Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 590 | 48d | 1,177 | 101,402 | ↑24.5/day |
🚨 Possible Stealer
Very Risky
|
cordon | pypi | 0.6.0 | — oluwatosin.amokeodo@gmail.com | gmail.com | 🪝 ⚡ | |
|
Package purpose: Language-agnostic software supply-chain security scanner. Detects malicious packages, suspicious install-time behaviour, secrets and dependency risk across any ecosystem.
Claimed homepage: https://pypi.org/project/cordon-scanner/
Matched naming pattern: python-cordon-scanner
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 48
Registry downloads: 1177/month, 40/week (ACTIVE_COMMUNITY_USE)
Codebase size: 101402 lines, 5.2 MB across 241 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 360 | 46d | 129 | 1,509 | ↑2.8/day |
Very Risky
|
vpspilot | pypi | 1.0.0 | Technology Innovision Team | — | 🪝 | |
|
Package purpose: VPSPilot: The Autonomous Next-Gen VPS Command Center & Online Management Dashboard
Claimed homepage: https://pypi.org/project/vpspilot/
Matched naming pattern: python-vpspilot-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 46
Registry downloads: 129/month, 6/week (MODERATE_USAGE)
Codebase size: 1509 lines, 61.6 kB across 12 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 355 | 33d | 1,181 | 24,027 | ↑35.8/day |
Very Risky
|
lazaret | pypi | 0.1.8 | — | — | 🪝 🗄️ | |
|
Package purpose: Static security, supply-chain and quality analysis for Python, JavaScript and SQL
Claimed homepage: https://pypi.org/project/lazaret/
Matched naming pattern: python-lazaret-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 33
Registry downloads: 1181/month, 65/week (ACTIVE_COMMUNITY_USE)
Codebase size: 24027 lines, 1.4 MB across 41 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 315 | 139d | 0 | 3,903 | ↑0.0/day |
Very Risky
|
azure | pypi | 1.0.0 | Cisco Systems Inc. c8kv-cloud-dev@cisco.com | cisco.com | 🪝 | |
|
Package purpose: Utilities for c8kv on Azure
Claimed homepage: https://github4-chn.cisco.com/csr1000v-azure/c8kv_azure_utils
Matched naming pattern: c8kv-azure-utils
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 139
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 3903 lines, 193.4 kB across 24 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 275 | 31d | 136 | 49,598 | ↑4.4/day |
Very Risky
|
hyper | pypi | 0.53.0 | Alex Mextner | — | 🪝 🗄️ | |
|
Package purpose: rig — the dev-environment umbrella driver: set up a repo from a committed rig.yaml by applying agent-tools content (skills, hooks, CI gates, MCP).
Claimed homepage: https://pypi.org/project/hyper-rig/
Matched naming pattern: python-hyper-rig
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 31
Registry downloads: 136/month, 11/week (MODERATE_USAGE)
Codebase size: 49598 lines, 3.1 MB across 137 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 260 | 29d | 406 | 40,095 | ↑14.0/day |
Very Risky
|
pymizan | pypi | 3.1.2 | MIZAN Contributors | — | 🪝 | |
|
Package purpose: Agentic Personal AI - Quranic Cognitive Architecture for human-like reasoning
Claimed homepage: https://pypi.org/project/pymizan/
Matched naming pattern: python-pymizan-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 29
Registry downloads: 406/month, 12/week (MODERATE_USAGE)
Codebase size: 40095 lines, 1.8 MB across 162 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 260 | 36d | 753 | 19,685 | ↑20.9/day |
Very Risky
|
bug | pypi | 6.0.2 | AwareXone | — | 🪝 | |
|
Package purpose: AI-powered bug bounty hunting — recon to report, in your terminal.
Claimed homepage: https://pypi.org/project/agentic-bug-hunter/
Matched naming pattern: agentic-bug-hunter
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 36
Registry downloads: 753/month, 240/week (MODERATE_USAGE)
Codebase size: 19685 lines, 955.5 kB across 69 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 260 | 140d | 0 | 102,049 | ↑0.0/day |
Very Risky
|
tether | pypi | 0.12.0 | FastCrest | — | 🪝 | |
|
Package purpose: FastCrest Tether — edge-to-cloud robotics + edge AI deploy CLI. Optimize, deploy, verify any VLA across Jetson, RTX, Apple Silicon, AMD. Standalone or wired to FastCrest Cloud.
Claimed homepage: https://pypi.org/project/fastcrest-tether/
Matched naming pattern: python-tether-fastcrest
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 140
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 102049 lines, 4.9 MB across 498 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 260 | 176d | 26 | 4,285 | ↑0.1/day |
Very Risky
|
claude | pypi | 0.2.0 | claude-oneclick contributors | — | 🪝 | |
|
Package purpose: VPN-style one-click toggle to route Claude Code (CLI + VSCode) to custom model endpoints (DeepSeek, NVIDIA NIMs, OpenRouter, Ollama, ...).
Claimed homepage: https://pypi.org/project/claude-oneclick/
Matched naming pattern: python-claude-oneclick
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 176
Registry downloads: 26/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4285 lines, 194.9 kB across 20 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 255 | 29d | 64 | 51,742 | ↑2.2/day |
Very Risky
|
aegisctl | pypi | 0.1.0 | — | — | 🪝 🗄️ | |
|
Package purpose: Agent management for your terminal: agents on your own Claude Code, Codex (ChatGPT), Antigravity (Gemini), OpenCode, Hermes or a local model, with no API keys.
Claimed homepage: https://pypi.org/project/aegisctl/
Matched naming pattern: python-aegisctl-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 29
Registry downloads: 64/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 51742 lines, 2.9 MB across 214 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 255 | 131d | 23 | 311 | ↑0.2/day |
🚨 Possible Stealer
Very Risky
|
vllm | pypi | 1.0.2 | — aravindhvignesh58@gmail.com | gmail.com | 🪝 📡 | |
|
Package purpose: The official library for vLLM client network and preflight validation engine.
Claimed homepage: https://pypi.org/project/open-vllm/
Matched naming pattern: python-vllm-open
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 131
Registry downloads: 23/month, 15/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 311 lines, 17.1 kB across 7 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 255 | 162d | 278 | 17,648 | ↑1.7/day |
Very Risky
|
claude | pypi | 0.3.45 | — be2jay67@gmail.com | gmail.com | 🪝 🗄️ | |
|
Package purpose: Personal AI project management hub — North Star milestone tracking, live Claude sessions, CTX context alignment.
Claimed homepage: https://pypi.org/project/claude-ns-hub/
Matched naming pattern: claude-claude-hub
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 162
Registry downloads: 278/month, 25/week (MODERATE_USAGE)
Codebase size: 17648 lines, 1.3 MB across 10 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 255 | 189d | 23 | 19,232 | ↑0.1/day |
Very Risky
|
talisman | pypi | 1.1.0 | MR MARCUS TAYK | — | 🪝 | |
|
Package purpose: TALISMAN — Threat Analysis, Lateral Intelligence & Security Management for Advanced Networks
Claimed homepage: https://pypi.org/project/talisman-recon/
Matched naming pattern: python-talisman-recon
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 189
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 23/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 19232 lines, 865.0 kB across 129 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 255 | 247d | 714 | 37,296 | ↑2.9/day |
Very Risky
|
phantom | pypi | 0.9.218 | Usta0x001 r_gadouri@estin.dz | estin.dz | 🪝 | |
|
Package purpose: Autonomous Offensive Security Intelligence - AI-powered penetration testing
Claimed homepage: https://pypi.org/project/phantom-agent/
Matched naming pattern: python-phantom-agent
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 247
Registry downloads: 714/month, 20/week (MODERATE_USAGE)
Codebase size: 37296 lines, 1.7 MB across 151 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 245 | 144d | 19 | 4,212 | ↑0.1/day |
Very Risky
|
aws | pypi | 0.1.2 | — | — | 🪝 | |
|
Package purpose: Multi AWS tool for managing operations across multiple AWS accounts via SSO
Claimed homepage: https://pypi.org/project/multi-aws-tool/
Matched naming pattern: multi-aws-tool
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 144
Registry downloads: 19/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4212 lines, 217.4 kB across 21 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 245 | 3014d | 23 | 10,276 | ↑0.0/day |
Very Risky
|
azure | pypi | 0.0.5 | Christopher Reder creder@cisco.com | cisco.com | 🪝 | |
|
Package purpose: A library to install Azure Waagent on CSR
Claimed homepage: https://github4-chn.cisco.com/csr1000v-azure/csr_azure_agent
Matched naming pattern: csr-azure-agent
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3014
Registry downloads: 23/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10276 lines, 519.2 kB across 75 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 240 | 28d | 99 | 31,126 | ↑3.5/day |
Very Risky
|
manager | pypi | 0.9.0rc1 | Unified Cache Team | — | 🪝 ⚡ 📦 | |
|
Package purpose: Persist and reuse KV Cache to speedup your LLM.
Claimed homepage: https://pypi.org/project/uc-manager-cann910-a5/
Matched naming pattern: uc-manager-cann910
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 28
Registry downloads: 99/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 31126 lines, 1.5 MB across 295 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 240 | 28d | 99 | 31,126 | ↑3.5/day |
Very Risky
|
manager | pypi | 0.9.0rc1 | Unified Cache Team | — | 🪝 ⚡ 📦 | |
|
Package purpose: Persist and reuse KV Cache to speedup your LLM.
Claimed homepage: https://pypi.org/project/uc-manager-cann901-a5/
Matched naming pattern: uc-manager-cann901
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 28
Registry downloads: 99/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 31126 lines, 1.5 MB across 295 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 235 | 45d | 2,819 | 4,041 | ↑62.6/day |
Very Risky
|
notbefore | pypi | 0.16.1 | docdailey | — | 🪝 | |
|
Package purpose: NotBefore: verify an hourly commit-then-reveal seed from the public qrng-beacon-log and derive labeled seeds, shuffles and splits from it — with a pinned, vendored verifier.
Claimed homepage: https://pypi.org/project/notbefore/
Matched naming pattern: python-notbefore-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 45
Registry downloads: 2819/month, 142/week (ACTIVE_COMMUNITY_USE)
Codebase size: 4041 lines, 352.1 kB across 34 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 225 | 525d | 0 | 41,485 | ↑0.0/day |
Very Risky
|
llama | pypi | 0.94.0 | Shamit Verma oss@shamit.in | shamit.in | 🪝 | |
|
Package purpose: A Python package for Llama CPP.
Claimed homepage: https://github.com/shamitv/llama_cpp
Matched naming pattern: llama-llama-pydist
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 525
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 41485 lines, 2.3 MB across 155 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 220 | 21d | 0 | 21,033 | ↑0.0/day |
Very Risky
|
myra | pypi | 0.1.5 | — support@codeninjavik.in | codeninjavik.in | 🪝 | |
|
Package purpose: MYRA AI Assistant for Linux — same desktop UI, Gemini Live voice, 148+ languages and Linux system control.
Claimed homepage: https://pypi.org/project/myra-linux/
Matched naming pattern: python-myra-linux
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 21
Registry downloads: 0/month, 35/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21033 lines, 1.2 MB across 61 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 220 | 239d | 39 | 52 | ↑0.2/day |
Very Risky
|
copilot | pypi | 0.1.12 | — khaerul@example.com | example.com | 🪝 ⚡ | |
|
Package purpose: GitHub Copilot agents for AI-assisted software development
Claimed homepage: https://pypi.org/project/swe-copilot-agents/
Matched naming pattern: swe-copilot-agents
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 239
Registry downloads: 39/month, 26/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 52 lines, 1.8 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 215 | 459d | 7,131 | 128,928 | ↑15.5/day |
Very Risky
|
claude | pypi | 6.5.83 | Claude MPM Team bob@matsuoka.com | matsuoka.com | 🪝 | |
|
Package purpose: Claude Code workflow and agent management framework - Multi-agent orchestration, skills system, MCP integration, session management, and semantic code search for AI-powered development
Claimed homepage: https://pypi.org/project/claude-mpm/
Matched naming pattern: python-claude-mpm
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 459
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7131/month, 1299/week (ACTIVE_COMMUNITY_USE)
Codebase size: 128928 lines, 6.3 MB across 1043 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 210 | 18d | 0 | 3,209 | ↑0.0/day |
Very Risky
|
agent | pypi | 1.5.1 | vernikr | — | 🪝 | |
|
Package purpose: Real headful Chrome on Xvfb with a hardware-level X11 mouse, Cloudflare Turnstile auto-solve and zero-leak CDP. Localhost HTTP API + CLI + Python SDK.
Claimed homepage: https://pypi.org/project/browser-agent-server/
Matched naming pattern: browser-agent-server
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 18
Registry downloads: 0/month, 250/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 3209 lines, 171.6 kB across 9 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 205 | 35d | 9,772 | 28,496 | ↑279.2/day |
Very Risky
|
pydeno | pypi | 0.13.2 | — xin@imfing.com | imfing.com | 🪝 | |
|
Package purpose: Modern embedded JavaScript runtime for Python powered by V8 and Rust.
Claimed homepage: https://pypi.org/project/pydeno/
Matched naming pattern: python-pydeno-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 35
Registry downloads: 9772/month, 2818/week (ACTIVE_COMMUNITY_USE)
Codebase size: 28496 lines, 1.4 MB across 65 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 205 | 51d | 1,575 | 62,812 | ↑30.9/day |
Very Risky
|
auto | pypi | 0.1.10 | Ashish Yadav | — | 🪝 | |
|
Package purpose: Auto-Use: an AI agent that operates your computer, shell, browser and iPhone
Claimed homepage: https://pypi.org/project/auto-use/
Matched naming pattern: python-auto-use
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 51
Registry downloads: 1575/month, 32/week (ACTIVE_COMMUNITY_USE)
Codebase size: 62812 lines, 3.9 MB across 252 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 205 | 54d | 1,389 | 3,148 | ↑25.7/day |
Very Risky
|
pyrecrawl | pypi | 0.8.1 | Alexander Jay | — | 🪝 | |
|
Package purpose: Web browsing superpowers for AI agents: one MCP tool to scrape, extract, crawl, map, and search any site — self-hosted, no API keys, with a smart auto-fallback ladder.
Claimed homepage: https://pypi.org/project/pyrecrawl/
Matched naming pattern: python-pyrecrawl-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 54
Registry downloads: 1389/month, 76/week (ACTIVE_COMMUNITY_USE)
Codebase size: 3148 lines, 151.3 kB across 10 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 205 | 223d | 9 | 126,693 | ↑0.0/day |
Very Risky
|
vllm | pypi | 0.17.2.post1 | vLLM Team | — | 🪝 | |
|
Package purpose: A high-throughput and memory-efficient inference and serving engine for LLMs
Claimed homepage: https://pypi.org/project/vllm-hust/
Matched naming pattern: python-vllm-hust
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 223
Code-only verdict: SUSPICIOUS (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 126693 lines, 5.7 MB across 1606 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 195 | 14d | 0 | 1,421 | ↑0.0/day |
Very Risky
|
pigeon | pypi | 1.4.4 | ctf-gooo-003 | — | 🪝 | |
|
Package purpose: Self-hosted, email-driven agent: tell your cloud SI to send signed jobs via email that execute on your machine.
Claimed homepage: https://pypi.org/project/pigeon-home/
Matched naming pattern: python-pigeon-home
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 14
Registry downloads: 0/month, 28/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1421 lines, 66.2 kB across 7 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 195 | 30d | 0 | 2,388 | ↑0.0/day |
Very Risky
|
sentinel | pypi | 0.5.0 | — theabsolutesmartest@gmail.com | gmail.com | 🪝 | |
|
Package purpose: tiny folder watchdog that spots ransomware-ish behavior
Claimed homepage: https://pypi.org/project/sentinel-watch/
Matched naming pattern: python-sentinel-watch
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 30
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2388 lines, 89.6 kB across 21 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 190 | 384d | 10 | 124,889 | ↑0.0/day |
Very Risky
|
vllm | pypi | 1.0.0 | vLLM Team | — | 🪝 | |
|
Package purpose: A high-throughput and memory-efficient inference and serving engine for LLMs
Claimed homepage: https://pypi.org/project/vllm-fixed/
Matched naming pattern: python-vllm-fixed
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 384
Code-only verdict: SUSPICIOUS (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 124889 lines, 6.2 MB across 788 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 190 | 868d | 21 | 27 | ↑0.0/day |
🚨 Possible Stealer
Very Risky
|
aws | pypi | 0.0.2 | Ash Bond | — | 🪝 📡 | |
|
Package purpose: Package to handle your cloud infrastructure
Claimed homepage: https://pypi.org/project/aws-ansible-sdk/
Matched naming pattern: aws-aws-sdk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 868
Registry downloads: 21/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 27 lines, 909 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 190 | 1711d | 11 | 176 | ↑0.0/day |
Very Risky
|
pypi | 8.0.1.0.0.99.dev5 | Akretion | — | 🪝 ⚡ | ||
|
Package purpose: Export your product in google shopping
Claimed homepage: https://www.akretion.com
Matched naming pattern: odoo8-google-shopinvader
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1711
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 176 lines, 7.7 kB across 8 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 190 | 1711d | 7 | 56 | ↑0.0/day |
Very Risky
|
stripe | pypi | 8.0.1.0.0.99.dev6 | Akretion | — | 🪝 ⚡ | |
|
Package purpose: Shopinvader Stripe Payment Gateway
Claimed homepage: https://akretion.com
Matched naming pattern: odoo8-stripe-shopinvader
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1711
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 56 lines, 2.3 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 190 | 3486d | 20 | 31 | ↑0.0/day |
Very Risky
|
pypi | 9.0.1.0.0 | ABF OSIELL, Odoo Community Association (OCA) support@odoo-community.org | odoo-community.org | 🪝 ⚡ | ||
|
Package purpose: Add support for Google Tag Manager
Claimed homepage: https://pypi.org/project/odoo9-addon-website-google-tag-manager/
Matched naming pattern: odoo9-google-website
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3486
Registry downloads: 20/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 31 lines, 1.4 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 185 | 23d | 288 | 5,864 | ↑12.5/day |
Very Risky
|
test | pypi | 1.0.4 | Qmpass | — | 🪝 | |
|
Package purpose: Run your Qmpass automated tests on your own machines, securely connected to your Jira projects.
Claimed homepage: https://pypi.org/project/qmpass-test-agent/
Matched naming pattern: qmpass-test-agent
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 23
Code-only verdict: SUSPICIOUS (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 288/month, 33/week (MODERATE_USAGE)
Codebase size: 5864 lines, 255.7 kB across 45 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 185 | 48d | 660 | 8,019 | ↑13.8/day |
Very Risky
|
auth | pypi | 0.0.6 | xhluca | — | 🪝 | |
|
Package purpose: Switch Claude subscriptions and API-provider keys from Claude Code
Claimed homepage: https://pypi.org/project/claude-auth-manager/
Matched naming pattern: claude-auth-manager
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 48
Registry downloads: 660/month, 81/week (MODERATE_USAGE)
Codebase size: 8019 lines, 340.6 kB across 33 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 185 | 150d | 14 | 81 | ↑0.1/day |
Very Risky
|
langchain | pypi | 0.1.0 | — | — | 🪝 | |
|
Package purpose: LangChain integration for Nomad headless browser engine — 700× cheaper than Chrome
Claimed homepage: https://pypi.org/project/langchain-nomad/
Matched naming pattern: python-langchain-nomad
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 150
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 14/month, 14/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 81 lines, 3.7 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 185 | 171d | 9,315 | 45,590 | ↑54.5/day |
Very Risky
|
cpp | pypi | 11434.0.0 | — vladlearns@gmail.com | gmail.com | 🪝 | |
|
Package purpose: llama.cpp server binary built from source
Claimed homepage: https://pypi.org/project/llama-cpp-bin/
Matched naming pattern: llama-cpp-bin
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 171
Registry downloads: 9315/month, 641/week (ACTIVE_COMMUNITY_USE)
Codebase size: 45590 lines, 2.5 MB across 160 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 185 | 671d | 594 | 18,376 | ↑0.9/day |
Very Risky
|
llama | pypi | 0.1.4 | — staneyffer@gmail.com | gmail.com | 🪝 | |
|
Package purpose: Add your description here
Claimed homepage: https://pypi.org/project/llama-cpp-server-py-core/
Matched naming pattern: llama-llama-server
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 671
Registry downloads: 594/month, 62/week (MODERATE_USAGE)
Codebase size: 18376 lines, 1.0 MB across 44 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 180 | 15d | 0 | 18,675 | ↑0.0/day |
Very Risky
|
vortfoil | pypi | 2.0.0 | Sang-Hyun Rhie, Gyuwon Kim, Suhyeong Lim, Jeongsu Lee | — | 🪝 | |
|
Package purpose: A vortex-panel-informed neural operator for steady airfoil flow: surface pressure, lift, moment and the stagnation point from a predicted vortex sheet, drag and a lift correction from a parallel boundary-layer state
Claimed homepage: https://pypi.org/project/vortfoil/
Matched naming pattern: python-vortfoil-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 15
Registry downloads: 0/month, 142/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 18675 lines, 1.2 MB across 83 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 180 | 16d | 0 | 1,443 | ↑0.0/day |
Very Risky
|
prhub | pypi | 0.1.6 | prhub contributors | — | 🪝 | |
|
Package purpose: One GitHub poller for many coding agents: they wait on local PR and deploy state instead of each polling the API
Claimed homepage: https://github.com/danielnc/prhub
Matched naming pattern: python-prhub-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 16
Registry downloads: 0/month, 93/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1443 lines, 81.4 kB across 9 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 180 | 19d | 0 | 842 | ↑0.0/day |
Very Risky
|
task | pypi | 2026.10.9.1 | Ophix Project | — | 🪝 | |
|
Package purpose: Crontab Tier 2 client for ophix-tasks — applies task schedules to /etc/cron.d
Claimed homepage: https://pypi.org/project/ophix-task-crontab/
Matched naming pattern: ophix-task-crontab
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 19
Registry downloads: 0/month, 20/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 842 lines, 40.1 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 180 | 20d | 0 | 19,678 | ↑0.0/day |
Very Risky
|
sentinelseo | pypi | 1.0.0 | — me@iliassami.com | iliassami.com | 🪝 | |
|
Package purpose: Scrawly: free, open-source technical SEO and GEO crawler and site audit tool (a free alternative to paid desktop SEO crawlers), with safe, reversible WordPress fixes.
Claimed homepage: https://pypi.org/project/sentinelseo/
Matched naming pattern: python-sentinelseo-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 20
Registry downloads: 0/month, 51/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 19678 lines, 893.5 kB across 111 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 175 | 40d | 2,815 | 12,233 | ↑70.4/day |
Very Risky
|
reprollm | pypi | 0.6.1 | ReproLLM maintainers | — | 🪝 | |
|
Package purpose: A reproducibility linter, experiment recorder, lockfile system, and drift detector for LLM research.
Claimed homepage: https://pypi.org/project/reprollm/
Matched naming pattern: python-reprollm-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 40
Registry downloads: 2815/month, 96/week (ACTIVE_COMMUNITY_USE)
Codebase size: 12233 lines, 513.0 kB across 122 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 175 | 52d | 8,140 | 43,304 | ↑156.5/day |
Very Risky
|
aisef | pypi | 2.0.0 | — | — | 🪝 | |
|
Package purpose: AISEF — AI Software Engineering Framework: input is docs/requirements.md, output is gate-verified code with SHA-bound evidence
Claimed homepage: https://pypi.org/project/aisef/
Matched naming pattern: python-aisef-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 52
Registry downloads: 8140/month, 68/week (ACTIVE_COMMUNITY_USE)
Codebase size: 43304 lines, 2.6 MB across 193 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 170 | 25d | 189 | 345 | ↑7.6/day |
Very Risky
|
data | pypi | 0.8.0 | — support@safenai.io | safenai.io | 🪝 | |
|
Package purpose: Generative inpaint transformation (LaMa) and the associated tool-model plugin for kcai data-sampling
Claimed homepage: https://pypi.org/project/kcai-data-sampling-lama/
Matched naming pattern: kcai-data-sampling
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 25
Registry downloads: 189/month, 20/week (MODERATE_USAGE)
Codebase size: 345 lines, 16.8 kB across 11 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 170 | 27d | 739 | 965 | ↑27.4/day |
Very Risky
|
abstract | pypi | 0.1.5 | — partners@abstractendeavors.com | abstractendeavors.com | 🪝 | |
|
Package purpose: Secure Files: share local files and folders through abstractendeavors.com (or your own server) without uploading them. Includes the desktop agent, the shared tar/resume core and the server relay.
Claimed homepage: https://pypi.org/project/abstract-securefiles/
Matched naming pattern: python-abstract-securefiles
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 27
Registry downloads: 739/month, 23/week (MODERATE_USAGE)
Codebase size: 965 lines, 45.6 kB across 11 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 170 | 31d | 662 | 2,636 | ↑21.4/day |
Very Risky
|
backup | pypi | 3.3.0 | — gene_wood@public.cementhorizon.com | public.cementhorizon.com | 🪝 | |
|
Package purpose: Runs a scheduled Duplicacy backup and reports progress to healthchecks.io.
Claimed homepage: https://pypi.org/project/duplicacy-backup-runner/
Matched naming pattern: duplicacy-backup-runner
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 31
Registry downloads: 662/month, 17/week (MODERATE_USAGE)
Codebase size: 2636 lines, 110.8 kB across 3 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 170 | 33d | 801 | 6,866 | ↑24.3/day |
Very Risky
|
poppy | pypi | 0.5.1 | dbmrq | — | 🪝 | |
|
Package purpose: Turn coding-agent session history into reviewed skills, memories, and rules.
Claimed homepage: https://pypi.org/project/poppy-ai/
Matched naming pattern: python-poppy-ai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 33
Registry downloads: 801/month, 38/week (MODERATE_USAGE)
Codebase size: 6866 lines, 295.5 kB across 27 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||