🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Fast adoption alone isn't evidence of wrongdoing; use this to find candidates worth a second look, not to accuse anyone.

Threat Feed Flagged packages, sorted by risk score Growing Packages Fastest-adopted since publish Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Packages published in the last 90 days, ranked by downloads-per-day since publish — only packages with known download data are shown.

Search & filter syntax reference
Same email:, domain:, keyword:, version:, age:<6h filters as the other tabs (age: here filters on top of this tab's own 90-day cutoff, not instead of it).
PackageEcosystem Verdict Score Growth/day Downloads/mo Lines Age Targeted
latest
 npm Very Risky 137 ↑ 360.0/day 7919 17,190 22d juanpiecedev
Author: JuanPiece
Package purpose: jpcode — el CLI de código de JuanPiece: pinta de Claude Code, modelos gratis y tu propia API key, con gateway local.
Claimed homepage: https://github.com/SoyJuanPiece/jpcode-cli#readme
Matched naming pattern: node-juanpiecedev-jpcode
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 1979 (ACTIVE_COMMUNITY_USE)
Codebase size: 17190 lines, 20.6 MB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (13 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.mjs'
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/engine/chunks/acpAgent-UCU7OI47.js:71 (+26 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/engine/chunks/acpAgent-UCU7OI47.js:52 (+112 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/engine/chunks/anthropicContentGenerator-KXWARK3M.js:3 (+6 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/engine/chunks/chunk-2J5T4I5M.js:3 (+18 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/engine/chunks/chunk-2UOMCYQG.js:10 (+15 more occurrence(s) elsewhere)

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
0.3.0
 pypi SUSPICIOUS 75 ↑ 165.6/day 3644 6,050 22d smartvoice
Author: Unknown
Package purpose: Local speech-to-text and text-to-speech service
Claimed homepage: https://pypi.org/project/smartvoice/
Matched naming pattern: python-smartvoice-core
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 65 (ACTIVE_COMMUNITY_USE)
Codebase size: 6050 lines, 311.5 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (14 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in smartvoice-0.3.0/scripts/build_qwen3_tts_linux.py:60
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in smartvoice-0.3.0/scripts/build_qwen3_tts_linux.py:148
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in smartvoice-0.3.0/scripts/build_qwen3_tts_windows.py:26
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in smartvoice-0.3.0/scripts/build_qwen3_tts_windows.py:61
  • CRITICALINSTALL_TIME_CMDCLASS_OVERRIDE: 'BuildPyWithResources.run()' executes 'subprocess.run' during installation in smartvoice-0.3.0/setup.py:64
  • CRITICALINSTALL_TIME_CMDCLASS_OVERRIDE: 'BuildPyWithResources.run()' executes 'subprocess.run' during installation in smartvoice-0.3.0/setup.py:72

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
latest
 npm Very Risky 77 ↑ 65.5/day 1573 64,415 24d ape
Author: Unknown
Package purpose: APE — hybrid-native MCP server with an embedded, user-configurable agent: multi-engine orchestration (Genesis + EVE + ADAM + Skein), declarative connectors, task-graph execution, audit ledger, memory. No 5-repo clone required.
Claimed homepage: https://github.com/fernandogarzaaa/ape-mcp
Matched naming pattern: node-ape-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 393 (ACTIVE_COMMUNITY_USE)
Codebase size: 64415 lines, 2.8 MB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • INFOLegitimate documentation effort (226 chars with homepage link).
  • HIGHPackage registered recently (23 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.mjs'
  • HIGHBUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/vendors/adam/target/release/adam-mcp.exe' in npm tarball
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/adam-client.js:25 (+28 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/ape-mcp.js:69 (+12 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/console/app.js:52 (+5 more occurrence(s) elsewhere)

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
latest
 npm Very Risky 75 ↑ 61.1/day 978 2,784 16d img2threejs
Author: Unknown
Package purpose: Plugin harness for the img2 ecosystem: everything is a plugin.
Claimed homepage: https://github.com/img2threejs/img2#readme
Matched naming pattern: node-img2threejs-img2
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 244 (MODERATE_USAGE)
Codebase size: 2784 lines, 131.1 kB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (13 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHANTI_ANALYSIS_EVASION: 'TLS / SSL Verification Bypass (Defense Evasion)' found in package/bin/img2.mjs:134
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/img2.mjs:110 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/bin/img2.mjs:1847
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/img2.mjs:44 (+1 more occurrence(s) elsewhere)
  • CRITICALSOURCE_CODE_EVASIVE_PAYLOAD: anti-analysis evasion combined with execution/payload hook in package/bin/img2.mjs
  • INFOSubstantial functional codebase (2784 LOC across 5 file(s)).

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
latest
 npm Very Risky 92 ↑ 55.7/day 1336 24,304 24d beauticode
Author: Unknown
Package purpose: beautiCode desktop host aggregate for DSH, Codex, WorkBuddy, Cursor, and Doubao.
Matched naming pattern: node-beauticode-desktop
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 334 (ACTIVE_COMMUNITY_USE)
Codebase size: 24304 lines, 1.1 MB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (16 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node ./bin/postinstall.mjs'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/runtime/workbuddy/packages/adapter-workbuddy/dist/background-bar.js:397 (+13 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/runtime/desktop/packages/core/dist/bundled-gallery.js:20 (+31 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/runtime/codex/cli.js:116 (+11 more occurrence(s) elsewhere)
  • HIGHSYSTEM_PERSISTENCE_TAMPERING: 'Shortcut Hijacking (.lnk Rewrite / Browser Extension Sideload)' found in package/src/quick-shortcuts.mjs:33 (+1 more occurrence(s) elsewhere)

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
latest
 npm Very Risky 75 ↑ 40.7/day 935 3,155 23d uicast
Author: Andrey Gubanov
Package purpose: The expression language of uicast documents: JavaScript expressions over JSON data. Closed AST allow-list, runtime membrane, CPU and allocation budget. Never calls new Function, so it needs no unsafe-eval.
Claimed homepage: https://uicast.dev
Matched naming pattern: node-uicast-expr
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 233 (MODERATE_USAGE)
Codebase size: 3155 lines, 139.0 kB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • INFOLegitimate documentation effort (205 chars with homepage link).
  • HIGHPackage registered recently (17 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/errors.js:7 (+3 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/errors.js:7 (+1 more occurrence(s) elsewhere)
  • CRITICALSOURCE_CODE_DYNAMIC_CODE_LOADER: execution primitive combined with decode/network/obfuscation call in package/dist/errors.js (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/index.d.ts:148
  • INFOSubstantial functional codebase (3155 LOC across 44 file(s)).

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
0.1.0
 npm Very Risky 90 ↑ 38.1/day 876 177 23d diskgraph
Author: Unknown
Package purpose: File-relationship engine for AI agents: disk usage, ownership, evidence, and history — a thin installer for the prebuilt DiskGraph binaries
Claimed homepage: https://github.com/loong10k/diskgraph
Matched naming pattern: node-diskgraph-core
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 219 (MODERATE_USAGE)
Codebase size: 177 lines, 7.6 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (13 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node lib/install.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/diskgraph-mcp.js:7 (+2 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/diskgraph-mcp.js:14 (+2 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/lib/install.js:12
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/install.js:60 (+1 more occurrence(s) elsewhere)
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/lib/install.js, which makes network calls and executes/decodes/reads secrets

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
0.1.5
 pypi Very Risky 170 ↑ 33.6/day 739 965 22d abstract
Author: Unknown (partners@abstractendeavors.com)
Package purpose: Secure Files: share local files and folders through abstractendeavors.com (or your own server) without uploading them. Includes the desktop agent, the shared tar/resume core and the server relay.
Claimed homepage: https://pypi.org/project/abstract-securefiles/
Matched naming pattern: python-abstract-securefiles
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 23 (MODERATE_USAGE)
Codebase size: 965 lines, 45.6 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPublisher email domain '@abstractendeavors.com' matches package identifier token 'abstractendeavors', verifying identifiable third-party organization ownership.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in abstract_securefiles-0.1.5/src/abstract_securefiles/agent/autostart.py:29
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in abstract_securefiles-0.1.5/src/abstract_securefiles/agent/autostart.py:45
  • HIGHSYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in abstract_securefiles-0.1.5/src/abstract_securefiles/agent/autostart.py:25
  • HIGHSYSTEM_PERSISTENCE_TAMPERING: 'Windows Run Key Persistence' found in abstract_securefiles-0.1.5/src/abstract_securefiles/agent/autostart.py:25
  • CRITICALSOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in abstract_securefiles-0.1.5/src/abstract_securefiles/agent/autostart.py

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.23.5
 pypi SUSPICIOUS 75 ↑ 33.1/day 794 122,843 24d viame
Author: Unknown
Package purpose: VIAME: Video and Image Analytics for Marine Environments
Claimed homepage: https://pypi.org/project/viame/
Matched naming pattern: python-viame-core
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 27 (MODERATE_USAGE)
Codebase size: 122843 lines, 6.3 MB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in viame-0.23.5.data/data/configs/3d.py:103
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in viame-0.23.5.data/data/configs/3d.py:146
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in viame-0.23.5.data/data/configs/add_ons.py:63
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in viame-0.23.5.data/data/configs/extract.py:105
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in viame-0.23.5.data/data/configs/index.py:169
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in viame-0.23.5.data/data/configs/index.py:136

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
2.0.0
 npm Very Risky 92 ↑ 31.4/day 754 984 24d lecodes
Author: Unknown
Package purpose: What every web renderer and host of LeCodes shares: the fetch-buffer and media-player registries, the presentation model (router, presentPlayer, native views, touch), svg/video leaves, fonts, source-map errors, the canvas host
Matched naming pattern: lecodes-lecodes-shared
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 188 (MODERATE_USAGE)
Codebase size: 984 lines, 50.1 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (23 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/src/sourcemapError.ts:3
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/src/sourcemapError.ts:108
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/src/sourcemapError.ts:108
  • HIGHSUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/src/sourcemapError.ts:108
  • CRITICALSOURCE_CODE_DYNAMIC_CODE_LOADER: execution primitive combined with decode/network/obfuscation call in package/src/sourcemapError.ts

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
latest
 npm Very Risky 127 ↑ 29.5/day 708 120,171 24d leanchycode
Author: Leanchy
Package purpose: InfiniMask - AI-powered coding assistant CLI built on Claude
Matched naming pattern: node-leanchycode-core
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 177 (MODERATE_USAGE)
Codebase size: 120171 lines, 4.8 MB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (23 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/install-skills.cjs'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/bingo-win.cjs:118 (+4 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/bin/bingo-win.cjs:185
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/bingo-win.cjs:8 (+135 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/src/utils/ansiToPng.ts:61 (+2 more occurrence(s) elsewhere)

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
latest
 npm Very Risky 100 ↑ 27.9/day 669 13,656 24d web
Author: Unknown
Package purpose: The web host of LeCodes: a compiled bundle in the browser on the runtime module (Filament, creator-2d, the tree UI) — a library that fills the container it is given
Matched naming pattern: lecodes-web-host
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 167 (MODERATE_USAGE)
Codebase size: 13656 lines, 548.6 kB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (23 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/api.d.ts:60 (+4 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/chunks/creator-2d-D13oxDsX.js:1726 (+3 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/index.js:4214
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/index.js:4204
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index.js:924

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
latest
 npm Very Risky 107 ↑ 27.0/day 459 11,100 17d xnng
Author: Unknown
Package purpose: Agent-native browser control through a Skill + CLI: share your existing, logged-in Chrome locally or across multiple machines.
Claimed homepage: https://www.npmjs.com/package/@xnng/browser-relay
Matched naming pattern: node-xnng-browser-relay
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 114 (MODERATE_USAGE)
Codebase size: 11100 lines, 470.9 kB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (14 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node server/install.js'
  • HIGHLIFECYCLE_SCRIPT: 'postuninstall' -> 'node server/uninstall.js'
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/extension/activity.js:284 (+6 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/extension/automation.js:936
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/server/cli.js:93 (+3 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/server/cli.js:1400

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
0.1.0
 npm Very Risky 90 ↑ 26.6/day 611 127 23d vpn
Author: GeiserX
Package purpose: MCP server for VPN Bypass, the macOS menu bar app that routes chosen domains and services around the VPN
Claimed homepage: https://github.com/GeiserX/vpn-bypass-mcp
Matched naming pattern: vpn-vpn-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 152 (MODERATE_USAGE)
Codebase size: 127 lines, 4.8 kB (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (17 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/postinstall.js:8 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postinstall.js:82
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postinstall.js:12
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/postinstall.js, which makes network calls and executes/decodes/reads secrets
  • INFOModerate community usage with 611 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
0.8.0.214
 pypi SUSPICIOUS 75 ↑ 25.8/day 542 573 21d torchlpc
Author: Unknown (chin-yun.yu@qmul.ac.uk)
Package purpose: Fast, efficient, and differentiable time-varying LPC filtering in PyTorch.
Claimed homepage: https://pypi.org/project/torchlpc-wheels/
Matched naming pattern: python-torchlpc-wheels
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 31 (MODERATE_USAGE)
Codebase size: 573 lines, 23.3 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALMODULE_TOPLEVEL_EXECUTION: 'exec' executed at module scope (runs on import) in torchlpc/core.py:18
  • CRITICALMODULE_TOPLEVEL_EXECUTION: 'exec' executed at module scope (runs on import) in torchlpc/core.py:57
  • INFOSubstantial functional codebase (573 LOC across 5 file(s)).
  • INFOModerate community usage with 542 monthly downloads.
  • MEDIUMPackage executes code at install/import time, but no exfiltration destination, credential access, encoded payload, obfuscation, shell cradle, or persistence primitive corroborates a weaponized payload. Downgraded from MALICIOUS to SUSPICIOUS pending manual review.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
2.3.2
 pypi SUSPICIOUS 75 ↑ 20.4/day 429 7,613 21d event
Author: Hexadexa (andrei@hexadexa.dev)
Package purpose: Analytics suite for Pretix: sales against previous editions, first-timers and returning people, audience, tickets and check-in — without storing personal data
Claimed homepage: https://github.com/h3x4d3x4/Pretix-Event-Analytics
Matched naming pattern: pretix-event-analytics
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 17 (MODERATE_USAGE)
Codebase size: 7613 lines, 394.8 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in pretix_event_analytics-2.3.2/pretix_event_analytics/services/hash_service.py:83
  • CRITICALINSTALL_TIME_CMDCLASS_OVERRIDE: 'BuildWithTranslations.run()' executes 'subprocess.run' during installation in pretix_event_analytics-2.3.2/setup.py:24
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pretix_event_analytics-2.3.2/setup.py:24
  • INFOSubstantial functional codebase (7613 LOC across 61 file(s)).
  • INFOModerate community usage with 429 monthly downloads.
  • MEDIUMPackage executes code at install/import time, but no exfiltration destination, credential access, encoded payload, obfuscation, shell cradle, or persistence primitive corroborates a weaponized payload. Downgraded from MALICIOUS to SUSPICIOUS pending manual review.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.2.0
 npm Very Risky 90 ↑ 19.7/day 355 79 18d @cookmd/mcp
Author: Unknown
Package purpose: MCP server for Cooklang recipes and cook.md: validate, plan, shop, pantry, reports, nutrition and import
Claimed homepage: https://cook.md/help/mcp
Matched naming pattern: node-@cookmd/mcp-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 88 (MODERATE_USAGE)
Codebase size: 79 lines, 3.1 kB (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (14 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/cook-mcp.js:4 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/cook-mcp.js:10 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:38
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:19
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
latest
 npm Very Risky 92 ↑ 19.5/day 332 8,039 17d oodlc
Author: Unknown
Package purpose: Oodle, the CLI for OODLC (Open Outcome Delivery Lifecycle). CI that protects declared outcomes and watches observed behavior.
Claimed homepage: https://github.com/oodlc/oodle#readme
Matched naming pattern: node-oodlc-oodle
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 83 (MODERATE_USAGE)
Codebase size: 8039 lines, 434.2 kB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (14 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/adapter.js:12 (+4 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/adapter.js:326 (+13 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/dist/next.js:118 (+1 more occurrence(s) elsewhere)
  • HIGHANTI_ANALYSIS_EVASION: 'CI/CD & Sandbox Environment Detection' found in package/src/ci.ts:2 (+4 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/cli.ts:716 (+4 more occurrence(s) elsewhere)
  • HIGHSYSTEM_PERSISTENCE_TAMPERING: 'Shell Profile Backdoor Injection' found in package/src/cli.ts:297 (+1 more occurrence(s) elsewhere)

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
5.1.0.1
 pypi SUSPICIOUS 75 ↑ 17.6/day 387 3,424 22d samsrc
Author: NIH MEG Core Facility
Package purpose: Synthetic Aperture Magnetometry Suite Version 5
Claimed homepage: https://pypi.org/project/samsrc/
Matched naming pattern: python-samsrc-core
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 7 (MODERATE_USAGE)
Codebase size: 3424 lines, 138.9 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • MEDIUMPackage registered with suspiciously high major version (v5.1.0.1, major 5) despite recent registration (20 days ago, 2 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in samsrc/normalize.py:17
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in samsrc/fiducials.py:200
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in samsrc/launcher.py:49
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in samsrc/launcher.py:42
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in samsrc/_legacy/runscript.py:32

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
latest
 npm Very Risky 75 ↑ 17.4/day 365 4,729 21d leahd
Author: Unknown
Package purpose: 面向 Codex 的 pi SDK 子代理与 pi-tui 监控器
Matched naming pattern: node-leahd-co-pi
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 91 (MODERATE_USAGE)
Codebase size: 4729 lines, 262.1 kB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (13 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/npm-postinstall.mjs'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cli.js:39 (+11 more occurrence(s) elsewhere)
  • HIGHCREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in package/dist/instructions.js:4
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/install.mjs:29
  • INFOSubstantial functional codebase (4729 LOC across 42 file(s)).

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
3.1.2
 pypi Very Risky 260 ↑ 16.9/day 406 40,095 24d pymizan
Author: MIZAN Contributors
Package purpose: Agentic Personal AI - Quranic Cognitive Architecture for human-like reasoning
Claimed homepage: https://pypi.org/project/pymizan/
Matched naming pattern: python-pymizan-core
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 12 (MODERATE_USAGE)
Codebase size: 40095 lines, 1.8 MB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pymizan-3.1.2/backend/doctor.py:469
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in pymizan-3.1.2/backend/providers.py:27
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in pymizan-3.1.2/backend/agents/base.py:2417
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pymizan-3.1.2/backend/agents/base.py:1188
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in pymizan-3.1.2/backend/agents/base.py:105
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in pymizan-3.1.2/backend/agents/specialized.py:653

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.0.2
 npm Very Risky 90 ↑ 16.9/day 355 78 21d @rofy/cli
Author: Unknown
Package purpose: Rofy CLI: make images and videos with Rofy from a terminal.
Claimed homepage: https://github.com/rofy-ai/rofy-cli#readme
Matched naming pattern: node-@rofy/cli-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 88 (MODERATE_USAGE)
Codebase size: 78 lines, 3.5 kB (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (13 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:24
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:18 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/rofy.js:3
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/rofy.js:7
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
1.0.4
 pypi Very Risky 185 ↑ 16.0/day 288 5,864 18d test
Author: Qmpass
Package purpose: Run your Qmpass automated tests on your own machines, securely connected to your Jira projects.
Claimed homepage: https://pypi.org/project/qmpass-test-agent/
Matched naming pattern: qmpass-test-agent
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 30 (MODERATE_USAGE)
Codebase size: 5864 lines, 255.7 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in qmpass/cli.py:55
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in qmpass/cli.py:267
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in qmpass/desktop.py:50
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: getattr() resolving 'run' detected in qmpass/logging_setup.py:106
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: getattr() resolving 'run' detected in qmpass/logging_setup.py:129
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: Call to os.environ.get() in qmpass/logging_setup.py:142

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
latest
 npm Very Risky 75 ↑ 15.9/day 349 6,431 22d collab
Author: Unknown
Package purpose: DSH 协作画布插件（话布）：人和 AI 共写的 Markdown 文档面。AI 通过 canvas_* 工具读写，带版本冲突检测、可撤销历史与文件持久化。
Claimed homepage: https://github.com/godchen520/collab-canvas#readme
Matched naming pattern: node-collab-canvas
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 87 (MODERATE_USAGE)
Codebase size: 6431 lines, 363.6 kB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (13 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/lib/client.js:25 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/lib/client.js:19 (+3 more occurrence(s) elsewhere)
  • CRITICALSOURCE_CODE_DYNAMIC_CODE_LOADER: execution primitive combined with decode/network/obfuscation call in package/lib/client.js
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/host.js:61
  • INFOSubstantial functional codebase (6431 LOC across 5 file(s)).
  • INFOModerate community usage with 349 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
0.1.2
 pypi SUSPICIOUS 75 ↑ 14.6/day 262 589 18d invoice
Author: Gjusev
Package purpose: Matched-pair EN/DE/ES invoice extraction regression tests with deterministic CI gates.
Claimed homepage: https://pypi.org/project/locale-invoice-check/
Matched naming pattern: locale-invoice-check
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 38 (MODERATE_USAGE)
Codebase size: 589 lines, 30.9 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in locale_invoice_check-0.1.2/kaggle-kernel/offline/script.py:42
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in locale_invoice_check-0.1.2/kaggle-kernel/offline/script.py:24
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in locale_invoice_check-0.1.2/src/locale_invoice_check/extractors.py:72
  • INFOSubstantial functional codebase (589 LOC across 10 file(s)).
  • INFOModerate community usage with 262 monthly downloads.
  • MEDIUMPackage executes code at install/import time, but no exfiltration destination, credential access, encoded payload, obfuscation, shell cradle, or persistence primitive corroborates a weaponized payload. Downgraded from MALICIOUS to SUSPICIOUS pending manual review.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
1.0.0
 npm Very Risky 90 ↑ 14.1/day 324 1,292 23d @donaina/driftwood
Author: donaina
Package purpose: Real-time API contract drift detector & sniffing proxy for JavaScript/TypeScript and Node.js applications
Claimed homepage: https://github.com/donaina/Driftwood#readme
Matched naming pattern: node-@donaina/driftwood-driftwood
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 81 (MODERATE_USAGE)
Codebase size: 1292 lines, 589.7 kB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (13 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node ./bin/install.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/check-pack.js:39 (+4 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/check-pack.js:103 (+2 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/web/dist/history.js:1 (+6 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/bin/install.js:3
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/prepack.js:57 (+2 more occurrence(s) elsewhere)

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
latest
 npm Possible Squatted Stub 75 ↑ 13.0/day 260 15 20d scroll
Author: Unknown
Package purpose: Polyfill for CSS scroll anchoring in older browsers
Matched naming pattern: css-scroll-anchor
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 65 (MODERATE_USAGE)
Codebase size: 15 lines, 525 Bytes (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'css-scroll-anchor-polyfill' matches AI hallucination template [css] + [scroll] + [anchor].
  • HIGHClaims critical enterprise brand identity ('SCROLL').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
  • INFOModerate community usage with 260 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
latest
 npm Possible Squatted Stub 75 ↑ 12.2/day 245 15 20d scroll
Author: Unknown
Package purpose: Polyfill for CSS scroll-state container queries
Matched naming pattern: css-scroll-state
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 61 (MODERATE_USAGE)
Codebase size: 15 lines, 525 Bytes (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'css-scroll-state-polyfill' matches AI hallucination template [css] + [scroll] + [state].
  • HIGHClaims critical enterprise brand identity ('SCROLL').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
  • INFOModerate community usage with 245 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
latest
 npm Possible Squatted Stub 75 ↑ 11.9/day 214 15 18d hardhat
Author: Unknown
Package purpose: Hardhat integration providing kex utility for Node
Matched naming pattern: node-hardhat-kex
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 53 (MODERATE_USAGE)
Codebase size: 15 lines, 525 Bytes (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'hardhat-kex' matches AI hallucination template [node] + [hardhat] + [kex].
  • HIGHClaims critical enterprise brand identity ('HARDHAT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
  • INFOModerate community usage with 214 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
latest
 npm Possible Squatted Stub 75 ↑ 11.8/day 236 15 20d hardhat
Author: Unknown
Package purpose: This document describes the management of vulnerabilities for the project and all modules within the organization.
Matched naming pattern: node-hardhat-jsx
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 59 (MODERATE_USAGE)
Codebase size: 15 lines, 525 Bytes (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'hardhat-jsx' matches AI hallucination template [node] + [hardhat] + [jsx].
  • HIGHClaims critical enterprise brand identity ('HARDHAT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
  • INFOModerate community usage with 236 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
0.1.0
 pypi SUSPICIOUS 75 ↑ 11.0/day 243 597 22d mosaic
Author: Kamal Karteek U, Mishka Tiwari, Manjunath Patil, Mayeraa Singh
Package purpose: Python client and command line for mOSaic, the operating system for organizational AI: governed, auditable AI agents on your own machine.
Claimed homepage: https://pypi.org/project/mosaic-os/
Matched naming pattern: python-mosaic-os
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 5 (MODERATE_USAGE)
Codebase size: 597 lines, 34.5 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALMODULE_TOPLEVEL_EXECUTION: 'os.system' executed at module scope (runs on import) in mosaic_os-0.1.0/src/mosaic_os/cli.py:16
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in mosaic_os-0.1.0/src/mosaic_os/cli.py:16
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in mosaic_os-0.1.0/src/mosaic_os/cli.py:24
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in mosaic_os-0.1.0/src/mosaic_os/client.py:26
  • INFOSubstantial functional codebase (597 LOC across 4 file(s)).
  • INFOModerate community usage with 243 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.0
 npm Very Risky 75 ↑ 10.9/day 208 40,924 19d agent
Author: Unknown
Package purpose: MCP server for Agent Escrow: let your agent hire other agents on Solana and pay only for work that passes a committed acceptance test.
Claimed homepage: https://aralroca.github.io/agent-escrow/
Matched naming pattern: agent-agent-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 52 (MODERATE_USAGE)
Codebase size: 40924 lines, 1.6 MB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'GitHub Gists API Exfiltration (Dead Drop)' found in package/dist/index.js:40810
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/index.js:2954
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/index.js:33682
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index.js:11322
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/dist/index.js:9128
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:32330

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
1.0.0
 npm Very Risky 117 ↑ 10.7/day 204 21 19d @imgauravbhosale/malwhunter
Author: Unknown
Package purpose: SAFE, INERT test fixture for exercising MalwHunter (https://github.com/ImGauravbhosale/Malwhunter) in a real CI pipeline. Every pattern in this package is written to match known npm supply-chain malware SHAPES (install-script abuse, bulk env enumeration,
Matched naming pattern: node-@imgauravbhosale/malwhunter-malwhunter-ci-demo-fixture
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 51 (MODERATE_USAGE)
Codebase size: 21 lines, 934 Bytes (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node -e "console.log('[malwhunter-ci-demo-fixture] inert postinstall — pattern-match test only, no real payload')"'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Discord Webhook' found in package/index.js:22
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:16
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/index.js:11
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/index.js:11

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
1.2.2
 pypi Very Risky 120 ↑ 10.7/day 235 720 22d ws
Author: Aforo, Inc.
Package purpose: Aforo WebSocket Metering SDK — wrappers for the `websockets` library + FastAPI/Starlette WebSocket routes that meter frames, bytes and connection duration.
Claimed homepage: https://pypi.org/project/aforo-ws-metering/
Matched naming pattern: aforo-ws-metering
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 19 (MODERATE_USAGE)
Codebase size: 720 lines, 34.8 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (11 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in aforo_ws_metering-1.2.2/setup.py:7
  • INFOSubstantial functional codebase (720 LOC across 3 file(s)).
  • INFOModerate community usage with 235 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
1.2.2
 pypi Very Risky 120 ↑ 10.7/day 235 650 22d mqtt
Author: Aforo, Inc.
Package purpose: Aforo MQTT Metering SDK — paho-mqtt and aiomqtt client wrappers that meter PUBLISH/SUBSCRIBE/CONNECT/DISCONNECT events.
Claimed homepage: https://pypi.org/project/aforo-mqtt-metering/
Matched naming pattern: aforo-mqtt-metering
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 20 (MODERATE_USAGE)
Codebase size: 650 lines, 32.2 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (11 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in aforo_mqtt_metering-1.2.2/setup.py:7
  • INFOSubstantial functional codebase (650 LOC across 3 file(s)).
  • INFOModerate community usage with 235 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
1.2.2
 pypi Very Risky 120 ↑ 10.6/day 233 666 22d grpc
Author: Aforo, Inc.
Package purpose: Aforo gRPC Metering SDK — server interceptors and decorators that meter every RPC call to Aforo's usage ingestor.
Claimed homepage: https://pypi.org/project/aforo-grpc-metering/
Matched naming pattern: aforo-grpc-metering
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 20 (MODERATE_USAGE)
Codebase size: 666 lines, 33.8 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (11 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in aforo_grpc_metering-1.2.2/setup.py:7
  • INFOSubstantial functional codebase (666 LOC across 3 file(s)).
  • INFOModerate community usage with 233 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
1.2.2
 pypi Very Risky 120 ↑ 10.4/day 229 808 22d graphql
Author: Aforo, Inc.
Package purpose: Aforo GraphQL Metering SDK — Strawberry/Graphene/Ariadne extensions + ASGI middleware that meter every GraphQL operation with AST-accurate complexity scoring.
Claimed homepage: https://pypi.org/project/aforo-graphql-metering/
Matched naming pattern: aforo-graphql-metering
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 16 (MODERATE_USAGE)
Codebase size: 808 lines, 40.0 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (11 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in aforo_graphql_metering-1.2.2/setup.py:7
  • INFOSubstantial functional codebase (808 LOC across 3 file(s)).
  • INFOModerate community usage with 229 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
1.4.2-1
 npm Very Risky 90 ↑ 10.3/day 196 540 19d @ohos
Author: Unknown
Package purpose: Bun is a fast all-in-one JavaScript runtime.
Claimed homepage: https://bun.com
Matched naming pattern: node-@ohos-bun
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 49 (MODERATE_USAGE)
Codebase size: 540 lines, 17.1 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • HIGHBUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bin/bunx.exe' in npm tarball
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/install.js:249
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:252
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:63
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:48

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
latest
 npm Possible Squatted Stub 75 ↑ 10.2/day 163 15 16d hardhat
Author: Unknown
Package purpose: Hardhat integration providing bits utility for Node
Matched naming pattern: node-hardhat-bits
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 40 (MODERATE_USAGE)
Codebase size: 15 lines, 525 Bytes (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'hardhat-bits' matches AI hallucination template [node] + [hardhat] + [bits].
  • HIGHClaims critical enterprise brand identity ('HARDHAT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
  • INFOModerate community usage with 163 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
latest
 npm Very Risky 75 ↑ 9.8/day 187 4,431 19d uncovr
Author: Abhishek Sharma
Package purpose: Flags the lines an AI wrote in a pull request that no test executes, using provenance recorded when Claude Code writes them.
Claimed homepage: https://github.com/uncovrhq/uncovr#readme
Matched naming pattern: node-uncovr-core
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 46 (MODERATE_USAGE)
Codebase size: 4431 lines, 186.6 kB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/capture-hook.js:33 (+5 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/capture-hook.js:76 (+4 more occurrence(s) elsewhere)
  • HIGHANTI_ANALYSIS_EVASION: 'CI/CD & Sandbox Environment Detection' found in package/dist/check-cli.js:50
  • CRITICALSOURCE_CODE_EVASIVE_PAYLOAD: anti-analysis evasion combined with execution/payload hook in package/dist/check-cli.js
  • INFOSubstantial functional codebase (4431 LOC across 40 file(s)).
  • INFOModerate community usage with 187 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
latest
 npm Possible Squatted Stub 75 ↑ 9.7/day 175 15 18d hardhat
Author: Unknown
Package purpose: Hardhat integration providing spack utility for Node
Matched naming pattern: node-hardhat-spack
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 43 (MODERATE_USAGE)
Codebase size: 15 lines, 525 Bytes (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'hardhat-spack' matches AI hallucination template [node] + [hardhat] + [spack].
  • HIGHClaims critical enterprise brand identity ('HARDHAT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
  • INFOModerate community usage with 175 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
1.0.0
 npm Very Risky 85 ↑ 9.6/day 201 9,058 21d smoothness
Author: Den Odell
Package purpose: The measuring engine behind playwright-smoothness: frame, input and long-list smoothness checks in Chromium, driven through a small adapter interface.
Claimed homepage: https://github.com/denodell/playwright-smoothness#readme
Matched naming pattern: node-smoothness-core
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 50 (MODERATE_USAGE)
Codebase size: 9058 lines, 458.1 kB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/index.cjs:1952 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/index.cjs:1261 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index.cjs:1953 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.cjs:2433 (+1 more occurrence(s) elsewhere)
  • HIGHSUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/dist/index.cjs:1261 (+1 more occurrence(s) elsewhere)
  • HIGHANTI_ANALYSIS_EVASION: 'CI/CD & Sandbox Environment Detection' found in package/dist/index.cjs:4069 (+1 more occurrence(s) elsewhere)

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
2.2.0
 pypi Very Risky 140 ↑ 9.5/day 209 5,597 22d koolie
Author: Unknown
Package purpose: Rules, skills and a protective hook for AI coding assistants - one rule source, installed per project.
Claimed homepage: https://pypi.org/project/koolie/
Matched naming pattern: python-koolie-core
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 13 (MODERATE_USAGE)
Codebase size: 5597 lines, 340.8 kB (LARGE_CODEBASE)
Automated signals flagged:
  • HIGHPackage registered recently (15 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in koolie/baum/.koolie/core/banner.py:368
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in koolie/baum/.koolie/core/build/assemble.py:101
  • CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in koolie/baum/.koolie/core/build/build-docx.py:163
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in koolie/baum/.koolie/core/build/build-docx.py:118
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in koolie/baum/.koolie/core/clientmap.py:509
  • HIGHCREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in koolie/baum/.koolie/core/install.py:1003
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in koolie/baum/.koolie/core/install.py:939

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.0
 npm Very Risky 105 ↑ 9.4/day 169 53,796 18d @happycc/cli
Author: Kirill Dubovitskiy
Package purpose: Run coding agents on your workstation and follow them from your organization's happycc app
Claimed homepage: https://github.com/rophy/happycc
Matched naming pattern: node-@happycc/cli-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 42 (MODERATE_USAGE)
Codebase size: 53796 lines, 2.0 MB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/unpack-tools.cjs'
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/AcpBackend-CVzOYAar.cjs:404 (+22 more occurrence(s) elsewhere)
  • HIGHCREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in package/dist/api-CjtP4EE0.cjs:2399 (+3 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/api-CjtP4EE0.cjs:16 (+11 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/api-CjtP4EE0.cjs:2292 (+14 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/api-CjtP4EE0.cjs:1227 (+1 more occurrence(s) elsewhere)

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
0.2.2
 npm Very Risky 90 ↑ 9.2/day 222 149 24d @ur
Author: Unknown
Package purpose: Oort binary platform CLI — installs the prebuilt oort binary for your platform from GitHub Releases.
Claimed homepage: https://github.com/ur-wesley/serverless#readme
Matched naming pattern: node-@ur-oort
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 55 (MODERATE_USAGE)
Codebase size: 149 lines, 6.0 kB (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node ./install.js'
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:30
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:10
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/oort.js:5
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/oort.js:17
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
0.8.0
 pypi Very Risky 170 ↑ 9.0/day 189 345 21d data
Author: Unknown (support@safenai.io)
Package purpose: Generative inpaint transformation (LaMa) and the associated tool-model plugin for kcai data-sampling
Claimed homepage: https://pypi.org/project/kcai-data-sampling-lama/
Matched naming pattern: kcai-data-sampling
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 15 (MODERATE_USAGE)
Codebase size: 345 lines, 16.8 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (13 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in kcai_data_sampling_lama-0.8.0/src/kcai_data_sampling_lama/api/models/lama.py:54
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in kcai_data_sampling_lama-0.8.0/src/kcai_data_sampling_lama/api/models/lama.py:49
  • CRITICALSOURCE_CODE_DYNAMIC_CODE_LOADER: execution primitive combined with decode/network/obfuscation call in kcai_data_sampling_lama-0.8.0/src/kcai_data_sampling_lama/api/models/lama.py
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in kcai_data_sampling_lama-0.8.0/src/kcai_data_sampling_lama/api/models/weights.py:29
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in kcai_data_sampling_lama-0.8.0/src/kcai_data_sampling_lama/api/models/weights.py:24
  • INFOModerate community usage with 189 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
latest
 npm Very Risky 77 ↑ 8.7/day 182 1,039 21d streaked
Author: Ayush Kumar
Package purpose: Your git commit streaks as a smooth desktop widget: activity rings, streaks, a heatmap and insights.
Matched naming pattern: node-streaked-widget
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 45 (MODERATE_USAGE)
Codebase size: 1039 lines, 55.7 kB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/main.js:3 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/main.js:11 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/streakd.js:45
  • HIGHSYSTEM_PERSISTENCE_TAMPERING: 'Shortcut Hijacking (.lnk Rewrite / Browser Extension Sideload)' found in package/bin/streakd.js:41
  • CRITICALSOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/bin/streakd.js

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
latest
 npm Very Risky 77 ↑ 8.6/day 181 2,775 21d agentdesk
Author: Unknown
Package purpose: One panel for all your AI coding agents. Know which one is waiting on you.
Claimed homepage: https://github.com/longroad93/agentdesk#readme
Matched naming pattern: node-agentdesk-panel
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 45 (MODERATE_USAGE)
Codebase size: 2775 lines, 139.5 kB (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/adapters.js:139 (+6 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/agentdesk.js:185 (+3 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/bin/agentdesk.js:15 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/src/probe.js:27
  • HIGHSYSTEM_PERSISTENCE_TAMPERING: 'Systemd / macOS LaunchAgent Persistence' found in package/src/uninit.js:105
  • CRITICALSOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/src/uninit.js

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
0.4.0
 npm Very Risky 90 ↑ 8.2/day 155 96 19d @codeteck/agentml
Author: Nom-nom-hub
Package purpose: AI-native markup language and CLI for agent execution contracts
Claimed homepage: https://nom-nom-hub.github.io/agentml/
Matched naming pattern: node-@codeteck/agentml-agentml
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 38 (MODERATE_USAGE)
Codebase size: 96 lines, 3.9 kB (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node ./bin/install.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/agentml.js:6 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/agentml.js:20 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/bin/install.js:8
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/bin/install.js, which makes network calls and executes/decodes/reads secrets
  • INFOModerate community usage with 155 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
latest
 npm Possible Squatted Stub 75 ↑ 8.0/day 184 15 23d hardhat
Author: Unknown
Package purpose: Hardhat integration providing plus utility for Node
Matched naming pattern: node-hardhat-plus
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 46 (MODERATE_USAGE)
Codebase size: 15 lines, 525 Bytes (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'hardhat-plus' matches AI hallucination template [node] + [hardhat] + [plus].
  • HIGHClaims critical enterprise brand identity ('HARDHAT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
  • INFOModerate community usage with 184 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on npm →
LINK COPIED TO CLIPBOARD