// npm package

@edsc/timeline

Timeline component used by Earthdata Search

npmjs.com tarball repo homepage

versions

maintainers

license

Apache-2.0

first publish

2020-10-19

publisher

eudoroolivares

tarball

2,116,721 B

AUTO-PUBLISHED·1 version indexed·latest published 2026-05-29

// publisher campaignby eudoroolivares

2 caught packages from this account

This is not an isolated catch. The same publisher has shipped 1 other package that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @1.1.9· 1 file flagged

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@1.1.9·2026-05-29·AUTO-PUBLISHED·publisher: eudoroolivares

heuristic 75/100

static flags 1

llm benign (0.85) via ollama

new-publisher:0drecent-owner-changemature-packagehas-source-repopublisher-multi-name-burst:2dormant-takeover:prev=edsc-publisher@1.1.8public-github-push

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

// offending code· 1 file flaggedpatterns: 1

--- install scripts ---
### prepare
npm run build



--- package/package.json (excerpt) ---
{
  "name": "@edsc/timeline",
  "title": "Earthdata Search Components: Timeline",
  "main": "dist/index.js",
  "description": "Timeline component used by Earthdata Search",
  "version": "1.1.9",
  "scripts": {
    "build": "webpack",
    "start": "webpack serve --config example/webpack.config.js --mode development",
    "cypress:open": "NODE_ENV=test cypress open",
    "cypress:run": "NODE_ENV=test cypress run -c video=false",
    "cypress:ci": "NODE_ENV=test_cypress start-server-and-test start http-get://localhost:3011 cypress:run",
    "test": "NODE_OPTIONS=--max_old_space_size=4096 jest",
    "silent-test": "NODE_OPTIONS=--max_old_space_size=4096 jest --silent",
    "test:watch": "NODE_OPTIONS=--max_old_space_size=4096 jest --watchAll",
    "test:bamboo": "cypress run --reporter junit --reporter-options \"mochaFile=junit.xml\" -c video=false",
    "prepare": "npm run build",
    "predeploy": "PUBLIC_URL=https://nasa.github.io/edsc-timeline/ webpack --config example/webpack.config.js",
    "deploy": "gh-pages -d dist",
    "lint": "eslint ."
  },
  "repository": {
    "type": "git",
    "url": "git+https://github.com/nasa/edsc-timeline.git"
  },
  "copyright": {
    "year": "© 2007-2020",
    "organization": "United States Government as represented by the Administrator of the National Aeronautics and Space Administration. All Rights Reserved."
  },
  "author": {
    "name": "Earthdata Search",
    "email": "support@earthdata.nasa.gov"
  },
  "license": "Apache-2.0",
  "bugs