// npm package

@edsc/smart-handoffs

Smart handoffs allow users to link from one application to another while carrying with them certain parameters that set a specific context (e.g. open up the same dataset, temporal range, and spatial search in a new tool). This code simplifies the creation

npmjs.com tarball repo homepage

weekly

211

monthly

617

versions

maintainers

license

Apache-2.0

first publish

2022-05-17

publisher

eudoroolivares

tarball

25,937 B

AUTO-PUBLISHED·1 version indexed·latest published 2026-05-29

// publisher campaignby eudoroolivares

2 caught packages from this account

This is not an isolated catch. The same publisher has shipped 1 other package that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @1.0.7· 1 file flagged

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@1.0.7·2026-05-29·AUTO-PUBLISHED·publisher: eudoroolivares

heuristic 75/100

static flags 1

llm benign (0.85) via ollama

new-publisher:0drecent-owner-changehas-source-repopublisher-multi-name-burst:2dormant-takeover:prev=edsc-publisher@1.0.6public-github-push

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

// offending code· 1 file flaggedpatterns: 1

--- install scripts ---
### prepare
npm run build



--- package/package.json (excerpt) ---
{
  "name": "@edsc/smart-handoffs",
  "version": "1.0.7",
  "description": "Smart handoffs allow users to link from one application to another while carrying with them certain parameters that set a specific context (e.g. open up the same dataset, temporal range, and spatial search in a new tool). This code simplifies the creation of smart handoff links.",
  "main": "./dist/js/index.js",
  "scripts": {
    "test": "jest",
    "test:watch": "jest --watchAll",
    "silent-test": "jest --silent",
    "build": "babel src -d dist --ignore '**/__tests__/*.js'",
    "prepare": "npm run build",
    "lint": "eslint ."
  },
  "repository": {
    "type": "git",
    "url": "git+https://github.com/nasa/edsc-smart-handoffs.git"
  },
  "keywords": [
    "edsc",
    "smart handoffs",
    "umm-t"
  ],
  "author": {
    "name": "Earthdata Search",
    "email": "support@earthdata.nasa.gov"
  },
  "license": "Apache-2.0",
  "bugs": {
    "url": "https://github.com/nasa/edsc-smart-handoffs/issues"
  },
  "homepage": "https://github.com/nasa/edsc-smart-handoffs#readme",
  "dependencies": {
    "@edsc/geo-utils": "^1.0.6",
    "lodash": "^4.17.21",
    "moment": "^2.29.2",
    "url-template": "^2.0.8"
  },
  "devDependencies": {
    "@babel/cli": "^7.23.0",
    "@babel/core": "^7.23.0",
    "@babel/eslint-parser": "^7.23.0",
    "@babel/preset-env": "^7.23.0",
    "@edsc/eslint-config": "^0.0.5",
    "babel-jest": "^29.7.0",
    "eslint": "^8.50.0",
    "eslint-config-airbnb": "^19.0.4",
    "eslint