{"since":"2026-10-27","updated_at":"2026-10-31T08:12:19.730668+00:00","totals":{"versions":357850,"scanned":75036,"flagged":7712},"daily":[{"day":"2026-10-27","versions":53458,"scanned":8289,"flagged":307},{"day":"2026-10-28","versions":101986,"scanned":15163,"flagged":729},{"day":"2026-10-29","versions":84214,"scanned":15164,"flagged":697},{"day":"2026-10-30","versions":96049,"scanned":29796,"flagged":5143,"lg_scored":19898,"lg_flagged":115},{"day":"2026-10-31","versions":22143,"scanned":6624,"flagged":836}],"confirmed_packages":16,"confirmed_versions":39,"median_publish_to_flag_min":1.3821519083333333,"flagged_before_public_report":16,"median_lead_over_public_min":1198.7700570583334,"investigator":{"suspicious":149,"benign":1000,"malicious":31},"live_recall":{"at":"2026-10-31T07:16:24.884100+00:00","since":"2026-10-27T14:02:29+00:00","in_scope":25,"flagged":15,"missed":8,"not_seen":2,"no_code":7,"before_monitor":86,"recall":0.6,"flagged_before_osv":15,"median_lead_over_osv_min":1349.4037734166666,"median_publish_to_flag_min":1.2619904833333335,"current":{"since":"2026-10-30T11:05:00+00:00","in_scope":0,"flagged":0,"missed":0,"not_seen":0,"no_code":0,"before_monitor":0,"recall":null,"flagged_before_osv":0,"median_lead_over_osv_min":null,"median_publish_to_flag_min":null}},"recall_misses":[{"id":"MAL-2026-18346","name":"agentenact","published_at":"2026-10-27T20:17:56.105000+00:00","detail":"metadata only, score 1: archive not downloaded"},{"id":"MAL-2026-18355","name":"glyphmatrix-fixture","published_at":"2026-10-28T00:18:14.594000+00:00","detail":"archive scanned, score 2 (metadata 2, code 0); not sent to a model"},{"id":"MAL-2026-18365","name":"b20miner","published_at":"2026-10-28T21:59:25.350000+00:00","detail":"metadata only, score 1: archive not downloaded"},{"id":"MAL-2026-18366","name":"dsh-redteam-mode","published_at":"2026-10-28T07:48:05.411000+00:00","detail":"metadata only, score 0: archive not downloaded"},{"id":"MAL-2026-18374","name":"dsh-volcengine-provider","published_at":"2026-10-27T18:20:40.804000+00:00","detail":"archive scanned, score 1 (metadata 1, code 0); not sent to a model"},{"id":"MAL-2026-18358","name":"@testsecuiitytestme/cache-helper","published_at":"2026-10-27T12:28:25.576000+00:00","detail":"archive scanned, score 5 (metadata 5, code 0); not sent to a model"},{"id":"MAL-2026-18394","name":"react-native-drago-callkit","published_at":"2026-10-28T18:40:19.337000+00:00","detail":"archive scanned, score 8 (metadata 4, code 4); not sent to a model"},{"id":"MAL-2026-18393","name":"orderbook-volt-plugin","published_at":"2026-10-28T21:03:21.150000+00:00","detail":"archive scanned, score 5 (metadata 5, code 0); not sent to a model"},{"id":"MAL-2026-18407","name":"@nexlayerlabs/postcss-keyframe-utils","published_at":"2026-10-29T19:38:57.890000+00:00","detail":"npm published 2026-10-29T19:38"},{"id":"MAL-2026-18415","name":"@tops2/digital-assistant-ui","published_at":null,"detail":"osv published 2026-10-30T18:06:15Z"}],"catches":[{"name":"@webapp-shared/login-vmok","version":"1.0.0","published_at":"2026-10-27T17:08:24.838000+00:00","flagged_at":"2026-10-27T17:09:40.557429+00:00","earliest_public":"2026-10-28T06:15:56Z","osv_ids":["MAL-2026-18356"],"ghsa_ids":["GHSA-cmqx-q58q-9m8p"],"npm_takedown_at":null,"publish_to_flag_min":1.2619904833333335,"lead_over_public_min":786.2573761833333,"model_verdicts":{"spark":"malicious","glimmer-local":"malicious","spark-open-fireworks":"malicious"},"review":null,"ledger_digest":null},{"name":"@webapp-shared/login-vmok","version":"99.0.1","published_at":"2026-10-27T17:08:38.843000+00:00","flagged_at":"2026-10-27T17:09:40.557429+00:00","earliest_public":"2026-10-28T06:15:56Z","osv_ids":["MAL-2026-18356"],"ghsa_ids":["GHSA-cmqx-q58q-9m8p"],"npm_takedown_at":null,"publish_to_flag_min":1.0285738166666667,"lead_over_public_min":786.2573761833333,"model_verdicts":{"spark":"malicious","glimmer-local":"malicious","spark-open-fireworks":"malicious"},"review":null,"ledger_digest":null},{"name":"@webapp-shared/login-vmok","version":"1.0.1","published_at":"2026-10-27T17:08:01.896000+00:00","flagged_at":"2026-10-27T17:09:40.557429+00:00","earliest_public":"2026-10-28T06:15:56Z","osv_ids":["MAL-2026-18356"],"ghsa_ids":["GHSA-cmqx-q58q-9m8p"],"npm_takedown_at":null,"publish_to_flag_min":1.64435715,"lead_over_public_min":786.2573761833333,"model_verdicts":{"spark":"malicious","glimmer-local":"malicious","spark-open-fireworks":"malicious"},"review":null,"ledger_digest":null},{"name":"@webapp-shared/login-vmok","version":"1.1.0","published_at":"2026-10-27T17:08:09.702000+00:00","flagged_at":"2026-10-27T17:09:40.557429+00:00","earliest_public":"2026-10-28T06:15:56Z","osv_ids":["MAL-2026-18356"],"ghsa_ids":["GHSA-cmqx-q58q-9m8p"],"npm_takedown_at":null,"publish_to_flag_min":1.51425715,"lead_over_public_min":786.2573761833333,"model_verdicts":{"spark":"malicious","glimmer-local":"malicious","spark-open-fireworks":"malicious"},"review":null,"ledger_digest":null},{"name":"@webapp-shared/login-vmok","version":"2.0.1","published_at":"2026-10-27T17:08:03.835000+00:00","flagged_at":"2026-10-27T17:09:40.557429+00:00","earliest_public":"2026-10-28T06:15:56Z","osv_ids":["MAL-2026-18356"],"ghsa_ids":["GHSA-cmqx-q58q-9m8p"],"npm_takedown_at":null,"publish_to_flag_min":1.6120404833333335,"lead_over_public_min":786.2573761833333,"model_verdicts":{"spark":"malicious","spark-open-fireworks":"malicious"},"review":null,"ledger_digest":null},{"name":"identity-two-factor","version":"999.0.0","published_at":"2026-10-28T06:56:16.133000+00:00","flagged_at":"2026-10-28T06:58:06.622243+00:00","earliest_public":"2026-10-29T08:36:07Z","osv_ids":["MAL-2026-18367"],"ghsa_ids":[],"npm_takedown_at":null,"publish_to_flag_min":1.8414873833333334,"lead_over_public_min":1538.0062959499999,"model_verdicts":{"glimmer-local":"malicious","spark":"malicious","spark-open-baseten":"malicious"},"review":null,"ledger_digest":null},{"name":"spectral-net-probe","version":"1.0.10","published_at":"2026-10-28T08:10:29.559000+00:00","flagged_at":"2026-10-28T08:12:07.170074+00:00","earliest_public":"2026-10-29T08:44:16Z","osv_ids":["MAL-2026-18368"],"ghsa_ids":[],"npm_takedown_at":null,"publish_to_flag_min":1.6268512333333334,"lead_over_public_min":1472.1471654333334,"model_verdicts":{"spark-open-fireworks":"suspicious","spark":"suspicious","glimmer-local":"malicious"},"review":null,"ledger_digest":null},{"name":"cjlowuxbnexkhgpzq","version":"1.0.0","published_at":"2026-10-28T09:04:02.189000+00:00","flagged_at":"2026-10-28T09:04:09.960161+00:00","earliest_public":"2026-10-29T14:23:51Z","osv_ids":["MAL-2026-18381"],"ghsa_ids":["GHSA-pr23-gvcv-c422"],"npm_takedown_at":"2026-10-29T14:23:57.186000Z","publish_to_flag_min":0.12951935,"lead_over_public_min":1759.6839973166668,"model_verdicts":{"spark":"suspicious","spark-open-fireworks":"suspicious"},"review":null,"ledger_digest":"765f379d8572e4d0816bd3104ba462221f4de989bfc1c3ec223eb0805d638712"},{"name":"@zmtcdn/components","version":"9999.0.0","published_at":"2026-10-28T09:54:11.348000+00:00","flagged_at":"2026-10-28T09:56:11.501664+00:00","earliest_public":"2026-10-29T09:06:08Z","osv_ids":["MAL-2026-18372"],"ghsa_ids":[],"npm_takedown_at":null,"publish_to_flag_min":2.002561066666667,"lead_over_public_min":1389.9416389333335,"model_verdicts":{"spark-open-fireworks":"malicious","glimmer-local":"malicious","spark":"malicious"},"review":null,"ledger_digest":"bc36953f70ac52c629926bc6edf0f7f23ded1bc7ede1861d345dc03c1586188e"},{"name":"@zmtcdn/ui","version":"9999.0.7","published_at":"2026-10-28T09:58:06.003000+00:00","flagged_at":"2026-10-28T09:58:06.861694+00:00","earliest_public":"2026-10-29T09:06:08Z","osv_ids":["MAL-2026-18373"],"ghsa_ids":["GHSA-g2vv-m33m-p9qf"],"npm_takedown_at":null,"publish_to_flag_min":0.014311566666666666,"lead_over_public_min":1388.0189717666665,"model_verdicts":{"spark-open-fireworks":"malicious","glimmer-local":"malicious","spark":"malicious"},"review":null,"ledger_digest":"16e22ebce330a56c98987ae72e1fb175f00900ee550fefa592d52d98adb6a2d8"},{"name":"black-spindle","version":"999.0.0","published_at":"2026-10-28T16:11:15.253000+00:00","flagged_at":"2026-10-28T16:12:07.132516+00:00","earliest_public":"2026-10-28T17:12:03.563698Z","osv_ids":["MAL-2026-18359"],"ghsa_ids":[],"npm_takedown_at":null,"publish_to_flag_min":0.8646586,"lead_over_public_min":59.940519699999996,"model_verdicts":{"llamaguard-1b":"malicious","spark-open-baseten":"malicious","spark":"suspicious"},"review":null,"ledger_digest":"8d7cec6f024a4ad6649683198b3d87489b91fa2b742a96d3486d4e02f54f2e57"},{"name":"black-spindle-2","version":"100.0.0","published_at":"2026-10-28T16:44:07.722000+00:00","flagged_at":"2026-10-28T16:44:09.791662+00:00","earliest_public":"2026-10-29T15:13:34.018067Z","osv_ids":["MAL-2026-18376"],"ghsa_ids":["GHSA-qcg8-4xw5-5ccq"],"npm_takedown_at":null,"publish_to_flag_min":0.03449436666666667,"lead_over_public_min":1349.4037734166666,"model_verdicts":{"spark":"suspicious","llamaguard-1b":"malicious","spark-open-baseten":"suspicious"},"review":null,"ledger_digest":"319295ad356e528b2a19a2186d90ef567cddeb09869b2dbb1728d80baa6a1d97"},{"name":"black-spindle-2","version":"301.0.0","published_at":"2026-10-28T16:46:19.793000+00:00","flagged_at":"2026-10-28T16:48:10.657923+00:00","earliest_public":"2026-10-29T15:13:34.018067Z","osv_ids":["MAL-2026-18376"],"ghsa_ids":["GHSA-qcg8-4xw5-5ccq"],"npm_takedown_at":null,"publish_to_flag_min":1.8477487166666668,"lead_over_public_min":1345.3893357333334,"model_verdicts":{"glimmer-local":"suspicious","spark":"suspicious","llamaguard-1b":"malicious","spark-open-baseten":"malicious"},"review":null,"ledger_digest":"1256533730853834c0770aa33738e7bc94f636c750e0a470dbb5adf4f14585d5"},{"name":"black-spindle-2","version":"302.0.0","published_at":"2026-10-28T16:47:54.998000+00:00","flagged_at":"2026-10-28T16:48:10.657923+00:00","earliest_public":"2026-10-29T15:31:27Z","osv_ids":[],"ghsa_ids":["GHSA-qcg8-4xw5-5ccq"],"npm_takedown_at":null,"publish_to_flag_min":0.26099871666666663,"lead_over_public_min":1363.27236795,"model_verdicts":{"glimmer-local":"malicious","spark":"suspicious","llamaguard-1b":"malicious","spark-open-baseten":"malicious"},"review":null,"ledger_digest":"20777a4380d7d1948117482d462fb77a15a40c40bc8860847e28d47c8c05ab11"},{"name":"spectral-core","version":"3.0.2","published_at":"2026-10-28T19:22:23.061000+00:00","flagged_at":"2026-10-28T19:24:07.838151+00:00","earliest_public":"2026-10-29T15:13:32.733484Z","osv_ids":["MAL-2026-18377"],"ghsa_ids":["GHSA-jpgq-34qx-jwwc"],"npm_takedown_at":null,"publish_to_flag_min":1.74628585,"lead_over_public_min":1189.4149222166666,"model_verdicts":{"glimmer-local":"suspicious","spark":"suspicious","llamaguard-1b":"malicious","spark-open-baseten":"suspicious"},"review":null,"ledger_digest":"77d45e11cb6cdd63ab22e561307949eb3691c162a4a529ceabb72fd799a26e30"},{"name":"spectral-core","version":"3.0.3","published_at":"2026-10-28T19:42:17.636000+00:00","flagged_at":"2026-10-28T19:44:10.666072+00:00","earliest_public":"2026-10-29T15:13:32.733484Z","osv_ids":["MAL-2026-18377"],"ghsa_ids":["GHSA-jpgq-34qx-jwwc"],"npm_takedown_at":null,"publish_to_flag_min":1.8838345333333335,"lead_over_public_min":1169.3677902000002,"model_verdicts":{"glimmer-local":"malicious","spark":"malicious","llamaguard-1b":"malicious","spark-open-baseten":"malicious"},"review":null,"ledger_digest":"2765563224004802136bc0d888a5456af91dafa05854041c0ddb2540badcff56"},{"name":"spectral-core","version":"3.0.4","published_at":"2026-10-28T19:48:48.468000+00:00","flagged_at":"2026-10-28T19:50:15.490694+00:00","earliest_public":"2026-10-29T15:13:32.733484Z","osv_ids":["MAL-2026-18377"],"ghsa_ids":["GHSA-jpgq-34qx-jwwc"],"npm_takedown_at":null,"publish_to_flag_min":1.4503782333333333,"lead_over_public_min":1163.2873798333335,"model_verdicts":{"glimmer-local":"malicious","spark":"malicious","llamaguard-1b":"malicious","spark-open-baseten":"malicious"},"review":null,"ledger_digest":"c7c19955938c407d52376b895bee894827013574e957fc784eaab37c7e46e53f"},{"name":"spectral-core","version":"3.0.5","published_at":"2026-10-28T19:59:42.483000+00:00","flagged_at":"2026-10-28T20:00:25.175919+00:00","earliest_public":"2026-10-29T15:13:32.733484Z","osv_ids":["MAL-2026-18377"],"ghsa_ids":["GHSA-jpgq-34qx-jwwc"],"npm_takedown_at":null,"publish_to_flag_min":0.71154865,"lead_over_public_min":1153.1259594166665,"model_verdicts":{"glimmer-local":"malicious","spark":"malicious","llamaguard-1b":"malicious","spark-open-baseten":"malicious"},"review":null,"ledger_digest":"5ae18af3d73f1c69e58fd7f66acd51f8e76f01eb623ef296216463f8696b40f4"},{"name":"spectral-core","version":"3.0.6","published_at":"2026-10-28T20:14:07.350000+00:00","flagged_at":"2026-10-28T20:16:07.000210+00:00","earliest_public":"2026-10-29T15:13:32.733484Z","osv_ids":["MAL-2026-18377"],"ghsa_ids":["GHSA-jpgq-34qx-jwwc"],"npm_takedown_at":null,"publish_to_flag_min":1.9941701666666667,"lead_over_public_min":1137.4288879,"model_verdicts":{"glimmer-local":"malicious","llamaguard-1b":"malicious","spark":"malicious","spark-open-baseten":"malicious"},"review":null,"ledger_digest":"e0b10862b4943636a25ad8662ff095559963e6f49b9aa4be74c4f12d7621aaee"},{"name":"spectral-core","version":"3.0.7","published_at":"2026-10-28T20:27:00.158000+00:00","flagged_at":"2026-10-28T20:30:20.768591+00:00","earliest_public":"2026-10-29T15:13:32.733484Z","osv_ids":["MAL-2026-18377"],"ghsa_ids":["GHSA-jpgq-34qx-jwwc"],"npm_takedown_at":null,"publish_to_flag_min":3.34350985,"lead_over_public_min":1123.1994148833332,"model_verdicts":{"glimmer-local":"malicious","spark":"malicious","spark-open-baseten":"malicious","llamaguard-1b":"malicious"},"review":null,"ledger_digest":"79cd9bceb95708f66516257a2bc1c125ae78135fa1e76555a9a2f252fda1920d"},{"name":"spectral-core","version":"3.0.9","published_at":"2026-10-28T20:47:48.651000+00:00","flagged_at":"2026-10-28T20:48:09.893398+00:00","earliest_public":"2026-10-29T15:13:32.733484Z","osv_ids":["MAL-2026-18377"],"ghsa_ids":["GHSA-jpgq-34qx-jwwc"],"npm_takedown_at":null,"publish_to_flag_min":0.3540399666666667,"lead_over_public_min":1105.3806680999999,"model_verdicts":{"glimmer-local":"malicious","spark":"malicious","spark-open-baseten":"malicious","llamaguard-1b":"malicious"},"review":null,"ledger_digest":"f15289966880df748bff1aa6281667e8d5c83a43f508c281fbaa6406bca15cd5"},{"name":"spectral-core","version":"3.0.10","published_at":"2026-10-28T20:57:57.900000+00:00","flagged_at":"2026-10-28T20:58:09.194539+00:00","earliest_public":"2026-10-29T15:13:32.733484Z","osv_ids":["MAL-2026-18377"],"ghsa_ids":["GHSA-jpgq-34qx-jwwc"],"npm_takedown_at":null,"publish_to_flag_min":0.18824231666666666,"lead_over_public_min":1095.3923157499999,"model_verdicts":{"glimmer-local":"malicious","spark":"malicious","spark-open-baseten":"malicious","llamaguard-1b":"malicious"},"review":null,"ledger_digest":"8443837b59a3b5ded717f15f1dd0d72696a811c285679b1a42d1fbeda0100ed3"},{"name":"spectral-core","version":"3.0.11","published_at":"2026-10-28T21:11:31.586000+00:00","flagged_at":"2026-10-28T21:12:06.858356+00:00","earliest_public":"2026-10-29T15:13:32.733484Z","osv_ids":["MAL-2026-18377"],"ghsa_ids":["GHSA-jpgq-34qx-jwwc"],"npm_takedown_at":null,"publish_to_flag_min":0.5878726000000001,"lead_over_public_min":1081.4312521333334,"model_verdicts":{"glimmer-local":"malicious","spark":"malicious","spark-open-baseten":"malicious","llamaguard-1b":"malicious"},"review":null,"ledger_digest":"dfff07dffff15096ab2882ae8e15526cd0a7ae1d458af49194757641592b5649"},{"name":"spectral-core","version":"3.0.12","published_at":"2026-10-28T21:24:42.247000+00:00","flagged_at":"2026-10-28T21:26:06.625634+00:00","earliest_public":"2026-10-29T15:13:32.733484Z","osv_ids":["MAL-2026-18377"],"ghsa_ids":["GHSA-jpgq-34qx-jwwc"],"npm_takedown_at":null,"publish_to_flag_min":1.4063105666666667,"lead_over_public_min":1067.4351308333332,"model_verdicts":{"glimmer-local":"malicious","spark":"malicious","spark-open-baseten":"malicious","llamaguard-1b":"malicious"},"review":null,"ledger_digest":"5f7855e2f268592a4d6bf03921e786ad07f19c644249cfc84c5b28667f05b86a"},{"name":"@dmangal/curse-dependent-ecto","version":"99999.0.0","published_at":"2026-10-28T21:59:12.071000+00:00","flagged_at":"2026-10-28T22:00:42.209800+00:00","earliest_public":"2026-10-29T15:13:32.360967Z","osv_ids":["MAL-2026-18375"],"ghsa_ids":["GHSA-prqg-vvv3-2xf8"],"npm_takedown_at":null,"publish_to_flag_min":1.5023133333333334,"lead_over_public_min":1032.8358527833334,"model_verdicts":{"glimmer-local":"malicious","spark":"malicious","spark-open-baseten":"malicious","llamaguard-1b":"malicious"},"review":null,"ledger_digest":"3591af67d193ae82b11db9633979deaf16b5f7802ccc552a28b61b70c5689659"},{"name":"@dmangal/curse-dependent-ecto","version":"99999.0.1","published_at":"2026-10-28T22:11:24.396000+00:00","flagged_at":"2026-10-28T22:12:07.541310+00:00","earliest_public":"2026-10-29T15:13:32.360967Z","osv_ids":["MAL-2026-18375"],"ghsa_ids":["GHSA-prqg-vvv3-2xf8"],"npm_takedown_at":null,"publish_to_flag_min":0.7190885,"lead_over_public_min":1021.41366095,"model_verdicts":{"glimmer-local":"malicious","spark":"malicious","spark-open-baseten":"malicious","llamaguard-1b":"malicious"},"review":null,"ledger_digest":"8b1b72e943a1b990a9a3baab50d74e766420e09a42ad74a46e880df52ec13160"},{"name":"@dmangal/curse-dependent-ecto","version":"99999.0.2","published_at":"2026-10-28T22:19:54.765000+00:00","flagged_at":"2026-10-28T22:20:14.929296+00:00","earliest_public":"2026-10-29T15:13:32.360967Z","osv_ids":["MAL-2026-18375"],"ghsa_ids":["GHSA-prqg-vvv3-2xf8"],"npm_takedown_at":null,"publish_to_flag_min":0.3360716,"lead_over_public_min":1013.29052785,"model_verdicts":{"glimmer-local":"malicious","spark":"malicious","spark-open-baseten":"malicious","llamaguard-1b":"malicious"},"review":null,"ledger_digest":"e9ae017575aee052dd02cd692880248564578e22364618b93b5c3b5d817af958"},{"name":"@pcb-dp/qa-commons","version":"1.0.0","published_at":"2026-10-29T15:31:13.527000+00:00","flagged_at":"2026-10-29T16:00:30.550331+00:00","earliest_public":"2026-10-30T18:05:50.271000Z","osv_ids":[],"ghsa_ids":["GHSA-w4v4-fj9q-cfj5"],"npm_takedown_at":"2026-10-30T18:05:50.271000Z","publish_to_flag_min":29.283722183333335,"lead_over_public_min":1565.3286778166666,"model_verdicts":{"llamaguard-1b":"malicious","spark-open-baseten":"malicious","spark":"malicious","glimmer-local":"malicious","investigator":"malicious"},"review":null,"ledger_digest":"d7615ef96227efef8b59839b546469c7de756b28d8b2cc88eae435efd06738b6"},{"name":"dependencykfeg","version":"25.1.3","published_at":"2026-10-29T21:48:04.052000+00:00","flagged_at":"2026-10-29T21:56:25.488486+00:00","earliest_public":"2026-10-30T18:04:33Z","osv_ids":[],"ghsa_ids":["GHSA-7p3p-8gfg-8grq"],"npm_takedown_at":"2026-10-30T18:04:59.241000Z","publish_to_flag_min":8.357274766666666,"lead_over_public_min":1208.1251919,"model_verdicts":{"spark-open-baseten":"suspicious","spark":"suspicious","llamaguard-1b":"malicious","investigator":"suspicious"},"review":null,"ledger_digest":"f0d4e0cbde38e5b5986305c44f9c258a984732217d4d2b4c7bdfb490fac92094"},{"name":"dependencykfeg","version":"25.1.9","published_at":"2026-10-29T22:04:20.207000+00:00","flagged_at":"2026-10-29T22:06:22.691701+00:00","earliest_public":"2026-10-30T18:04:33Z","osv_ids":[],"ghsa_ids":["GHSA-7p3p-8gfg-8grq"],"npm_takedown_at":"2026-10-30T18:04:59.241000Z","publish_to_flag_min":2.0414116833333336,"lead_over_public_min":1198.1718049833332,"model_verdicts":{"llamaguard-1b":"malicious","spark-open-baseten":"suspicious","spark":"suspicious","investigator":"suspicious"},"review":null,"ledger_digest":"aa041bc927cb074b6205663f3d78440c4f43c57e5c5544010fe6c3d62b391110"},{"name":"@sxm-content-creators/tools-ds","version":"1.0.1","published_at":"2026-10-29T22:41:10.935000+00:00","flagged_at":"2026-10-29T22:42:21.582359+00:00","earliest_public":"2026-10-30T18:06:12.196000Z","osv_ids":[],"ghsa_ids":["GHSA-x4jx-pc3h-93v6"],"npm_takedown_at":"2026-10-30T18:06:12.196000Z","publish_to_flag_min":1.1774559833333333,"lead_over_public_min":1163.8435606833334,"model_verdicts":{"glimmer-local":"malicious","spark":"malicious","spark-open-baseten":"malicious","llamaguard-1b":"malicious","investigator":"malicious"},"review":null,"ledger_digest":"828e7bea014d055cba260d76009369bfe26c2e598c26f7fc52650a5f67c5591e"},{"name":"@pcb-dp/qa-commons","version":"1.0.10","published_at":"2026-10-29T23:24:55.768000+00:00","flagged_at":"2026-10-29T23:25:46.795026+00:00","earliest_public":"2026-10-30T18:05:50.271000Z","osv_ids":[],"ghsa_ids":["GHSA-w4v4-fj9q-cfj5"],"npm_takedown_at":"2026-10-30T18:05:50.271000Z","publish_to_flag_min":0.8504504333333334,"lead_over_public_min":1120.0579329,"model_verdicts":{"spark-open-baseten":"malicious","spark":"malicious","glimmer-local":"malicious","llamaguard-1b":"malicious","investigator":"malicious"},"review":null,"ledger_digest":"0f7f54185d3cf6d764cccbcc45a9e13f6b2fe79214401eef162ed13db2764d67"},{"name":"ssite-mock-server","version":"0.0.1","published_at":"2026-10-29T23:37:58.791000+00:00","flagged_at":"2026-10-29T23:38:22.223903+00:00","earliest_public":"2026-10-30T18:06:14Z","osv_ids":[],"ghsa_ids":["GHSA-h5wr-6cx4-x5v4"],"npm_takedown_at":null,"publish_to_flag_min":0.3905483833333333,"lead_over_public_min":1107.86293495,"model_verdicts":{"spark-open-baseten":"malicious","glimmer-local":"malicious","spark":"malicious","llamaguard-1b":"malicious","investigator":"malicious"},"review":null,"ledger_digest":"f9b428f3d8bd73d80d29d69f9169f57c420d01ee574b29fae3fcf1d0cb84d26a"},{"name":"dependencykfeg","version":"25.2.1","published_at":"2026-10-30T06:36:35.581000+00:00","flagged_at":"2026-10-30T06:38:20.103246+00:00","earliest_public":"2026-10-30T18:04:33Z","osv_ids":[],"ghsa_ids":["GHSA-7p3p-8gfg-8grq"],"npm_takedown_at":"2026-10-30T18:04:59.241000Z","publish_to_flag_min":1.7420374333333333,"lead_over_public_min":686.2149459,"model_verdicts":{"spark-open-fireworks":"suspicious","spark":"suspicious","llamaguard-1b":"malicious","investigator":"suspicious"},"review":null,"ledger_digest":"c427d0125288c7082309a6c47be4c984d33c55da120e4e0692197c77a2145407"},{"name":"claims-acct-unlock","version":"25.2.1","published_at":"2026-10-30T06:55:32.705000+00:00","flagged_at":"2026-10-30T06:56:19.498707+00:00","earliest_public":"2026-10-30T07:37:18.810411Z","osv_ids":["MAL-2026-18404"],"ghsa_ids":[],"npm_takedown_at":null,"publish_to_flag_min":0.7798951166666667,"lead_over_public_min":40.9885284,"model_verdicts":{"spark-open-fireworks":"suspicious","spark":"suspicious","llamaguard-1b":"malicious","investigator":"suspicious"},"review":null,"ledger_digest":"b4c4b4ea15b5e28906f3e977881b81235089f5b8bcc6e59a81ae74875a9a3f80"},{"name":"dependencykfeg","version":"1.5.6","published_at":"2026-10-29T19:41:20.335000+00:00","flagged_at":"2026-10-30T10:45:35.988935+00:00","earliest_public":"2026-10-30T18:04:33Z","osv_ids":[],"ghsa_ids":["GHSA-7p3p-8gfg-8grq"],"npm_takedown_at":"2026-10-30T18:04:59.241000Z","publish_to_flag_min":904.2608989166667,"lead_over_public_min":438.9501844166667,"model_verdicts":{"llamaguard-1b":"malicious","spark":"malicious","glimmer-local":"malicious","spark-open-baseten":"malicious","investigator":"malicious"},"review":null,"ledger_digest":"84650ee45477225686000e38d69a17422337805d8f74977f863ec7c1876b8db0"},{"name":"dependencykfeg","version":"2.1.3","published_at":"2026-10-29T20:56:35.537000+00:00","flagged_at":"2026-10-30T10:45:35.988935+00:00","earliest_public":"2026-10-30T18:04:33Z","osv_ids":[],"ghsa_ids":["GHSA-7p3p-8gfg-8grq"],"npm_takedown_at":"2026-10-30T18:04:59.241000Z","publish_to_flag_min":829.0075322499999,"lead_over_public_min":438.9501844166667,"model_verdicts":{"spark":"malicious","llamaguard-1b":"malicious","spark-open-baseten":"malicious","investigator":"malicious"},"review":null,"ledger_digest":"a95325210f0fcbbdf57f11a63851dc9af3654b02a9a886c9beb9f20c19911339"},{"name":"dependencykfeg","version":"25.0.3","published_at":"2026-10-29T21:26:01.906000+00:00","flagged_at":"2026-10-30T10:45:35.988935+00:00","earliest_public":"2026-10-30T18:04:33Z","osv_ids":[],"ghsa_ids":["GHSA-7p3p-8gfg-8grq"],"npm_takedown_at":"2026-10-30T18:04:59.241000Z","publish_to_flag_min":799.5680489166666,"lead_over_public_min":438.9501844166667,"model_verdicts":{"spark":"suspicious","llamaguard-1b":"malicious","spark-open-baseten":"malicious","investigator":"malicious"},"review":null,"ledger_digest":"174593bee68b62553f31efcfaeaedec708965140ac3464a07adf651b1f1767a7"},{"name":"tailwindcss-visual-kit","version":"1.3.7","published_at":"2026-10-29T20:25:39.758000+00:00","flagged_at":"2026-10-30T11:07:36.055498+00:00","earliest_public":"2026-10-30T12:37:35.203000Z","osv_ids":[],"ghsa_ids":["GHSA-f37w-2g4f-58r3"],"npm_takedown_at":"2026-10-30T12:37:35.203000Z","publish_to_flag_min":881.9382916333333,"lead_over_public_min":89.9857917,"model_verdicts":{"spark-open-fireworks":"suspicious","spark":"benign","investigator":"suspicious"},"review":null,"ledger_digest":"9a18f455760c5cd91d6e0d96fe7afd117f43d56c5dd3466dabaf737b51b788b8"}],"repo":"https://github.com/lb2002/gatekeeper","ledger":"https://github.com/lb2002/gatekeeper-ledger"}