Every caught package that currently matches this cluster's axis, replayed live over the last 7 days. Snippets show where the cluster identifier appears in the package's static excerpt or which takeover heuristic fired.
// publishers in this wave
Same wave, split by the publisher who pushed each malicious version. Corporate ownership transfers (one bot pumping several scoped names) look different from real dormant takeovers (many unrelated dormant maintainers tripping in parallel) — the split makes the shape visible.
prev: baizn@1.0.4
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
prev: pomelo-nwu@2.4.0
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 3 known-vendor host(s), 1 other host(s).
prev: iaaron@0.8.24
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
prev: iaaron@0.8.24
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
prev: panyuqi@1.8.7
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 2 known-vendor host(s).
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 2 known-vendor host(s).
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 2 known-vendor host(s), 1 other host(s).
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
prev: zqlu@0.1.2
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
prev: atool@2.0.3
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
prev: atool@0.2.3
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
prev: alanwei0@3.0.6
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
prev: atool@0.1.2
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
prev: lviser@0.0.10
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 2 known-vendor host(s).
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 2 known-vendor host(s).
prev: iaaron@0.8.24
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 2 known-vendor host(s), 1 other host(s).
recent-owner-change
llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).
