FlagThis
Threat Intelligence · preview, not yet indexed for search

🛡️ Sentinel

Automated package-squatting & slopsquatting detection signals across PyPI and npm.

ⓘ These are automated detection signals, not confirmed determinations. A flagged package or account may be a false positive, a compromised account, or otherwise unrelated to any wrongdoing by the individual named. Treat each finding as a lead to verify independently, not a verdict.
Threat Feed Flagged packages, sorted by risk score Top Emails Accounts most linked to flagged findings

Sorted by risk score. Filter with email:, domain:, or keyword: (comma = OR within a field, space = AND across fields), or a bare word for a package-name search. Click a package to see the signals behind its score before opening its registry page.

PackageEcosystem Verdict Score TargetedAuthorEmail domainSignalsAge
0.1.5
 pypi SUSPICIOUS 100 ripple Pavan Mishra pavanmishra@gmail.com gmail.com 0h
Claimed homepage: https://github.com/web-i/ripple
Matched naming pattern: python-ripple-webi
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 0
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Raw signal total: 105 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 0 files (UNKNOWN)
Automated signals flagged:
  • MEDIUMPackage name 'webi-ripple' matches AI hallucination template [python] + [ripple] + [webi].
  • HIGHClaims critical enterprise brand identity ('RIPPLE').
  • HIGHPublisher email 'pavanmishra@gmail.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMETADATA_UNAVAILABLE_OR_NO_SDIST
Static code signals:
  • METADATA_UNAVAILABLE_OR_NO_SDIST

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.0.1
 pypi SUSPICIOUS 100 google Luis San Pablo luis.sanpablo@utexas.edu utexas.edu 2h
Claimed homepage: https://github.com/Cheglader/GooglePlacesPython3Wrapper
Matched naming pattern: django-google-auth
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 0
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Raw signal total: 105 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 0 files (UNKNOWN)
Automated signals flagged:
  • MEDIUMPackage name 'google-places-python-3-wrapper' matches AI hallucination template [django] + [google] + [auth].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'luis.sanpablo@utexas.edu' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMETADATA_UNAVAILABLE_OR_NO_SDIST
Static code signals:
  • METADATA_UNAVAILABLE_OR_NO_SDIST

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.1
 pypi SQUATTED_STUB 100 ledger Jaymin Bhan jayminbhan@gmail.com gmail.com 4d
Claimed homepage: https://pypi.org/project/lm-eval-ledger/
Matched naming pattern: lm-ledger-ledger
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3
Raw signal total: 120 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 22 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'lm-eval-ledger' matches AI hallucination template [lm] + [ledger] + [ledger].
  • HIGHClaims critical enterprise brand identity ('LEDGER').
  • HIGHPublisher email 'jayminbhan@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (3 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 22 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.0.0
 pypi SQUATTED_STUB 100 solana — — 32d
Claimed homepage: https://pypi.org/project/blockaid-solana-disassembler/
Matched naming pattern: blockaid-solana-disassembler
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 32
Raw signal total: 105 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 57 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'blockaid-solana-disassembler' matches AI hallucination template [blockaid] + [solana] + [disassembler].
  • HIGHClaims critical enterprise brand identity ('SOLANA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (32 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 57 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.0.1
 pypi SQUATTED_STUB 100 claude — pypi@zeyi.fan zeyi.fan 53d
Claimed homepage: https://pypi.org/project/omnigent-claude/
Matched naming pattern: python-claude-omnigent
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 52
Raw signal total: 105 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 9 lines, 549 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'omnigent-claude' matches AI hallucination template [python] + [claude] + [omnigent].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'pypi@zeyi.fan' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (52 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (9 LOC, 1 file(s), 549 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.0
 pypi SQUATTED_STUB 100 anthropic Jacob Stewart jacob@swarmauri.com swarmauri.com 54d
Claimed homepage: https://pypi.org/project/swarmauri_llm_anthropic/
Matched naming pattern: swarmauri-anthropic-anthropic
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 156
Raw signal total: 105 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 620 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'swarmauri-llm-anthropic' matches AI hallucination template [swarmauri] + [anthropic] + [anthropic].
  • HIGHClaims critical enterprise brand identity ('ANTHROPIC').
  • HIGHPublisher email 'jacob@swarmauri.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (156 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (15 LOC, 3 file(s), 620 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.1
 pypi SQUATTED_STUB 100 crewai Tanmay Devare — 56d
Claimed homepage: https://pypi.org/project/snubber-crewai/
Matched naming pattern: python-crewai-snubber
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 56
Raw signal total: 120 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 3 lines, 31 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'snubber-crewai' matches AI hallucination template [python] + [crewai] + [snubber].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (56 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (3 LOC, 1 file(s), 31 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
1.0.2
 pypi SQUATTED_STUB 100 crewai — support@truthlocks.com truthlocks.com 84d
Claimed homepage: https://pypi.org/project/truthlocks-crewai/
Matched naming pattern: python-crewai-truthlocks
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 137
Raw signal total: 105 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 8 lines, 337 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'truthlocks-crewai' matches AI hallucination template [python] + [crewai] + [truthlocks].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • HIGHPublisher email 'support@truthlocks.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (137 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 337 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
1.0.0
 pypi SQUATTED_STUB 100 binance — — 92d
Claimed homepage: https://binance-fans.com
Matched naming pattern: binance-binance-obvgdd
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 91
Raw signal total: 105 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 3 lines, 121 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'binance-authenticator-obvgdd' matches AI hallucination template [binance] + [binance] + [obvgdd].
  • HIGHClaims critical enterprise brand identity ('BINANCE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (91 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (3 LOC, 2 file(s), 121 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
1.0.4
 pypi SQUATTED_STUB 100 aws — — 98d
Claimed homepage: https://pypi.org/project/imdbinfo-aws/
Matched naming pattern: django-aws-auth
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 98
Raw signal total: 105 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 7 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'imdbinfo-aws' matches AI hallucination template [django] + [aws] + [auth].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (98 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 7 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.0
 pypi SQUATTED_STUB 100 kraken — marcel@tribulnation.com tribulnation.com 116d
Claimed homepage: https://pypi.org/project/tribulnation-kraken/
Matched naming pattern: python-kraken-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 116
Raw signal total: 105 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 102 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'tribulnation-kraken' matches AI hallucination template [python] + [kraken] + [tribulnation].
  • HIGHClaims critical enterprise brand identity ('KRAKEN').
  • HIGHPublisher email 'marcel@tribulnation.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (116 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 102 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.0
 pypi SQUATTED_STUB 100 gemini — marcel@tribulnation.com tribulnation.com 116d
Claimed homepage: https://pypi.org/project/tribulnation-gemini/
Matched naming pattern: python-gemini-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 116
Raw signal total: 105 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 102 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'tribulnation-gemini' matches AI hallucination template [python] + [gemini] + [tribulnation].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'marcel@tribulnation.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (116 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 102 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.0
 pypi SQUATTED_STUB 100 bybit — marcel@tribulnation.com tribulnation.com 116d
Claimed homepage: https://pypi.org/project/tribulnation-bybit/
Matched naming pattern: python-bybit-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 116
Raw signal total: 105 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 100 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'tribulnation-bybit' matches AI hallucination template [python] + [bybit] + [tribulnation].
  • HIGHClaims critical enterprise brand identity ('BYBIT').
  • HIGHPublisher email 'marcel@tribulnation.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (116 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 100 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.0.0
 pypi SQUATTED_STUB 100 vllm — woosuk@inferact.ai inferact.ai 128d
Claimed homepage: https://pypi.org/project/vllm-mini/
Matched naming pattern: python-vllm-mini
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 128
Raw signal total: 120 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 22 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'vllm-mini' matches AI hallucination template [python] + [vllm] + [mini].
  • HIGHClaims critical enterprise brand identity ('VLLM').
  • HIGHPublisher email 'woosuk@inferact.ai' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (128 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 22 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.0
 pypi SQUATTED_STUB 100 ledger — — 152d
Claimed homepage: https://pypi.org/project/ledger-ai/
Matched naming pattern: python-ledger-ai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 151
Raw signal total: 105 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 134 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ledger-ai' matches AI hallucination template [python] + [ledger] + [ai].
  • HIGHClaims critical enterprise brand identity ('LEDGER').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (151 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 134 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.0
 pypi SUSPICIOUS 100 openai — bahadiraraz@protonmail.com protonmail.com 169d
Claimed homepage: https://pypi.org/project/llmtest-openai/
Matched naming pattern: python-openai-llmtest
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 168
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Raw signal total: 105 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 117 lines, 5.1 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llmtest-openai' matches AI hallucination template [python] + [openai] + [llmtest].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'bahadiraraz@protonmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (168 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.1
 pypi SQUATTED_STUB 100 azure anupamas01 anupamas01@example.com example.com 179d
Claimed homepage: https://github.com/anupamas01/azure-mgmt-virtualenclaves
Matched naming pattern: azure-azure-virtualenclaves
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 179
Raw signal total: 105 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 22 lines, 789 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'azure-mgmt-virtualenclaves' matches AI hallucination template [azure] + [azure] + [virtualenclaves].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'anupamas01@example.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (179 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (22 LOC, 2 file(s), 789 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
1.0.1
 pypi SQUATTED_STUB 100 openai — — 323d
Claimed homepage: https://pypi.org/project/victor-openai-test-2/
Matched naming pattern: victor-openai-test
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 323
Raw signal total: 110 points, capped at 100
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 235 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'victor-openai-test-2' matches AI hallucination template [victor] + [openai] + [test].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 323 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 235 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.0.1
 pypi SQUATTED_STUB 95 solana — — 210d
Claimed homepage: https://pypi.org/project/pq-solana-signer/
Matched naming pattern: pq-solana-signer
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 209
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 113 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'pq-solana-signer' matches AI hallucination template [pq] + [solana] + [signer].
  • HIGHClaims critical enterprise brand identity ('SOLANA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 209 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 113 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
18.0.0.0.0.2
 pypi SUSPICIOUS 95 base MetricWise, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 230d
Claimed homepage: https://github.com/OCA/l10n-usa
Matched naming pattern: odoo-base-l10n
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 229
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 25/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 142 lines, 5.6 kB across 7 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'odoo-addon-l10n-us-base-county' matches AI hallucination template [odoo] + [base] + [l10n].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'support@odoo-community.org' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 229 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
9.99.99
 pypi SQUATTED_STUB 95 gcp JEFG — 248d
Claimed homepage: https://pypi.org/project/davi-aws-ecs-gcp-federation/
Matched naming pattern: django-gcp-auth
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 247
Registry downloads: 11/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 12 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'davi-aws-ecs-gcp-federation' matches AI hallucination template [django] + [gcp] + [auth].
  • HIGHClaims critical enterprise brand identity ('GCP').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has been sitting registered for 247 days (long-term sleeper name holding).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 12 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.0
 pypi SQUATTED_STUB 95 okx — marcel@tribulnation.com tribulnation.com 248d
Claimed homepage: https://pypi.org/project/typed-okx/
Matched naming pattern: python-okx-typed
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 248
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 88 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'typed-okx' matches AI hallucination template [python] + [okx] + [typed].
  • HIGHClaims critical enterprise brand identity ('OKX').
  • HIGHPublisher email 'marcel@tribulnation.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 248 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 88 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.2.1
 pypi SUSPICIOUS 95 kraken Powzix dominic@davis-foster.co.uk davis-foster.co.uk 262d
Claimed homepage: https://pypi.org/project/kraken-decompressor/
Matched naming pattern: python-kraken-decompressor
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 273
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 75 lines, 3.4 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'kraken-decompressor' matches AI hallucination template [python] + [kraken] + [decompressor].
  • HIGHClaims critical enterprise brand identity ('KRAKEN').
  • HIGHPublisher email 'dominic@davis-foster.co.uk' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 273 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.0.1
 pypi SQUATTED_STUB 95 gcp — dev@zephyr-ai.io zephyr-ai.io 282d
Claimed homepage: https://pypi.org/project/zephyr-ai-gcp/
Matched naming pattern: zephyr-gcp-gcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 282
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 254 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'zephyr-ai-gcp' matches AI hallucination template [zephyr] + [gcp] + [gcp].
  • HIGHClaims critical enterprise brand identity ('GCP').
  • HIGHPublisher email 'dev@zephyr-ai.io' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 282 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 254 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.0.0.dev1748554150971
 pypi SQUATTED_STUB 95 google — — 451d
Claimed homepage: https://pypi.org/project/sdlc-analytics-google/
Matched naming pattern: sdlc-google-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 451
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 6 lines, 141 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'sdlc-analytics-google' matches AI hallucination template [sdlc] + [google] + [google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (6 LOC, 2 file(s), 141 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.2
 pypi SQUATTED_STUB 95 langchain zbmain zbmaincn@gmail.com gmail.com 674d
Claimed homepage: https://pypi.org/project/langchain-volcengine/
Matched naming pattern: python-langchain-volcengine
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 676
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-volcengine' matches AI hallucination template [python] + [langchain] + [volcengine].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.1
 pypi SQUATTED_STUB 95 langchain zbmain zbmaincn@gmail.com gmail.com 674d
Claimed homepage: https://pypi.org/project/langchain-dspy/
Matched naming pattern: python-langchain-dspy
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 674
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-dspy' matches AI hallucination template [python] + [langchain] + [dspy].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.1
 pypi SQUATTED_STUB 95 langchain zbmain zbmaincn@gmail.com gmail.com 674d
Claimed homepage: https://pypi.org/project/langchain-future/
Matched naming pattern: python-langchain-future
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 674
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-future' matches AI hallucination template [python] + [langchain] + [future].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.1
 pypi SQUATTED_STUB 95 langchain zbmain zbmaincn@gmail.com gmail.com 674d
Claimed homepage: https://pypi.org/project/langchain-tos/
Matched naming pattern: python-langchain-tos
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 674
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-tos' matches AI hallucination template [python] + [langchain] + [tos].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.1
 pypi SQUATTED_STUB 95 langchain zbmain zbmaincn@gmail.com gmail.com 674d
Claimed homepage: https://pypi.org/project/langchain-dataset/
Matched naming pattern: python-langchain-dataset
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 674
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-dataset' matches AI hallucination template [python] + [langchain] + [dataset].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.1
 pypi SQUATTED_STUB 95 langchain zbmain zbmaincn@gmail.com gmail.com 674d
Claimed homepage: https://pypi.org/project/langchain-opencv/
Matched naming pattern: python-langchain-opencv
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 674
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-opencv' matches AI hallucination template [python] + [langchain] + [opencv].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.1
 pypi SQUATTED_STUB 95 langchain zbmain zbmaincn@gmail.com gmail.com 674d
Claimed homepage: https://pypi.org/project/langchain-kimi/
Matched naming pattern: python-langchain-kimi
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 674
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-kimi' matches AI hallucination template [python] + [langchain] + [kimi].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.0.3
 pypi SUSPICIOUS 90 aws Jakub Jantosik jakub.jantosik@gmail.com gmail.com 7h
Claimed homepage: https://pypi.org/project/aiohttp-aws-auth/
Matched naming pattern: aiohttp-aws-auth
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 0
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 186 lines, 8.2 kB across 1 file (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'aiohttp-aws-auth' matches AI hallucination template [aiohttp] + [aws] + [auth].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'Jakub Jantosik <jakub.jantosik@gmail.com>' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
1.0.2
 pypi SUSPICIOUS 90 keycloak sahas sahasmcg2995@gmail.com gmail.com 7h
Claimed homepage: https://github.com/SahasPunchihewa/fastapi-keycloak-auth
Matched naming pattern: fastapi-keycloak-auth
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 0
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 111 lines, 5.2 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'fastapi-keycloak-auth' matches AI hallucination template [fastapi] + [keycloak] + [auth].
  • HIGHClaims critical enterprise brand identity ('KEYCLOAK').
  • HIGHPublisher email 'sahasmcg2995@gmail.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
1.0.0
 pypi SUSPICIOUS 90 base — — 14h
Claimed homepage: https://pypi.org/project/agentrisk-base-v1/
Matched naming pattern: agentrisk-base-v1
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 0
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 701 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'agentrisk-base-v1' matches AI hallucination template [agentrisk] + [base] + [v1].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
5.1.0
 pypi SUSPICIOUS 90 ollama Vaquar Khan — 8d
Claimed homepage: https://pypi.org/project/mcp-bastion-ollama/
Matched naming pattern: mcp-ollama-ollama
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 18
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 41 lines, 1.8 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mcp-bastion-ollama' matches AI hallucination template [mcp] + [ollama] + [ollama].
  • HIGHClaims critical enterprise brand identity ('OLLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (18 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
5.1.0
 pypi SUSPICIOUS 90 anthropic Vaquar Khan — 8d
Claimed homepage: https://pypi.org/project/mcp-bastion-anthropic/
Matched naming pattern: mcp-anthropic-anthropic
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 134
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 50 lines, 2.0 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mcp-bastion-anthropic' matches AI hallucination template [mcp] + [anthropic] + [anthropic].
  • HIGHClaims critical enterprise brand identity ('ANTHROPIC').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (134 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
5.1.0
 pypi SUSPICIOUS 90 cohere Vaquar Khan — 8d
Claimed homepage: https://pypi.org/project/mcp-bastion-cohere/
Matched naming pattern: mcp-cohere-cohere
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 133
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 37 lines, 1.7 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mcp-bastion-cohere' matches AI hallucination template [mcp] + [cohere] + [cohere].
  • HIGHClaims critical enterprise brand identity ('COHERE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (133 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
5.2.0
 pypi SUSPICIOUS 90 xai — vaquarkhan@gmail.com gmail.com 8d
Claimed homepage: https://pypi.org/project/mcp-test-harness-xai/
Matched naming pattern: mcp-xai-harness
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 21
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 80 lines, 2.8 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mcp-test-harness-xai' matches AI hallucination template [mcp] + [xai] + [harness].
  • HIGHClaims critical enterprise brand identity ('XAI').
  • HIGHPublisher email 'vaquarkhan@gmail.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (21 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
5.2.0
 pypi SUSPICIOUS 90 groq — vaquarkhan@gmail.com gmail.com 8d
Claimed homepage: https://pypi.org/project/mcp-test-harness-groq/
Matched naming pattern: mcp-groq-harness
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 132
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 80 lines, 2.8 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mcp-test-harness-groq' matches AI hallucination template [mcp] + [groq] + [harness].
  • HIGHClaims critical enterprise brand identity ('GROQ').
  • HIGHPublisher email 'vaquarkhan@gmail.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (132 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.10434.0
 pypi SUSPICIOUS 90 llama — — 8d
Claimed homepage: https://pypi.org/project/skulk-llama-server-vulkan/
Matched naming pattern: skulk-llama-server
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 35
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 67 lines, 3.1 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'skulk-llama-server-vulkan' matches AI hallucination template [skulk] + [llama] + [server].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (35 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.0
 pypi SUSPICIOUS 90 llama — jperla@users.noreply.github.com users.noreply.github.com 15d
Claimed homepage: https://pypi.org/project/llama-index-llms-trustedrouter/
Matched naming pattern: llama-llama-llms
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 15
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 76 lines, 3.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-llms-trustedrouter' matches AI hallucination template [llama] + [llama] + [llms].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'jperla@users.noreply.github.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (15 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.0
 pypi SUSPICIOUS 90 ledger ZagAIrot Technologies LLC — 19d
Claimed homepage: https://pypi.org/project/arkhive-ledger/
Matched naming pattern: python-ledger-arkhive
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 19
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 65 lines, 4.3 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'arkhive-ledger' matches AI hallucination template [python] + [ledger] + [arkhive].
  • HIGHClaims critical enterprise brand identity ('LEDGER').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (19 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
1.55.0
 pypi SUSPICIOUS 90 google — — 31d
Claimed homepage: https://pypi.org/project/codira-documentation-audit-google/
Matched naming pattern: codira-google-audit
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 30
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 69 lines, 2.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'codira-documentation-audit-google' matches AI hallucination template [codira] + [google] + [audit].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (30 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.14.0
 pypi SUSPICIOUS 90 openai Ory — 31d
Claimed homepage: https://pypi.org/project/ory-openai-agents/
Matched naming pattern: ory-openai-agents
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 42
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 193 lines, 9.5 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'ory-openai-agents' matches AI hallucination template [ory] + [openai] + [agents].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (42 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.0.0
 pypi SUSPICIOUS 90 grok Development Team reserver@openscilab.com openscilab.com 38d
Claimed homepage: https://github.com/openscilab/reserver
Matched naming pattern: grok-grok-sdk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 37
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 40 lines, 1.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'grok-agent-sdk' matches AI hallucination template [grok] + [grok] + [sdk].
  • HIGHClaims critical enterprise brand identity ('GROK').
  • HIGHPublisher email 'reserver@openscilab.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (37 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.0
 pypi SUSPICIOUS 90 claude — — 45d
Claimed homepage: https://pypi.org/project/pwm-agent-claude-gpu/
Matched naming pattern: pwm-claude-claude
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 47
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 26 lines, 1.2 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'pwm-agent-claude-gpu' matches AI hallucination template [pwm] + [claude] + [claude].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (47 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.0
 pypi SUSPICIOUS 90 aws Tristan Lino — 47d
Claimed homepage: https://pypi.org/project/aws-cognito-validation/
Matched naming pattern: django-aws-auth
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 47
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 178 lines, 7.6 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'aws-cognito-validation' matches AI hallucination template [django] + [aws] + [auth].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (47 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.0
 pypi SUSPICIOUS 90 crewai Ramprasad Gaddam — 49d
Claimed homepage: https://pypi.org/project/vouch-crewai/
Matched naming pattern: python-crewai-vouch
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 70
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 32 lines, 1.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'vouch-crewai' matches AI hallucination template [python] + [crewai] + [vouch].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (70 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
0.1.1
 pypi SUSPICIOUS 90 alchemy — fernforgehq@gmail.com gmail.com 49d
Claimed homepage: https://pypi.org/project/alchemy-writing/
Matched naming pattern: python-alchemy-writing
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 57
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 78 lines, 3.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'alchemy-writing' matches AI hallucination template [python] + [alchemy] + [writing].
  • HIGHClaims critical enterprise brand identity ('ALCHEMY').
  • HIGHPublisher email 'fernforgehq@gmail.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (57 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
Score100
Targetedripple
Signals—
Pavan Mishra · pavanmishra@gmail.com
0h ago
Score100
Targetedgoogle
Signals—
Luis San Pablo · luis.sanpablo@utexas.edu
2h ago
Score100
Targetedledger
Signals—
Jaymin Bhan · jayminbhan@gmail.com
4d ago
Score100
Targetedsolana
Signals—
Unknown author
32d ago
Score100
Targetedclaude
Signals—
Unknown author · pypi@zeyi.fan
53d ago
Score100
Targetedanthropic
Signals—
Jacob Stewart · jacob@swarmauri.com
54d ago
Score100
Targetedcrewai
Signals—
Tanmay Devare
56d ago
Score100
Targetedcrewai
Signals—
Unknown author · support@truthlocks.com
84d ago
Score100
Targetedbinance
Signals—
Unknown author
92d ago
Score100
Targetedaws
Signals—
Unknown author
98d ago
Score100
Targetedkraken
Signals—
Unknown author · marcel@tribulnation.com
116d ago
Score100
Targetedgemini
Signals—
Unknown author · marcel@tribulnation.com
116d ago
Score100
Targetedbybit
Signals—
Unknown author · marcel@tribulnation.com
116d ago
Score100
Targetedvllm
Signals—
Unknown author · woosuk@inferact.ai
128d ago
Score100
Targetedledger
Signals—
Unknown author
152d ago
Score100
Targetedopenai
Signals—
Unknown author · bahadiraraz@protonmail.com
169d ago
Score100
Targetedazure
Signals—
anupamas01 · anupamas01@example.com
179d ago
Score100
Targetedopenai
Signals—
Unknown author
323d ago
Score95
Targetedsolana
Signals—
Unknown author
210d ago
Score95
Targetedbase
Signals—
MetricWise, Odoo Community Association (OCA) · support@odoo-community.org
230d ago
Score95
Targetedgcp
Signals—
JEFG
248d ago
Score95
Targetedokx
Signals—
Unknown author · marcel@tribulnation.com
248d ago
Score95
Targetedkraken
Signals—
Powzix · dominic@davis-foster.co.uk
262d ago
Score95
Targetedgcp
Signals—
Unknown author · dev@zephyr-ai.io
282d ago
Score95
Targetedgoogle
Signals—
Unknown author
451d ago
Score95
Targetedlangchain
Signals—
zbmain · zbmaincn@gmail.com
674d ago
Score95
Targetedlangchain
Signals—
zbmain · zbmaincn@gmail.com
674d ago
Score95
Targetedlangchain
Signals—
zbmain · zbmaincn@gmail.com
674d ago
Score95
Targetedlangchain
Signals—
zbmain · zbmaincn@gmail.com
674d ago
Score95
Targetedlangchain
Signals—
zbmain · zbmaincn@gmail.com
674d ago
Score95
Targetedlangchain
Signals—
zbmain · zbmaincn@gmail.com
674d ago
Score95
Targetedlangchain
Signals—
zbmain · zbmaincn@gmail.com
674d ago
Score90
Targetedaws
Signals—
Jakub Jantosik · jakub.jantosik@gmail.com
7h ago
Score90
Targetedkeycloak
Signals—
sahas · sahasmcg2995@gmail.com
7h ago
Score90
Targetedbase
Signals—
Unknown author
14h ago
Score90
Targetedollama
Signals—
Vaquar Khan
8d ago
Score90
Targetedanthropic
Signals—
Vaquar Khan
8d ago
Score90
Targetedcohere
Signals—
Vaquar Khan
8d ago
Score90
Targetedxai
Signals—
Unknown author · vaquarkhan@gmail.com
8d ago
Score90
Targetedgroq
Signals—
Unknown author · vaquarkhan@gmail.com
8d ago
Score90
Targetedllama
Signals—
Unknown author
8d ago
Score90
Targetedllama
Signals—
Unknown author · jperla@users.noreply.github.com
15d ago
Score90
Targetedledger
Signals—
ZagAIrot Technologies LLC
19d ago
Score90
Targetedgoogle
Signals—
Unknown author
31d ago
Score90
Targetedopenai
Signals—
Ory
31d ago
Score90
Targetedgrok
Signals—
Development Team · reserver@openscilab.com
38d ago
Score90
Targetedclaude
Signals—
Unknown author
45d ago
Score90
Targetedaws
Signals—
Tristan Lino
47d ago
Score90
Targetedcrewai
Signals—
Ramprasad Gaddam
49d ago
Score90
Targetedalchemy
Signals—
Unknown author · fernforgehq@gmail.com
49d ago
Next »
LINK COPIED TO CLIPBOARD