// npm package

@ncremental/essentials

This library was generated with [Angular CLI](https://github.com/angular/angular-cli) version 9.1.13.

npmjs.com tarball

versions

maintainers

first publish

2022-05-30

publisher

carl-eric.lavoie.ncremental

tarball

5,679 B

AUTO-PUBLISHED·1 version indexed·latest published 2026-05-27

// publisher campaignby carl-eric.lavoie.ncremental

2 caught packages from this account

This is not an isolated catch. The same publisher has shipped 1 other package that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @21.0.8· no static-pattern hits

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@21.0.8·2026-05-27·AUTO-PUBLISHED·publisher: carl-eric.lavoie.ncremental

heuristic 75/100

static flags 0

llm benign (0.85) via ollama

new-publisher:1drecent-owner-changepublisher-multi-name-burst:2dormant-takeover:prev=clampr_ncremental@9.0.8

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

// offending code· no static-pattern hits

--- package.json (entry) ---
{
  "name": "@ncremental/essentials",
  "version": "21.0.8",
  "peerDependencies": {
    "@angular/common": "^21.2.14",
    "@angular/core": "^21.2.14"
  },
  "dependencies": {
    "tslib": "^2.0.0"
  },
  "publishConfig": {
    "@ncremental:registry": "https://registry.npmjs.org/",
    "access": "public"
  },
  "module": "fesm2022/ncremental-essentials.mjs",
  "typings": "types/ncremental-essentials.d.ts",
  "exports": {
    "./package.json": {
      "default": "./package.json"
    },
    ".": {
      "types": "./types/ncremental-essentials.d.ts",
      "default": "./fesm2022/ncremental-essentials.mjs"
    }
  },
  "sideEffects": false,
  "type": "module"
}