Every execution of a proof-of-concept package published to the public npm registry. Each source address is resolved to its reverse DNS and BGP origin, so a host inside a real organisation can be told apart from a supply-chain vendor's sandbox before anything reaches a disclosure report.
| Received (UTC) | Package | Source address | Network origin | Host | User | Registry configured | Verdict |
|---|