
| npm | expo-system-ui | 58.0.7 | 0.875 |
maintainer_churn, shared_repo_different_publisher, repository_url_changed, script_count_spike
|
ccheever, szdziedzic | 2026-11-06 01:06 |
| npm | sandbox | 4.11.1 | 0.7 |
shared_repo_different_publisher, osv_advisory_active
|
2026-11-06 01:06 | |
| npm | expo-camera | 58.0.14 | 0.875 |
maintainer_churn, shared_repo_different_publisher, repository_url_changed, script_count_spike
|
ccheever, szdziedzic | 2026-11-06 01:06 |
| npm | assistant-stream | 0.3.55 | 0.7986 |
maintainer_churn, shared_repo_different_publisher, script_count_spike
|
okisdev | 2026-11-06 01:06 |
| npm | @assistant-ui/react | 0.15.32 | 0.9441 |
maintainer_churn, shared_repo_different_publisher
|
okisdev | 2026-11-06 01:06 |
| npm | @assistant-ui/core | 0.3.32 | 0.9421 |
maintainer_churn, shared_repo_different_publisher
|
okisdev | 2026-11-06 01:06 |
| npm | assistant-cloud | 0.2.9 | 0.7194 |
maintainer_churn, shared_repo_different_publisher, script_count_spike, size_spike
|
okisdev | 2026-11-06 01:06 |
| npm | @azure/keyvault-secrets | 4.12.0 | 0.8431 |
mass_publish_burst, shared_repo_different_publisher
|
azure-sdk, microsoft-oss-releases, microsoft1es | 2026-11-06 01:06 |
| npm | @amplitude/targeting | 0.3.11 | 0.6813 |
dist_tag_anomaly, shared_repo_different_publisher
|
2026-11-06 01:06 | |
| npm | @bytecodealliance/preview2-shim | 0.31.0 | 0.8333 |
maintainer_churn, shared_repo_different_publisher, dependency_added_unknown
|
rvolosatovs | 2026-11-06 01:06 |
| npm | @whatwg-node/node-fetch | 0.9.3 | 0.7 |
dist_tag_anomaly, shared_repo_different_publisher
|
2026-11-06 01:06 | |
| npm | @tabler/icons-react | 3.50.0 | 0.95 |
maintainer_churn, shared_repo_different_publisher
|
bartosz-do | 2026-11-06 01:06 |
| npm | @tabler/icons | 3.50.0 | 0.95 |
maintainer_churn, shared_repo_different_publisher
|
bartosz-do | 2026-11-06 01:06 |
| npm | @react-native/assets-registry | 0.88.1 | 0.7 |
dist_tag_anomaly, shared_repo_different_publisher
|
2026-11-06 01:06 | |
| npm | expo-web-browser | 58.0.7 | 0.9667 |
maintainer_churn, shared_repo_different_publisher, repository_url_changed
|
ccheever, szdziedzic | 2026-11-06 01:06 |
| npm | @lovable.dev/vite-tanstack-config | 2.27.0 | 0.7 |
shared_repo_different_publisher, size_spike
|
2026-11-06 01:06 | |
| npm | @preact/signals-core | 1.14.5 | 0.8 |
shared_repo_different_publisher, repository_url_changed
|
2026-11-06 01:06 | |
| npm | @appium/types | 1.7.2 | 0.8 |
maintainer_churn, dist_tag_anomaly, shared_repo_different_publisher
|
eglitise | 2026-11-06 01:06 |
| npm | @metamask/utils | 12.0.1 | 0.9 |
maintainer_churn, shared_repo_different_publisher, repository_url_changed, dependency_added_unknown
|
frederikbolding | 2026-11-06 01:06 |
| npm | @appium/schema | 1.3.0 | 0.8 |
maintainer_churn, dist_tag_anomaly, shared_repo_different_publisher
|
eglitise | 2026-11-06 01:05 |
| npm | @whatwg-node/server | 0.13.2 | 0.7 |
dist_tag_anomaly, shared_repo_different_publisher
|
2026-11-06 01:05 | |
| npm | vitepress | 1.6.4 | 0.6833 |
dist_tag_anomaly, shared_repo_different_publisher
|
antfu, brc-dd, kiaking, posva, yyx990803 | 2026-11-06 01:05 |
| npm | react-hook-form | 7.91.0 | 0.7 |
dist_tag_anomaly, shared_repo_different_publisher
|
2026-11-06 01:05 | |
| npm | expo-server | 58.0.6 | 0.9667 |
maintainer_churn, shared_repo_different_publisher, repository_url_changed
|
ccheever, szdziedzic | 2026-11-06 01:05 |
| npm | @modelcontextprotocol/core | 2.4.0 | 0.65 |
shared_repo_different_publisher, license_changed
|
2026-11-06 01:05 | |
| npm | @modelcontextprotocol/server | 2.4.0 | 0.65 |
shared_repo_different_publisher, license_changed
|
2026-11-06 01:05 | |
| npm | @modelcontextprotocol/client | 2.4.0 | 0.65 |
shared_repo_different_publisher, license_changed
|
2026-11-06 01:05 | |
| npm | @modelcontextprotocol/node | 2.1.2 | 0.65 |
shared_repo_different_publisher, license_changed
|
2026-11-06 01:05 | |
| npm | @semantic-release/commit-analyzer | 13.0.1 | 0.8 |
maintainer_churn, dist_tag_anomaly, shared_repo_different_publisher
|
babblebey | 2026-11-06 01:05 |
| npm | eslint-plugin-unicorn | 79.0.0 | 0.85 |
mass_publish_burst, shared_repo_different_publisher
|
2026-11-06 01:05 | |
| npm | webpack | 5.112.2 | 0.7 |
shared_repo_different_publisher, script_count_spike
|
2026-11-06 01:05 | |
| npm | execa | 10.2.1 | 0.85 |
mass_publish_burst, shared_repo_different_publisher
|
ehmicky, sindresorhus | 2026-11-06 01:05 |
| npm | @fal-ai/client | 1.10.1 | 0.6897 |
dist_tag_anomaly, shared_repo_different_publisher
|
2026-11-06 01:05 | |
| npm | node-pty | 1.1.0 | 0.8 |
new_install_script, dist_tag_anomaly, mass_publish_burst, shared_repo_different_publisher
|
alexandrudima, lszomoru, microsoft-oss-releases, microsoft1es, vscode-bot | 2026-11-06 01:05 |
| npm | @tanstack/form-core | 1.33.5 | 0.7 |
dist_tag_anomaly, shared_repo_different_publisher
|
2026-11-06 01:05 | |
| npm | @tanstack/react-form | 1.33.5 | 0.7 |
dist_tag_anomaly, shared_repo_different_publisher
|
2026-11-06 01:05 | |
| npm | @google-cloud/firestore | 9.4.0 | 0.85 |
mass_publish_burst, shared_repo_different_publisher
|
2026-11-06 01:05 | |
| npm | @effect/platform | 0.97.2 | 0.6932 |
dist_tag_anomaly, shared_repo_different_publisher
|
2026-11-06 01:05 | |
| npm | @langchain/anthropic | 1.6.0 | 0.6865 |
dist_tag_anomaly, shared_repo_different_publisher
|
2026-11-06 01:05 | |
| npm | @amplitude/rrweb-types | 2.1.5 | 0.944 |
maintainer_churn, shared_repo_different_publisher
|
eric_amplitude | 2026-11-06 01:05 |
| npm | chrome-devtools-mcp | 1.12.0 | 0.6937 |
shared_repo_different_publisher, script_count_spike
|
2026-11-06 01:05 | |
| npm | ts-loader | 9.6.2 | 0.7 |
dist_tag_anomaly, shared_repo_different_publisher
|
2026-11-06 01:05 | |
| npm | multer | 2.5.0 | 0.7 |
dist_tag_anomaly, shared_repo_different_publisher
|
2026-11-06 01:05 | |
| npm | prosemirror-markdown | 1.13.9 | 0.85 |
mass_publish_burst, shared_repo_different_publisher
|
marijn | 2026-11-06 01:05 |
| npm | source-map | 0.8.0 | 0.95 |
maintainer_churn, shared_repo_different_publisher
|
bgrant_mozilla | 2026-11-06 01:04 |
| npm | @orpc/interop | 1.16.1 | 0.6863 |
dist_tag_anomaly, shared_repo_different_publisher
|
2026-11-06 01:04 | |
| npm | @bufbuild/buf | 1.75.0 | 0.9463 |
maintainer_churn, shared_repo_different_publisher
|
cmahony, kmcdonald-buf | 2026-11-06 01:04 |
| npm | @bufbuild/buf-linux-x64 | 1.75.0 | 0.9393 |
maintainer_churn, shared_repo_different_publisher
|
cmahony, kmcdonald-buf | 2026-11-06 01:04 |
| npm | @composio/json-schema-to-zod | 0.4.0 | 0.925 |
maintainer_churn, shared_repo_different_publisher
|
shamsharoon | 2026-11-06 01:04 |
| npm | firebase-admin | 14.5.0 | 0.9 |
maintainer_churn, mass_publish_burst, shared_repo_different_publisher
|
ajp.google, lahirumaramba.google | 2026-11-06 01:04 |