{"generatedAt":"2026-08-30T07:00:01.019Z","strata":[{"label":"GitHub Hunt (supply-chain)","checked":40,"unique":40,"inTF":0,"uniquePct":100},{"label":"Research imports","checked":0,"unique":0,"inTF":0,"uniquePct":null},{"label":"OTX (our pulses)","checked":30,"unique":29,"inTF":1,"uniquePct":97},{"label":"Bulletproof ASN shitlist","checked":20,"unique":20,"inTF":0,"uniquePct":100},{"label":"Honeypot catches","checked":15,"unique":15,"inTF":0,"uniquePct":100},{"label":"OSV malicious packages","checked":40,"unique":40,"inTF":0,"uniquePct":100,"structural":true}],"summary":{"totalSampled":145,"uniqueToUs":144,"uniquePct":99,"comparedAgainst":"ThreatFox (abuse.ch)","methodology":"Stratified sample of independently-sourced IOCs checked via ThreatFox search_ioc API","note":"Package uniqueness is structural — ThreatFox has no package feed. Network-IOC uniqueness is empirically sampled."},"source":"live"}