{"generated":"2026-09-04T08:44:36.637Z","windowDays":30,"total":17743,"counts":{"version_published":15738,"repo_changed":91,"provenance_lost":36,"install_script_added":9,"verdict_worsened":10,"deps_spike":6,"verdict_improved":7,"maintainer_changed":50,"skill_instructions_changed":958,"skill_renamed":717,"repo_removed":27,"unpublished":74,"name_lookalike":20},"bySeverity":{"high":248,"medium":1750,"low":15745},"events":[{"at":"2026-09-04T01:40:01.790Z","id":"com.attrove/mcp","kind":"npm","version":"0.6.0","prevVersion":"0.5.0","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/attrove/attrove-js.git","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-09-04T01:40:01.790Z","id":"io.github.gfacchi-dev/astadoo","kind":"remote","version":"1.0.2","prevVersion":"1.0.0","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/gfacchi-dev/easy-pvp-cloudflare","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-09-04T01:40:01.790Z","id":"io.sslip.142-93-197-141.pagesnap/pagesnap","kind":"remote","version":"1.2.0","prevVersion":"1.2.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-03T02:05:01.816Z","id":"api-gateway","kind":"skill","version":"1.0.152","prevVersion":"1.0.151","totalDownloads":86279,"type":"skill_instructions_changed","severity":"high","from":"Call third-party APIs through the Maton gateway, which injects the credential for an app the user has already…","to":"Call third-party APIs through the Maton gateway, which injects the credential for an app the user has already…","headline":"The instructions this skill feeds to the model changed in 1.0.152. The text shrank by 27 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-09-03T02:05:01.816Z","id":"anysearch","kind":"skill","version":"3.1.1","prevVersion":"3.0.1","totalDownloads":37074,"type":"skill_instructions_changed","severity":"high","from":"Unified real-time search engine skill for AI agents. Supports general web search, vertical domain search, parallel…","to":"Real-time search engine supporting web search, vertical domain search, parallel batch search, and URL content…","headline":"The instructions this skill feeds to the model changed in 3.1.1. The text shrank by 41 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-09-03T01:40:01.445Z","id":"io.github.CodyWatters/riveter","kind":"npm","version":"0.3.0","prevVersion":"0.1.2","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/CodyWatters/riveter-mcp-server","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-09-03T01:40:01.445Z","id":"com.datakoot/base-intel-mcp","kind":"remote","version":"2.0.0","prevVersion":"2.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-03T01:40:01.445Z","id":"com.datakoot/domain-intel-mcp","kind":"remote","version":"2.0.0","prevVersion":"2.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-03T01:40:01.445Z","id":"com.datakoot/economy-intel-mcp","kind":"remote","version":"2.0.0","prevVersion":"2.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-03T01:40:01.445Z","id":"com.datakoot/filings-intel-mcp","kind":"remote","version":"2.0.0","prevVersion":"2.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-03T01:40:01.445Z","id":"com.datakoot/market-intel-mcp","kind":"remote","version":"2.0.0","prevVersion":"2.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-03T01:40:01.445Z","id":"com.datakoot/package-intel-mcp","kind":"remote","version":"2.0.0","prevVersion":"2.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-03T01:40:01.445Z","id":"com.datakoot/regulatory-intel-mcp","kind":"remote","version":"2.0.0","prevVersion":"2.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-03T01:40:01.445Z","id":"com.datakoot/security-intel-mcp","kind":"remote","version":"2.0.0","prevVersion":"2.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-03T01:40:01.445Z","id":"com.datakoot/weather-intel-mcp","kind":"remote","version":"2.0.0","prevVersion":"2.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-03T01:40:01.445Z","id":"com.unlistedinc/unlisted","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-03T01:40:01.445Z","id":"io.github.Itr3k/axiom-x402-payment-crypto-router","kind":"remote","version":"0.3.1","prevVersion":"0.3.1","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-03T01:40:01.445Z","id":"io.github.eminyilmz/high-performance-mcp-server","kind":"npm","version":"0.3.0","prevVersion":"0.3.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-03T01:40:01.445Z","id":"io.github.vassiliylakhonin/profile-mcp","kind":"remote","version":"1.2.0","prevVersion":"1.2.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-03T01:33:02.297Z","id":"@blaxel/core","kind":"npm","version":"0.3.17","prevVersion":"0.3.13","weeklyDownloads":null,"type":"maintainer_changed","severity":"high","from":"beamlit-cploujoux, cdrappier, ch.ploujoux, sugate, tcrochet","to":"beamlit-cploujoux, cdrappier, ch.ploujoux, michaelstolarz, sugate","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-09-03T01:33:02.297Z","id":"@wonderwhy-er/desktop-commander","kind":"npm","version":"0.2.48","prevVersion":"0.2.47","weeklyDownloads":null,"type":"maintainer_changed","severity":"high","from":"daseinji, edgarsskore, serg33v, wonderwhy-er","to":"edgarsskore, serg33v, wonderwhy-er","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-09-03T01:33:02.297Z","id":"@blaxel/telemetry","kind":"npm","version":"0.3.17","prevVersion":"0.3.13","weeklyDownloads":7077,"type":"maintainer_changed","severity":"high","from":"beamlit-cploujoux, cdrappier, ch.ploujoux, sugate, tcrochet","to":"beamlit-cploujoux, cdrappier, ch.ploujoux, michaelstolarz, sugate","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-09-03T01:33:02.297Z","id":"@blaxel/llamaindex","kind":"npm","version":"0.3.17","prevVersion":"0.3.13","weeklyDownloads":742,"type":"maintainer_changed","severity":"high","from":"beamlit-cploujoux, cdrappier, ch.ploujoux, sugate, tcrochet","to":"beamlit-cploujoux, cdrappier, ch.ploujoux, michaelstolarz, sugate","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-09-03T01:33:02.297Z","id":"@blaxel/vercel","kind":"npm","version":"0.3.17","prevVersion":"0.3.13","weeklyDownloads":null,"type":"maintainer_changed","severity":"high","from":"beamlit-cploujoux, cdrappier, ch.ploujoux, sugate, tcrochet","to":"beamlit-cploujoux, cdrappier, ch.ploujoux, michaelstolarz, sugate","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-09-03T01:33:02.297Z","id":"@blaxel/mastra","kind":"npm","version":"0.3.17","prevVersion":"0.3.13","weeklyDownloads":755,"type":"maintainer_changed","severity":"high","from":"beamlit-cploujoux, cdrappier, ch.ploujoux, sugate, tcrochet","to":"beamlit-cploujoux, cdrappier, ch.ploujoux, michaelstolarz, sugate","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-09-03T01:33:02.297Z","id":"@blaxel/langgraph","kind":"npm","version":"0.3.17","prevVersion":"0.3.13","weeklyDownloads":746,"type":"maintainer_changed","severity":"high","from":"beamlit-cploujoux, cdrappier, ch.ploujoux, sugate, tcrochet","to":"beamlit-cploujoux, cdrappier, ch.ploujoux, michaelstolarz, sugate","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-09-03T01:33:02.297Z","id":"@fatelabs/estelle","kind":"npm","version":"0.2.32","prevVersion":"0.2.3","weeklyDownloads":null,"type":"install_script_added","severity":"high","from":"none","to":"present","headline":"Install script added: arbitrary code now runs on `npm i` — it was not there in 0.2.3."},{"at":"2026-09-03T01:33:02.297Z","id":"@fatelabs/estelle","kind":"npm","version":"0.2.32","prevVersion":"0.2.3","weeklyDownloads":null,"type":"verdict_worsened","severity":"high","from":"safe","to":"avoid","headline":"Verdict worsened: safe → avoid (score 86 → 56)."},{"at":"2026-09-03T01:33:02.297Z","id":"@chkp/mcp-utils","kind":"npm","version":"1.3.1","prevVersion":"1.3.1","weeklyDownloads":2057,"type":"maintainer_changed","severity":"high","from":"borisgu, chkp-npm, chkp-roniz, cp_shayn","to":"borisgu, chkp-npm, chkp-roniz, cp_shayn, ilyaro, yairt22","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-09-02T02:05:02.262Z","id":"upload-post","kind":"skill","version":"1.2.0","prevVersion":"1.0.0","totalDownloads":10453,"type":"skill_instructions_changed","severity":"high","from":"Upload content to social media platforms via Upload-Post API. Use when posting videos, photos, text, or documents to…","to":"Publish and schedule content to 15 social platforms through one Upload-Post API call: TikTok, Instagram, YouTube,…","headline":"The instructions this skill feeds to the model changed in 1.2.0. The text grew by 503 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-09-02T01:40:01.274Z","id":"com.jagannathahora/vedic-astrology","kind":"remote","version":"1.0.2","prevVersion":"1.0.1","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/WorldAstrologers/jagannatha-hora","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-09-02T01:40:01.274Z","id":"io.github.PaidSync/paidsync","kind":"remote","version":"2.1.0","prevVersion":"2.0.0","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/PaidSync/paidsync-mcp-server","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-09-02T01:40:01.274Z","id":"estate.guthmann/market-intelligence","kind":"remote","version":"0.2.2","prevVersion":"0.2.2","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-02T01:40:01.274Z","id":"io.github.neuronto/agents-tools-search-discovery-ard-registry","kind":"remote","version":"1.1.0","prevVersion":"1.1.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-02T01:40:01.274Z","id":"io.github.onepunchtechnology/tinify-ai","kind":"npm","version":"1.4.3","prevVersion":"1.4.3","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-02T01:40:01.274Z","id":"io.github.paul-salviani/a2a","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-02T01:40:01.274Z","id":"work.moja/portfolio","kind":"remote","version":"1.1.0","prevVersion":"1.1.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-02T01:40:01.274Z","id":"work.moja/ui","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-02T01:33:02.249Z","id":"@tangle-network/agent-app","kind":"npm","version":"0.46.42","prevVersion":"0.46.31","weeklyDownloads":3037,"type":"maintainer_changed","severity":"high","from":"drewstone, tin-tangle-tools, tjemmmic, vutuanlinh2k2","to":"drewstone","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-09-02T01:33:02.249Z","id":"@babylonjs/mcp-servers","kind":"npm","version":"9.23.0","prevVersion":"9.22.2","weeklyDownloads":null,"type":"maintainer_changed","severity":"high","from":"babylonjs","to":"raananw","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-09-02T01:33:02.249Z","id":"@realpkuasule/harness-automation","kind":"npm","version":"2.8.11","prevVersion":"2.5.0","weeklyDownloads":363,"type":"install_script_added","severity":"high","from":"none","to":"present","headline":"Install script added: arbitrary code now runs on `npm i` — it was not there in 2.5.0."},{"at":"2026-09-02T01:33:02.249Z","id":"@realpkuasule/harness-automation","kind":"npm","version":"2.8.11","prevVersion":"2.5.0","weeklyDownloads":363,"type":"verdict_worsened","severity":"high","from":"safe","to":"avoid","headline":"Verdict worsened: safe → avoid (score 80 → 60)."},{"at":"2026-09-01T02:05:01.699Z","id":"topic-monitor","kind":"skill","version":"1.6.0","prevVersion":"1.5.2","totalDownloads":11039,"type":"skill_instructions_changed","severity":"high","from":"Monitor topics of interest and proactively alert when important developments occur. Use when the user wants automated…","to":"Monitor topics of interest and proactively alert when important developments occur. Use when the user wants automated…","headline":"The instructions this skill feeds to the model changed in 1.6.0. The text grew by 703 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-09-01T01:40:01.528Z","id":"app.g-guest/g-guest","kind":"remote","version":"1.0.1","prevVersion":"1.0.0","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/BlondeDevRules/g-guest-mcp","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-09-01T01:40:01.528Z","id":"io.github.ChanghuLiu/uk-taxi-phv-regulatory-decision-layer","kind":"remote","version":"1.0.0","prevVersion":"1.0.0-rc.1","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/ChanghuLiu/uk-taxi-phv-mcp","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-09-01T01:40:01.528Z","id":"dev.workers.ghost-agent-os.ghost-identity/ghost-x402-vet-schema-check","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-01T01:40:01.528Z","id":"io.github.satohubai/onchain-agents","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-01T01:40:01.528Z","id":"io.usefulapi/gocardless","kind":"remote","version":"1.0.1","prevVersion":"1.0.1","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-01T01:40:01.528Z","id":"live.gex/gex-mcp","kind":"remote","version":"0.2.1","prevVersion":"0.2.1","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-09-01T01:33:01.513Z","id":"mcp-auth","kind":"npm","version":"1.0.0-beta.1","prevVersion":"0.2.0","weeklyDownloads":26177,"type":"maintainer_changed","severity":"high","from":"gaosun","to":"gaosun, xiaoyijun","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-09-01T01:33:01.513Z","id":"@heroku/mcp-server","kind":"npm","version":"1.2.6","prevVersion":"1.2.6","weeklyDownloads":8621,"type":"maintainer_changed","severity":"high","from":"akitanaka, heroku-front-end, jkim-sfdc, pritamnaik, salesforce-releases, ytakamura","to":"akitanaka, heroku-front-end, hone-sf, jkim-sfdc, pritamnaik, salesforce-releases, ytakamura","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-31T02:05:01.776Z","id":"planning-with-files","kind":"skill","version":"3.12.0","prevVersion":"3.11.2","totalDownloads":40028,"type":"skill_instructions_changed","severity":"high","from":"Manus-style persistent file-based planning for AI coding agents: keeps task_plan.md, findings.md, and progress.md on…","to":"Persistent file-based planning for multi-step AI-agent work. Keeps task_plan.md, findings.md, and progress.md on disk;…","headline":"The instructions this skill feeds to the model changed in 3.12.0. The text grew by 267 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-31T02:05:01.776Z","id":"todo-tracker","kind":"skill","version":"1.1.0","prevVersion":"1.0.0","totalDownloads":12495,"type":"skill_instructions_changed","severity":"high","from":"Persistent TODO scratch pad for tracking tasks across sessions. Use when user says \"add to TODO\", \"what's on the TODO\",…","to":"Persistent TODO scratch pad for tracking tasks across sessions. Use when the user asks to add, list, complete, remove,…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 270 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-31T01:40:02.133Z","id":"at.gridbert/mcp","kind":"remote","version":"2.2.0","prevVersion":"2.1.0","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/BMoer/energietools","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-31T01:40:02.133Z","id":"com.ionexai/ionexai-mcp","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-31T01:40:02.133Z","id":"com.luniumpay/lunium","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-31T01:40:02.133Z","id":"com.memroam/memroam","kind":"npm","version":"0.4.1","prevVersion":"0.4.1","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-31T01:40:02.133Z","id":"com.permitreporter/georgia-permits","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-31T01:40:02.133Z","id":"io.github.danubeai/danube","kind":"remote","version":"1.0.1","prevVersion":"1.0.1","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-30T01:40:01.509Z","id":"io.github.SiliconAnalysts/silicon-analysts","kind":"remote","version":"0.4.0","prevVersion":"0.2.0","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/SiliconAnalysts/silicon-analysts-nextjs","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-30T01:40:01.509Z","id":"com.getstarhunt/starhunt","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-30T01:40:01.509Z","id":"com.koynfx/mcp","kind":"remote","version":"1.0.1","prevVersion":"1.0.1","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-30T01:40:01.509Z","id":"io.github.Arzuo/entity-evidence","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-30T01:40:01.509Z","id":"io.github.jackculpan/awardtravelfinder","kind":"remote","version":"0.1.0","prevVersion":"0.1.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-30T01:40:01.509Z","id":"io.github.jackculpan/flightqueue","kind":"remote","version":"0.1.0","prevVersion":"0.1.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-30T01:40:01.509Z","id":"io.github.jackculpan/flightseatmap","kind":"remote","version":"4.1.0","prevVersion":"4.1.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-30T01:40:01.509Z","id":"org.randpaulcovid/reading-room","kind":"remote","version":"1.1.0","prevVersion":"1.1.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-30T01:40:01.509Z","id":"pro.theblackbook/advisor","kind":"remote","version":"1.0.1","prevVersion":"1.0.1","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-30T01:40:01.509Z","id":"systems.blacklake/gateway","kind":"npm","version":"1.2.0","prevVersion":"1.2.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-30T01:40:01.509Z","id":"uk.plott/mcp","kind":"remote","version":"1.0.1","prevVersion":"1.0.1","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-30T01:33:01.378Z","id":"alvin-bot","kind":"npm","version":"5.103.0","prevVersion":"5.101.2","weeklyDownloads":14362,"type":"repo_removed","severity":"high","from":"git+https://github.com/alvbln/Alvin-Bot.git","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-29T01:40:02.487Z","id":"com.lockally/email","kind":"remote","version":"1.0.1","prevVersion":"1.0.0","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/ucheigwedinma/lockally","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-29T01:40:02.487Z","id":"io.github.r2hb-assistant/propscorer","kind":"remote","version":"0.1.1","prevVersion":"0.1.0","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/r2hb-assistant/propscorer","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-29T01:40:02.487Z","id":"sh.stipple/openwarrant","kind":"remote","version":"0.3.0","prevVersion":"0.2.2","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/Sketchjar/openwarrant","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-29T01:40:02.487Z","id":"sh.stipple/openwarrant-aitext","kind":"remote","version":"0.1.6","prevVersion":"0.1.2","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/Sketchjar/openwarrant","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-29T01:40:02.487Z","id":"sh.stipple/openwarrant-verify","kind":"remote","version":"0.1.4","prevVersion":"0.1.2","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/Sketchjar/openwarrant","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-29T01:40:02.487Z","id":"com.flightmussy/flightmussy","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-29T01:40:02.487Z","id":"com.mcpsearchconsole/search-console","kind":"remote","version":"0.4.2","prevVersion":"0.4.2","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-29T01:40:02.487Z","id":"io.github.ioai-labs/neo","kind":"remote","version":"1.1.0","prevVersion":"1.1.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-29T01:40:02.487Z","id":"io.github.krasnoperov/usertold","kind":"remote","version":"1.24.1","prevVersion":"1.24.1","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-29T01:40:02.487Z","id":"io.github.loosewired/continuity","kind":"remote","version":"0.5.2","prevVersion":"0.5.2","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-29T01:40:02.487Z","id":"io.github.truecalc/truecalc-mcp","kind":"unknown","version":"8.2.0","prevVersion":"8.2.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-29T01:40:02.487Z","id":"nl.muralists/directory","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-29T01:33:01.398Z","id":"@bangdao-ai/acw-tools","kind":"npm","version":"1.13.68","prevVersion":"1.13.66","weeklyDownloads":13564,"type":"maintainer_changed","severity":"high","from":"baigod, cocowangruixue, jingli.chang, shaoshuai.liu, sunyuanyue, ypsoul","to":"baigod, cocowangruixue, cocowangruixue2, jingli.chang, shaoshuai.liu, sunyuanyue, ypsoul","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-29T01:33:01.398Z","id":"@gjsify/devtools-protocol","kind":"npm","version":"0.44.0","prevVersion":"0.44.0","weeklyDownloads":793,"type":"maintainer_changed","severity":"high","from":"ewlsh, jumplink, schanz","to":"jumplink","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-29T01:33:01.398Z","id":"@gjsify/devtools","kind":"npm","version":"0.44.0","prevVersion":"0.44.0","weeklyDownloads":null,"type":"maintainer_changed","severity":"high","from":"ewlsh, jumplink, schanz","to":"jumplink","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-29T01:33:01.398Z","id":"@gjsify/devtools-cdp","kind":"npm","version":"0.44.0","prevVersion":"0.44.0","weeklyDownloads":515,"type":"maintainer_changed","severity":"high","from":"ewlsh, jumplink, schanz","to":"jumplink","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-29T01:33:01.398Z","id":"@gjsify/devtools-mcp","kind":"npm","version":"0.44.0","prevVersion":"0.44.0","weeklyDownloads":499,"type":"maintainer_changed","severity":"high","from":"ewlsh, jumplink, schanz","to":"jumplink","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-29T01:33:01.398Z","id":"@gjsify/devtools-browser","kind":"npm","version":"0.44.0","prevVersion":"0.44.0","weeklyDownloads":490,"type":"maintainer_changed","severity":"high","from":"ewlsh, jumplink, schanz","to":"jumplink","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-29T01:33:01.398Z","id":"@gjsify/devtools-nativescript","kind":"npm","version":"0.44.0","prevVersion":"0.44.0","weeklyDownloads":501,"type":"maintainer_changed","severity":"high","from":"ewlsh, jumplink, schanz","to":"jumplink","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-28T03:40:03.792Z","id":"com.delvynstudio/mcp","kind":"remote","version":"1.0.1","prevVersion":"1.0.1","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-28T03:40:03.792Z","id":"io.github.AlpayC/mcp-abfall","kind":"remote","version":"0.1.0","prevVersion":"0.1.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-28T03:40:03.792Z","id":"io.okrstud/mcp","kind":"remote","version":"1.0.1","prevVersion":"1.0.1","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-28T03:30:04.233Z","id":"@hubspot/mcp-server","kind":"npm","version":"0.4.0","prevVersion":"0.4.0","weeklyDownloads":null,"type":"maintainer_changed","severity":"high","from":"akuhl-hubspot, also, amead_hs, ankim, arota-hubspot, asliu, asun1234, atanasiuk, banderson, bash-hs, bent0b0x, bkrainer-hs, blamattina_hubspot, bmadgett, bmatto_hs, bpuseyhs, brodgers16, brwilson, bvandyck, camdenphalen","to":"akuhl-hubspot, also, amead_hs, ankim, asliu, asun1234, atanasiuk, banderson, bash-hs, bent0b0x, bkrainer-hs, blamattina_hubspot, bmadgett, bmatto_hs, bpuseyhs, brodgers16, brwilson, bvandyck, camdenphalen, elingyr","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-28T03:30:04.233Z","id":"@taptap/maker","kind":"npm","version":"0.0.32","prevVersion":"0.0.32","weeklyDownloads":6034,"type":"maintainer_changed","severity":"high","from":"apollopy-xd, hellovass, icepro-taptap, lcxd, mikoto_zero, taptap-passport, xdanger, xianli, zhoufeng7z7","to":"apollopy-xd, hellovass, icepro-taptap, mikoto_zero, noahsheng, taptap-passport, xdanger, xianli, zhoufeng7z7","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-28T03:30:04.233Z","id":"@powerhousedao/reactor-mcp","kind":"npm","version":"6.2.1","prevVersion":"6.2.1","weeklyDownloads":null,"type":"maintainer_changed","severity":"high","from":"acaldas.powerhouse, callme-t, froid, liberuum, memo.dev, ph-thegoldenmule, prometheus-ph, ryanwolhuter","to":"acaldas.powerhouse, callme-t, froid, liberuum, memo.dev, ph-thegoldenmule, prometheus-ph","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-28T03:30:04.233Z","id":"@armature-tech/mcp-analytics","kind":"npm","version":"0.6.37","prevVersion":"0.6.37","weeklyDownloads":2350,"type":"maintainer_changed","severity":"high","from":"benjamarmature","to":"benjamarmature, theotzen","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-28T03:30:04.233Z","id":"@seed-design/docs-mcp","kind":"npm","version":"0.7.0","prevVersion":"0.7.0","weeklyDownloads":2293,"type":"maintainer_changed","severity":"high","from":"cometkim, daangn-oss, junghyeonsu, te6","to":"cometkim, daangn-oss, imch, junghyeonsu, te6","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-28T03:30:04.233Z","id":"jazz-ai","kind":"npm","version":"0.15.8","prevVersion":"0.15.6","weeklyDownloads":null,"type":"install_script_added","severity":"high","from":"none","to":"present","headline":"Install script added: arbitrary code now runs on `npm i` — it was not there in 0.15.6."},{"at":"2026-08-28T03:30:04.233Z","id":"jazz-ai","kind":"npm","version":"0.15.8","prevVersion":"0.15.6","weeklyDownloads":null,"type":"verdict_worsened","severity":"high","from":"safe","to":"avoid","headline":"Verdict worsened: safe → avoid (score 86 → 50)."},{"at":"2026-08-28T03:30:04.233Z","id":"vision-relay","kind":"npm","version":"0.12.15","prevVersion":"0.11.1","weeklyDownloads":null,"type":"maintainer_changed","severity":"high","from":"nam1010082085","to":"apform-ui","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-27T04:05:03.175Z","id":"gmail","kind":"skill","version":"1.1.0","prevVersion":"1.0.9","totalDownloads":38807,"type":"skill_instructions_changed","severity":"high","from":"Gmail API integration with managed OAuth. Read, send, and manage emails, threads, labels, and drafts. Use this skill…","to":"Gmail API integration with managed OAuth. Read, send, and manage emails, threads, labels, and drafts. Use this skill…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 282 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"youtube-api-skill","kind":"skill","version":"1.1.0","prevVersion":"1.0.6","totalDownloads":27741,"type":"skill_instructions_changed","severity":"high","from":"YouTube Data API integration with managed OAuth. Search videos, manage playlists, access channel data, and interact…","to":"YouTube Data API integration with managed OAuth. Search videos, manage playlists, access channel data, and interact…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 282 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"microsoft-excel","kind":"skill","version":"1.1.0","prevVersion":"1.0.4","totalDownloads":26697,"type":"skill_instructions_changed","severity":"high","from":"Microsoft Excel API integration with managed OAuth. Read and write Excel workbooks, worksheets, ranges, tables, and…","to":"Microsoft Excel API integration with managed OAuth. Read and write Excel workbooks, worksheets, ranges, tables, and…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 867 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"outlook-api","kind":"skill","version":"1.1.0","prevVersion":"1.0.6","totalDownloads":23477,"type":"skill_instructions_changed","severity":"high","from":"Microsoft Outlook API integration with managed OAuth. Read, send, and manage emails, folders, calendar events, and…","to":"Microsoft Outlook API integration with managed OAuth. Read, send, and manage emails, folders, calendar events, and…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 282 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"whatsapp-business","kind":"skill","version":"1.1.1","prevVersion":"1.0.4","totalDownloads":23284,"type":"skill_instructions_changed","severity":"high","from":"WhatsApp Business API integration with managed OAuth. Send messages, manage templates, and handle conversations. Use…","to":"WhatsApp Business API integration with managed OAuth. Send messages, manage templates, and handle conversations. Use…","headline":"The instructions this skill feeds to the model changed in 1.1.1. The text grew by 534 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"stripe-api","kind":"skill","version":"1.1.1","prevVersion":"1.0.11","totalDownloads":21675,"type":"skill_instructions_changed","severity":"high","from":"Stripe API integration with managed OAuth. This is a write-capable financial integration for customers, subscriptions,…","to":"Stripe API integration with managed OAuth. This is a write-capable financial integration for customers, subscriptions,…","headline":"The instructions this skill feeds to the model changed in 1.1.1. The text grew by 205 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"google-slides","kind":"skill","version":"1.1.0","prevVersion":"1.0.4","totalDownloads":19704,"type":"skill_instructions_changed","severity":"high","from":"Google Slides API integration with managed OAuth. Create presentations, add slides, insert content, and manage slide…","to":"Google Slides API integration with managed OAuth. Create presentations, add slides, insert content, and manage slide…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 699 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"xero","kind":"skill","version":"1.1.0","prevVersion":"1.0.5","totalDownloads":19519,"type":"skill_instructions_changed","severity":"high","from":"Xero API integration with managed OAuth. Manage contacts, invoices, payments, accounts, and run financial reports. Use…","to":"Xero API integration with managed OAuth. Manage contacts, invoices, payments, accounts, and run financial reports. Use…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 685 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"salesforce-api","kind":"skill","version":"1.1.0","prevVersion":"1.0.8","totalDownloads":19332,"type":"skill_instructions_changed","severity":"high","from":"Salesforce CRM API integration with managed OAuth. Install only if you need Salesforce CRM administration. Connect with…","to":"Salesforce CRM API integration with managed OAuth. Install only if you need Salesforce CRM administration. Connect with…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 533 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"typeform","kind":"skill","version":"1.1.0","prevVersion":"1.0.5","totalDownloads":18989,"type":"skill_instructions_changed","severity":"high","from":"Typeform API integration with managed OAuth. Create forms, manage responses, and access insights. Use this skill when…","to":"Typeform API integration with managed OAuth. Create forms, manage responses, and access insights. Use this skill when…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 671 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"clickup-api","kind":"skill","version":"1.1.0","prevVersion":"1.0.5","totalDownloads":18592,"type":"skill_instructions_changed","severity":"high","from":"ClickUp API integration with managed OAuth. Access tasks, lists, folders, spaces, workspaces, users, and manage…","to":"ClickUp API integration with managed OAuth. Access tasks, lists, folders, spaces, workspaces, users, and manage…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 771 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"calendly-api","kind":"skill","version":"1.1.0","prevVersion":"1.0.4","totalDownloads":18458,"type":"skill_instructions_changed","severity":"high","from":"Calendly API integration with managed OAuth. Access event types, scheduled events, invitees, availability, and manage…","to":"Calendly API integration with managed OAuth. Access event types, scheduled events, invitees, availability, and manage…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 829 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"google-meet","kind":"skill","version":"1.1.0","prevVersion":"1.0.5","totalDownloads":18430,"type":"skill_instructions_changed","severity":"high","from":"Google Meet API integration with managed OAuth. Create meeting spaces, list conference records, and manage meeting…","to":"Google Meet API integration with managed OAuth. Create meeting spaces, list conference records, and manage meeting…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 695 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"github-api","kind":"skill","version":"1.1.0","prevVersion":"1.0.7","totalDownloads":18366,"type":"skill_instructions_changed","severity":"high","from":"GitHub API integration with managed OAuth. Access repositories, issues, pull requests, commits, branches, and users.…","to":"GitHub API integration with managed OAuth. Access repositories, issues, pull requests, commits, branches, and users.…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 323 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"asana-api","kind":"skill","version":"1.1.0","prevVersion":"1.0.6","totalDownloads":18276,"type":"skill_instructions_changed","severity":"high","from":"Asana API integration with managed OAuth. Access tasks, projects, workspaces, users, and manage webhooks. Use this…","to":"Asana API integration with managed OAuth. Access tasks, projects, workspaces, users, and manage webhooks. Use this…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 288 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"google-workspace-admin","kind":"skill","version":"1.1.0","prevVersion":"1.0.7","totalDownloads":18263,"type":"skill_instructions_changed","severity":"high","from":"Google Workspace Admin SDK integration with managed OAuth. This is a write-capable administrative integration for…","to":"Google Workspace Admin SDK integration with managed OAuth. This is a write-capable administrative integration for…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 1409 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"trello-api","kind":"skill","version":"1.1.0","prevVersion":"1.0.6","totalDownloads":17804,"type":"skill_instructions_changed","severity":"high","from":"Trello API integration with managed OAuth. Manage boards, lists, cards, members, and labels. Use this skill when users…","to":"Trello API integration with managed OAuth. Manage boards, lists, cards, members, and labels. Use this skill when users…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 282 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"fathom-api","kind":"skill","version":"1.1.0","prevVersion":"1.0.6","totalDownloads":17746,"type":"skill_instructions_changed","severity":"high","from":"Fathom API integration with managed OAuth. Access meeting recordings, transcripts, summaries, and manage webhooks. Use…","to":"Fathom API integration with managed OAuth. Access meeting recordings, transcripts, summaries, and manage webhooks. Use…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 803 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"klaviyo","kind":"skill","version":"1.1.0","prevVersion":"1.0.5","totalDownloads":17482,"type":"skill_instructions_changed","severity":"high","from":"Klaviyo API integration with managed OAuth. Access profiles, lists, segments, campaigns, flows, events, metrics,…","to":"Klaviyo API integration with managed OAuth. Access profiles, lists, segments, campaigns, flows, events, metrics,…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 832 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"mailchimp","kind":"skill","version":"1.1.0","prevVersion":"1.0.4","totalDownloads":17257,"type":"skill_instructions_changed","severity":"high","from":"Mailchimp Marketing API integration with managed OAuth. Access audiences, campaigns, templates, automations, reports,…","to":"Mailchimp Marketing API integration with managed OAuth. Access audiences, campaigns, templates, automations, reports,…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 810 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"pipedrive-api","kind":"skill","version":"1.1.0","prevVersion":"1.0.4","totalDownloads":16893,"type":"skill_instructions_changed","severity":"high","from":"Pipedrive API integration with managed OAuth. Manage deals, persons, organizations, activities, and pipelines. Use this…","to":"Pipedrive API integration with managed OAuth. Manage deals, persons, organizations, activities, and pipelines. Use this…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 663 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"google-play","kind":"skill","version":"1.1.0","prevVersion":"1.0.4","totalDownloads":16808,"type":"skill_instructions_changed","severity":"high","from":"Google Play Developer API (Android Publisher) integration with managed OAuth. Manage apps, subscriptions, in-app…","to":"Google Play Developer API (Android Publisher) integration with managed OAuth. Manage apps, subscriptions, in-app…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 762 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"google-sheets","kind":"skill","version":"1.1.0","prevVersion":"1.0.9","totalDownloads":15714,"type":"skill_instructions_changed","severity":"high","from":"Google Sheets API integration with managed OAuth. Read and write spreadsheet data, create sheets, apply formatting, and…","to":"Google Sheets API integration with managed OAuth. Read and write spreadsheet data, create sheets, apply formatting, and…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 284 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"monday","kind":"skill","version":"1.1.0","prevVersion":"1.0.4","totalDownloads":15663,"type":"skill_instructions_changed","severity":"high","from":"Monday.com API integration with managed OAuth. Manage boards, items, columns, groups, and workspaces using GraphQL. Use…","to":"Monday.com API integration with managed OAuth. Manage boards, items, columns, groups, and workspaces using GraphQL. Use…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 895 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"google-drive","kind":"skill","version":"1.1.0","prevVersion":"1.0.9","totalDownloads":15464,"type":"skill_instructions_changed","severity":"high","from":"Google Drive API integration with managed OAuth. List, search, create, and manage files and folders. Use this skill…","to":"Google Drive API integration with managed OAuth. List, search, create, and manage files and folders. Use this skill…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 282 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"woocommerce","kind":"skill","version":"1.1.0","prevVersion":"1.0.5","totalDownloads":15360,"type":"skill_instructions_changed","severity":"high","from":"WooCommerce REST API integration with managed OAuth. Access products, orders, customers, coupons, shipping, taxes,…","to":"WooCommerce REST API integration with managed OAuth. Access products, orders, customers, coupons, shipping, taxes,…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 1573 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"zoho-mail","kind":"skill","version":"1.1.0","prevVersion":"1.0.6","totalDownloads":14355,"type":"skill_instructions_changed","severity":"high","from":"Zoho Mail API integration with managed OAuth. Send, receive, and manage emails, folders, and labels. Use this skill…","to":"Zoho Mail API integration with managed OAuth. Send, receive, and manage emails, folders, and labels. Use this skill…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 851 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"linear-api","kind":"skill","version":"1.1.0","prevVersion":"1.0.6","totalDownloads":14298,"type":"skill_instructions_changed","severity":"high","from":"Linear API integration with managed OAuth. Query and manage issues, projects, teams, cycles, and labels using GraphQL.…","to":"Linear API integration with managed OAuth. Query and manage issues, projects, teams, cycles, and labels using GraphQL.…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 370 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"zoho-crm","kind":"skill","version":"1.1.0","prevVersion":"1.0.5","totalDownloads":14199,"type":"skill_instructions_changed","severity":"high","from":"Zoho CRM API integration with managed OAuth. Manage leads, contacts, accounts, deals, and other CRM records. Use this…","to":"Zoho CRM API integration with managed OAuth. Manage leads, contacts, accounts, deals, and other CRM records. Use this…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 1042 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"zoho-inventory","kind":"skill","version":"1.1.0","prevVersion":"1.0.4","totalDownloads":13578,"type":"skill_instructions_changed","severity":"high","from":"Zoho Inventory API integration with managed OAuth. Manage items, sales orders, invoices, purchase orders, bills,…","to":"Zoho Inventory API integration with managed OAuth. Manage items, sales orders, invoices, purchase orders, bills,…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 1043 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"attio-api","kind":"skill","version":"1.1.0","prevVersion":"1.0.5","totalDownloads":13503,"type":"skill_instructions_changed","severity":"high","from":"Attio API integration with managed OAuth. Manage CRM data including people, companies, and custom objects. Use this…","to":"Attio API integration with managed OAuth. Manage CRM data including people, companies, and custom objects. Use this…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 831 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"zoho-calendar","kind":"skill","version":"1.1.1","prevVersion":"1.0.4","totalDownloads":13469,"type":"skill_instructions_changed","severity":"high","from":"Zoho Calendar API integration with managed OAuth. Manage calendars and events with full scheduling capabilities. Use…","to":"Zoho Calendar API integration with managed OAuth. Manage calendars and events with full scheduling capabilities.\nUse…","headline":"The instructions this skill feeds to the model changed in 1.1.1. The text grew by 598 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"zoho-recruit","kind":"skill","version":"1.1.2","prevVersion":"1.0.4","totalDownloads":13392,"type":"skill_instructions_changed","severity":"high","from":"Zoho Recruit API integration with managed OAuth. Manage candidates, job openings, interviews, and recruitment…","to":"Zoho Recruit API integration with managed OAuth. Manage candidates, job openings, interviews, and recruitment…","headline":"The instructions this skill feeds to the model changed in 1.1.2. The text grew by 801 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"zoho-people","kind":"skill","version":"1.1.0","prevVersion":"1.0.5","totalDownloads":13251,"type":"skill_instructions_changed","severity":"high","from":"Zoho People API integration with managed OAuth. Manage employees, departments, designations, attendance, leave, and…","to":"Zoho People API integration with managed OAuth. Manage employees, departments, designations, attendance, leave, and…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 1427 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"zoho-bigin","kind":"skill","version":"1.1.0","prevVersion":"1.0.4","totalDownloads":13244,"type":"skill_instructions_changed","severity":"high","from":"Zoho Bigin API integration with managed OAuth. Manage contacts, companies, pipelines, and products in Bigin CRM. Use…","to":"Zoho Bigin API integration with managed OAuth. Manage contacts, companies, pipelines, and products in Bigin CRM. Use…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 885 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"linkedin-api","kind":"skill","version":"1.1.0","prevVersion":"1.0.10","totalDownloads":12803,"type":"skill_instructions_changed","severity":"high","from":"LinkedIn API integration with managed OAuth. Share posts, manage profile, and access LinkedIn features.\nUse this skill…","to":"LinkedIn API integration with managed OAuth. Share posts, manage profile, and access LinkedIn features. Use this skill…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 542 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"google-analytics","kind":"skill","version":"1.1.0","prevVersion":"1.0.12","totalDownloads":12023,"type":"skill_instructions_changed","severity":"high","from":"Google Analytics API integration with managed OAuth. This skill includes two separate APIs: the Admin API…","to":"Google Analytics API integration with managed OAuth. This skill includes two separate APIs: the Admin API…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 1381 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"google-calendar-api","kind":"skill","version":"1.1.0","prevVersion":"1.0.8","totalDownloads":11208,"type":"skill_instructions_changed","severity":"high","from":"Google Calendar API integration with managed OAuth. Create events, list calendars, check availability, and manage…","to":"Google Calendar API integration with managed OAuth. Create events, list calendars, check availability, and manage…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 282 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T04:05:03.175Z","id":"notion-api-skill","kind":"skill","version":"1.1.0","prevVersion":"1.0.11","totalDownloads":10881,"type":"skill_instructions_changed","severity":"high","from":"Notion API integration with managed OAuth. Query databases, search pages, and read workspace content. Write operations…","to":"Notion API integration with managed OAuth. Query databases, search pages, and read workspace content. Write operations…","headline":"The instructions this skill feeds to the model changed in 1.1.0. The text grew by 359 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-27T03:40:03.786Z","id":"ai.forkmate/forkmate","kind":"remote","version":"0.1.4","prevVersion":"0.1.3","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/shawnazar/forkmate","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-27T03:40:03.786Z","id":"com.htmlvault/htmlvault","kind":"remote","version":"1.0.1","prevVersion":"1.0.0","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/rwesleyevans/HTMLvault","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-27T03:40:03.786Z","id":"io.github.huangdun/tempmd","kind":"npm","version":"0.4.0","prevVersion":"0.4.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-27T03:30:04.668Z","id":"suppa-mcp-2","kind":"npm","version":"1.16.1","prevVersion":"1.14.0","weeklyDownloads":1011,"type":"install_script_added","severity":"high","from":"none","to":"present","headline":"Install script added: arbitrary code now runs on `npm i` — it was not there in 1.14.0."},{"at":"2026-08-27T03:30:04.668Z","id":"suppa-mcp-2","kind":"npm","version":"1.16.1","prevVersion":"1.14.0","weeklyDownloads":1011,"type":"verdict_worsened","severity":"high","from":"safe","to":"avoid","headline":"Verdict worsened: safe → avoid (score 92 → 62)."},{"at":"2026-08-26T17:58:07.176Z","id":"com.flightpowers/freemium-google-flights-and-booking","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-26T17:58:07.176Z","id":"io.github.0200project/base-tx-explain","kind":"remote","version":"0.1.3","prevVersion":"0.1.3","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-26T17:58:07.176Z","id":"io.github.firatciftci/valetkey","kind":"npm","version":"0.10.2","prevVersion":"0.10.2","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-26T17:58:07.176Z","id":"io.github.krasnoperov/makefx","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-26T17:58:07.176Z","id":"io.github.nexus-mcp-infra/agent-verification-api","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-26T17:58:07.176Z","id":"io.github.nexus-mcp-infra/document-conversion-api","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-26T17:58:07.176Z","id":"io.github.nexus-mcp-infra/url-metadata-api","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-26T17:58:07.176Z","id":"one.everstake/mcp","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-26T04:05:04.505Z","id":"api-gateway","kind":"skill","version":"1.0.151","prevVersion":"1.0.146","totalDownloads":86015,"type":"skill_instructions_changed","severity":"high","from":"Call third-party APIs through the Maton gateway, which injects the credential for an app the user has already…","to":"Call third-party APIs through the Maton gateway, which injects the credential for an app the user has already…","headline":"The instructions this skill feeds to the model changed in 1.0.151. The text grew by 151 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-26T03:40:03.513Z","id":"ai.nexez/commerce","kind":"remote","version":"1.1.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/Flyger1an/nexez","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-26T03:40:03.513Z","id":"io.github.treza-labs/treza","kind":"remote","version":"1.0.0","prevVersion":"0.1.1","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/treza-labs/treza-sdk","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-26T03:40:03.513Z","id":"com.spytrend/ad-spy","kind":"remote","version":"1.1.0","prevVersion":"1.1.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-26T03:40:03.513Z","id":"io.github.Itr3k/axiom-x402-payment-relay","kind":"remote","version":"0.1.0","prevVersion":"0.1.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-26T03:40:03.513Z","id":"io.github.RuyaaCapital-admin/socializioz-chatgpt-mcp","kind":"remote","version":"1.0.2","prevVersion":"1.0.2","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-26T03:40:03.513Z","id":"io.github.bibi-bambi/skanfirmy","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-26T03:40:03.513Z","id":"io.github.devziqin/transcript","kind":"remote","version":"1.0.1","prevVersion":"1.0.1","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-26T03:40:03.513Z","id":"io.github.michal-lefler/secureflows-mcp-server","kind":"remote","version":"0.2.0","prevVersion":"0.2.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-26T03:40:03.513Z","id":"io.github.parikshitmadahar/rightcard-mcp","kind":"npm","version":"0.1.1","prevVersion":"0.1.1","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-26T03:40:03.513Z","id":"io.github.sbanerjee1875/financegenius","kind":"remote","version":"1.1.0","prevVersion":"1.1.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-26T03:40:03.513Z","id":"io.github.vitaliyino/scority","kind":"unknown","version":"0.1.2","prevVersion":"0.1.2","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-26T03:30:04.685Z","id":"mcp-remote","kind":"npm","version":"0.2.5","prevVersion":"0.2.1","weeklyDownloads":1352008,"type":"maintainer_changed","severity":"high","from":"geelen, punkpeye, threepointone","to":"punkpeye","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-26T03:30:04.685Z","id":"@cognium-ai/mcp-server","kind":"npm","version":"4.7.0","prevVersion":"4.6.1","weeklyDownloads":1597,"type":"maintainer_changed","severity":"high","from":"openmason","to":"elarasu, openmason","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-26T03:30:04.685Z","id":"@mirofish-ai/pi-gui-use","kind":"npm","version":"0.0.13","prevVersion":"0.0.13","weeklyDownloads":null,"type":"maintainer_changed","severity":"high","from":"fulin.xiang, iloveacm, jiayingshen, mirofish, shuozhen.wang.shanda, shuxiuzhang, tangao, xinyali","to":"fulin.xiang, iloveacm, jiayingshen, jsx3323, mirofish, shuozhen.wang.shanda, shuxiuzhang, xinyali","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-25T03:40:03.123Z","id":"com.loppee/loppee","kind":"remote","version":"0.1.3","prevVersion":"0.1.1","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/4dwebspro-cell/ylai-platform","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-25T03:40:03.123Z","id":"com.smklog/parcel-quotes","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-25T03:40:03.123Z","id":"com.uicockpit/mcp","kind":"npm","version":"0.5.1","prevVersion":"0.5.1","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-25T03:40:03.123Z","id":"io.github.RhythmP28/magic-hour","kind":"remote","version":"3.4.7","prevVersion":"3.4.7","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-25T03:30:04.977Z","id":"@ibm/ibmi-mcp-server","kind":"npm","version":"0.5.1","prevVersion":"0.5.1","weeklyDownloads":776,"type":"maintainer_changed","severity":"high","from":"adamshedivy, aifound, calanais, carbon-design-system, cmarcink, edmund.reinhardt, gcattan, ibm-bamoeci, idan_ibm, jjasghar, joesepi, jonnyzak32, michael.froend, mmcelaney, odfbackuprestore, phaumer, sanjula.ganepola.ibm, tay1orjones, yihongwang","to":"adamshedivy, aifound, calanais, carbon-design-system, cmarcink, edmund.reinhardt, gcattan, ibm-bamoeci, idan_ibm, jjasghar, joesepi, jonnyzak32, michael.froend, mmcelaney, odfbackuprestore, phaumer, sanjula.ganepola.ibm, yihongwang","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-24T03:40:04.452Z","id":"com.astranl/mcp","kind":"remote","version":"1.35.7","prevVersion":"1.34.0","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/ASTRANL/astranl-mcp","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-24T03:40:04.452Z","id":"com.dyndns-server.noon-ai/automatic-face-anonymization-mcp","kind":"remote","version":"0.1.12","prevVersion":"0.1.10","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/MHNCity/noonai-dis-mcp-server","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-24T03:40:04.452Z","id":"com.dyndns-server.noon-ai/face-blur-redaction-mcp","kind":"remote","version":"0.1.12","prevVersion":"0.1.9","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/MHNCity/noonai-dis-mcp-server","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-24T03:40:04.452Z","id":"com.dyndns-server.noon-ai/face-detection-anonymization-mcp","kind":"remote","version":"0.1.12","prevVersion":"0.1.11","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/MHNCity/noonai-dis-mcp-server","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-24T03:40:04.452Z","id":"com.dyndns-server.noon-ai/image-video-anonymization-mcp","kind":"remote","version":"0.1.12","prevVersion":"0.1.8","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/MHNCity/noonai-dis-mcp-server","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-24T03:40:04.452Z","id":"com.dyndns-server.noon-ai/noonai-dis-mcp-server","kind":"remote","version":"0.1.12","prevVersion":"0.1.8","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/MHNCity/noonai-dis-mcp-server","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-24T03:40:04.452Z","id":"com.dyndns-server.noon-ai/video-anonymization-mcp","kind":"remote","version":"0.1.12","prevVersion":"0.1.8","weeklyDownloads":null,"type":"repo_removed","severity":"high","from":"https://github.com/MHNCity/noonai-dis-mcp-server","to":null,"headline":"Repository link removed — the source can no longer be reviewed."},{"at":"2026-08-24T03:40:04.452Z","id":"io.github.applefanaimail-blip/bridgenode-mcp","kind":"npm","version":"1.0.11","prevVersion":"1.0.11","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-24T03:40:04.452Z","id":"io.github.molkex/openflow","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-24T03:40:04.452Z","id":"io.github.riverliu8/pptogo-mcp","kind":"remote","version":"1.0.0","prevVersion":"1.0.0","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-24T03:40:04.452Z","id":"io.github.samuelbushi/uizze","kind":"remote","version":"1.1.12","prevVersion":"1.1.12","weeklyDownloads":null,"type":"unpublished","severity":"high","headline":"Package removed from npm — installs will break, and the name is now free for anyone to claim."},{"at":"2026-08-22T04:05:03.474Z","id":"api-gateway","kind":"skill","version":"1.0.146","prevVersion":"1.0.141","totalDownloads":85886,"type":"skill_instructions_changed","severity":"high","from":"Connect to external services through Maton-managed API routes. Use this skill only after the user names the target app,…","to":"Call third-party APIs through the Maton gateway, which injects the credential for an app the user has already…","headline":"The instructions this skill feeds to the model changed in 1.0.146. The text grew by 517 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-22T03:30:04.513Z","id":"mcp-remote","kind":"npm","version":"0.1.43","prevVersion":"0.1.38","weeklyDownloads":511861,"type":"maintainer_changed","severity":"high","from":"geelen, threepointone","to":"geelen, punkpeye, threepointone","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-22T03:30:04.513Z","id":"agentmail-mcp","kind":"npm","version":"1.0.2","prevVersion":"1.0.2","weeklyDownloads":8315,"type":"maintainer_changed","severity":"high","from":"agentmail-admin, harry0915, josephmaregn, krishavg, sanjith_sambath, tanishq-atm","to":"agentmail-admin, harry0915, josephmaregn, krishavg, sanjith_sambath, shabs_agentmail, tanishq-atm","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-22T03:30:04.513Z","id":"@doist/todoist-mcp","kind":"npm","version":"13.0.0","prevVersion":"13.0.0","weeklyDownloads":null,"type":"maintainer_changed","severity":"high","from":"antondoist, dmgawel, doistbot, ernestodoist, fbidu, goncalossilva, henningmu, jefcurtis, jvalente, omar.doist.com, ricardoist, scottatdoist","to":"antondoist, craigcarlyle, dmgawel, doistbot, ernestodoist, fbidu, goncalossilva, henningmu, jefcurtis, jvalente, omar.doist.com, ricardoist, scottatdoist","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-22T03:30:04.513Z","id":"genexus-mcp","kind":"npm","version":"2.44.1","prevVersion":"2.43.0","weeklyDownloads":2462,"type":"install_script_added","severity":"high","from":"none","to":"present","headline":"Install script added: arbitrary code now runs on `npm i` — it was not there in 2.43.0."},{"at":"2026-08-22T03:30:04.513Z","id":"genexus-mcp","kind":"npm","version":"2.44.1","prevVersion":"2.43.0","weeklyDownloads":2462,"type":"verdict_worsened","severity":"high","from":"safe","to":"avoid","headline":"Verdict worsened: safe → avoid (score 86 → 70)."},{"at":"2026-08-21T03:30:06.241Z","id":"@slashfi/agents-sdk","kind":"npm","version":"0.91.0","prevVersion":"0.91.0","weeklyDownloads":13121,"type":"maintainer_changed","severity":"high","from":"kevinbai0, slashfinancial, slashwaseem","to":"kevinbai0, slashfinancial, slashjoseph, slashwaseem","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-21T03:30:06.241Z","id":"@ecosyste-ms/mcp","kind":"npm","version":"1.0.2","prevVersion":"1.0.2","weeklyDownloads":992,"type":"maintainer_changed","severity":"high","from":"andrewnez","to":"andrewnez, codeshark","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-20T04:05:03.384Z","id":"planning-with-files","kind":"skill","version":"3.10.2","prevVersion":"3.0.0","totalDownloads":37078,"type":"skill_instructions_changed","severity":"high","from":"Implements Manus-style file-based planning to organize and track progress on complex tasks. Creates task_plan.md,…","to":"Manus-style persistent file-based planning for AI coding agents: keeps task_plan.md, findings.md, and progress.md on…","headline":"The instructions this skill feeds to the model changed in 3.10.2. The text grew by 480 characters. A skill's description is not documentation — the agent reads it and acts on it."},{"at":"2026-08-20T03:30:06.301Z","id":"@runpod/mcp-server","kind":"npm","version":"3.3.0","prevVersion":"3.3.0","weeklyDownloads":null,"type":"maintainer_changed","severity":"high","from":"audry-rp, deanq-runpod, donovan-clarke-runpod, ek-npm-runpod, ezekiel-runpod, j-musashi, jacob-cipar, jasonwang-runpod, jjmchew, larvey_runpod, lux.barker, owcramer, pdavenport02, pharmon-runpod, rambo-runpod, runpod-ebooks, runpod-official, velaraptor-runpod, zackmckennarunpod","to":"audry-rp, benb-runpod, deanq-runpod, donovan-clarke-runpod, ek-npm-runpod, ezekiel-runpod, j-musashi, jacob-cipar, jasonwang-runpod, jjmchew, larvey_runpod, lux.barker, owcramer, pdavenport02, pharmon-runpod, rambo-runpod, runpod-ebooks, runpod-official, velaraptor-runpod, zackmckennarunpod","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-20T03:30:06.301Z","id":"@ganintegrity/mcp","kind":"npm","version":"2.2.13","prevVersion":"2.2.13","weeklyDownloads":null,"type":"maintainer_changed","severity":"high","from":"adga, amarendrak, ang_mic, astojanova, atsg, boha1, brpi, bthomsen, carlo.tronnberg, casperguldberg, ccogan, claymayhem, cvillarreal, dnmllr_gan, gandevops, heko_gan, iakoulinine, iazogan, isza, ivizitiu13","to":"adga, amarendrak, astojanova, atsg, boha1, brpi, bthomsen, casperguldberg, ccogan, claymayhem, cvillarreal, dnmllr_gan, gandevops, heko_gan, iakoulinine, ivizitiu13, jach88, kallaben, lato.ganintegrity.com, li36","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-20T03:30:06.301Z","id":"@essentialai/cogent-bridge","kind":"npm","version":"3.20.2","prevVersion":"3.18.0","weeklyDownloads":null,"type":"install_script_added","severity":"high","from":"none","to":"present","headline":"Install script added: arbitrary code now runs on `npm i` — it was not there in 3.18.0."},{"at":"2026-08-20T03:30:06.301Z","id":"@essentialai/cogent-bridge","kind":"npm","version":"3.20.2","prevVersion":"3.18.0","weeklyDownloads":null,"type":"verdict_worsened","severity":"high","from":"safe","to":"avoid","headline":"Verdict worsened: safe → avoid (score 80 → 50)."},{"at":"2026-08-19T03:30:06.064Z","id":"@workos/mcp-docs-server","kind":"npm","version":"0.2.0","prevVersion":"0.2.0","weeklyDownloads":null,"type":"maintainer_changed","severity":"high","from":"gjtorikian, grinich, mark-workos, nicknisi, npm-workos, peakematt-workos","to":"gjtorikian, grinich, jacobia, jch-workos, mark-workos, nicknisi, npm-workos, peakematt-workos","headline":"Package ownership changed — whoever you trusted is no longer the one publishing it."},{"at":"2026-08-19T03:30:06.064Z","id":"termfleet","kind":"npm","version":"0.2.2","prevVersion":"0.2.1","weeklyDownloads":null,"type":"install_script_added","severity":"high","from":"none","to":"present","headline":"Install script added: arbitrary code now runs on `npm i` — it was not there in 0.2.1."},{"at":"2026-08-19T03:30:06.064Z","id":"termfleet","kind":"npm","version":"0.2.2","prevVersion":"0.2.1","weeklyDownloads":null,"type":"verdict_worsened","severity":"high","from":"safe","to":"avoid","headline":"Verdict worsened: safe → avoid (score 93 → 50)."}],"note":"Changes recorded in MCP packages over time: what turned dangerous after it was trusted. The series runs from the first snapshot and cannot be reconstructed after the fact."}