Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Fast adoption alone isn't evidence of wrongdoing; use this to find candidates worth a second look, not to accuse anyone.
Packages published in the last 90 days, ranked by downloads-per-day since publish — only packages with known download data are shown.
email:, domain:, keyword:, version:, age:<6h
filters as the other tabs (age: here filters on top of this tab's own 90-day cutoff, not instead of it).
| Package | Ecosystem | Verdict | Score | Growth/day | Downloads/mo | Lines | Age | Targeted |
|---|---|---|---|---|---|---|---|---|
|
latest
|
npm | Very Risky | 160 | ↑ 140.7/day | 5488 | 11,760 | 39d | reelkit |
|
Author: Daniel Livshin
Package purpose: CLI and Claude skill for making short-form video with a shared asset library.
Claimed homepage: https://reelkit.cc
Matched naming pattern: node-reelkit-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 1372 (ACTIVE_COMMUNITY_USE)
Codebase size: 11760 lines, 1.0 MB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
1.0.1
|
npm | Very Risky | 120 | ↑ 109.0/day | 327 | 7,254 | 70h | data |
|
Author: Alex Morgan (alex.morgan.dev@example.com)
Package purpose: Generate realistic mock transaction data for testing e-commerce, fintech, and retail applications.
Claimed homepage: https://github.com/alexmorgan-dev/mock-data-sdk#readme
Matched naming pattern: mock-data-sdk
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 81 (MODERATE_USAGE)
Codebase size: 7254 lines, 151.6 kB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.14.2
|
npm | Very Risky | 145 | ↑ 66.9/day | 2541 | 3,620 | 38d | profullstack |
|
Author: Profullstack, Inc.
Package purpose: qc: qrypt.chat in your terminal. A full-screen end-to-end encrypted chat client (ML-KEM-1024), plus a scriptable CLI and an MCP server.
Claimed homepage: https://qrypt.chat
Matched naming pattern: node-profullstack-qryptchat
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 635 (ACTIVE_COMMUNITY_USE)
Codebase size: 3620 lines, 144.9 kB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.8.0
|
npm | Very Risky | 175 | ↑ 64.5/day | 2450 | 8,039 | 38d | @oodlc/oodle |
|
Author: Unknown
Package purpose: Oodle, the CLI for OODLC (Open Outcome Delivery Lifecycle). CI that protects declared outcomes and watches observed behavior.
Claimed homepage: https://github.com/oodlc/oodle#readme
Matched naming pattern: node-@oodlc/oodle-oodle
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 612 (ACTIVE_COMMUNITY_USE)
Codebase size: 8039 lines, 434.2 kB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
latest
|
npm | Very Risky | 275 | ↑ 60.1/day | 2225 | 9,574 | 37d | 67router |
|
Author: Unknown
Package purpose: 67Router CLI - Start and manage 67Router server
Matched naming pattern: node-67router-core
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 556 (ACTIVE_COMMUNITY_USE)
Codebase size: 9574 lines, 11.4 MB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.3.37
|
npm | Very Risky | 102 | ↑ 44.4/day | 1643 | 44,775 | 37d | @citeark/agent |
|
Author: Unknown
Package purpose: Independent paper research, experiment execution and signed CAP artifacts
Claimed homepage: https://citeark.co/docs/local-reproduction
Matched naming pattern: node-@citeark/agent-agent
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 410 (ACTIVE_COMMUNITY_USE)
Codebase size: 44775 lines, 2.9 MB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
latest
|
npm | Very Risky | 75 | ↑ 42.1/day | 1641 | 7,657 | 39d | yannelli |
|
Author: Unknown
Package purpose: Local configuration and hook console for Concise
Claimed homepage: https://github.com/yannelli/be-concise#readme
Matched naming pattern: node-yannelli-be-concise
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 410 (ACTIVE_COMMUNITY_USE)
Codebase size: 7657 lines, 384.0 kB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
latest
|
npm | Very Risky | 155 | ↑ 36.2/day | 1412 | 8,679 | 39d | wwkit |
|
Author: bluesliu (langcai163@163.com)
Package purpose: Unified network services: SOCKS5 over SSH tunnel (sks) + frp intranet penetration (frp), CLI managers in one package
Matched naming pattern: node-wwkit-nets
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 353 (ACTIVE_COMMUNITY_USE)
Codebase size: 8679 lines, 403.4 kB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.1.3
|
npm | Very Risky | 120 | ↑ 34.7/day | 1389 | 10,155 | 40d | locale |
|
Author: Unknown
Package purpose: Korean (한국어) language pack for the DeepSeek Harness Web UI
Claimed homepage: https://github.com/juliankang4/dsh-locale-ko#readme
Matched naming pattern: dsh-locale-ko
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 347 (ACTIVE_COMMUNITY_USE)
Codebase size: 10155 lines, 722.3 kB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.3.6
|
npm | Very Risky | 145 | ↑ 34.5/day | 1346 | 570 | 39d | ghostystudio |
|
Author: Unknown
Package purpose: MCP server that gives any coding agent (Claude Code, Cursor, Codex…) the user's own Chrome through the Ghosty for Chrome extension — locally via native messaging or remotely via Ghosty Studio.
Claimed homepage: https://www.ghosty.studio/docs/navegador
Matched naming pattern: node-ghostystudio-browser-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 336 (ACTIVE_COMMUNITY_USE)
Codebase size: 570 lines, 26.6 kB (MODERATE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
latest
|
npm | Very Risky | 75 | ↑ 30.1/day | 1143 | 976 | 38d | profullstack |
|
Author: Profullstack, Inc.
Package purpose: pwamart from the terminal: search the web-app store, install PWAs as app windows, publish your own, and browse it all in an hqtui TUI.
Claimed homepage: https://pwamart.com/developers#cli
Matched naming pattern: node-profullstack-pwamart
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 285 (ACTIVE_COMMUNITY_USE)
Codebase size: 976 lines, 52.2 kB (MODERATE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
latest
|
npm | Very Risky | 160 | ↑ 28.0/day | 1063 | 20,376 | 38d | darwin.finance |
|
Author: Unknown
Package purpose: Darwin CLI — trade and check your Darwin agent from a terminal
Claimed homepage: https://darwin.finance/agents/cli
Matched naming pattern: node-darwin.finance-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 265 (ACTIVE_COMMUNITY_USE)
Codebase size: 20376 lines, 729.8 kB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
2.4.1
|
npm | Very Risky | 170 | ↑ 21.8/day | 894 | 2,014 | 41d | knowyourtokens |
|
Author: Sarvesh Talele
Package purpose: Local-first token observability for every AI coding agent: Claude Code, Codex CLI, Gemini CLI, OpenCode and more. Debug prompts, context and cost.
Claimed homepage: https://sarveshtalele.github.io/knowyourtokens/
Matched naming pattern: node-knowyourtokens-core
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 223 (MODERATE_USAGE)
Codebase size: 2014 lines, 84.4 kB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.1.5
|
npm | Very Risky | 170 | ↑ 21.6/day | 820 | 2,222 | 38d | carterlasalle |
|
Author: Unknown
Package purpose: Carterlasalle integration providing seed-lab utility for Node
Matched naming pattern: node-carterlasalle-seed-lab
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 205 (MODERATE_USAGE)
Codebase size: 2222 lines, 106.2 kB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
1.6.4
|
npm | Very Risky | 140 | ↑ 12.2/day | 452 | 2,139 | 37d | remote |
|
Author: ayout
Package purpose: DSH 手机远程访问 + 远程桌面：内置本地代理(8090)+配置面板+远程屏幕/鼠标/键盘。配合任意内网穿透工具（cpolar/frp/ngrok等）把公网URL转发到 127.0.0.1:8090 即可用手机浏览器远程使用本机 Harness。本包为 dsh-remote-desktop 的修复分支，已修补 DSH 0.2.x browser-auth 导致的 401（dsh web authentication required）。
Claimed homepage: https://github.com/Assuredfive/dsh-remote-control-desktop#readme
Matched naming pattern: dsh-remote-control
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 113 (MODERATE_USAGE)
Codebase size: 2139 lines, 111.0 kB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.11.3
|
npm | Very Risky | 180 | ↑ 11.8/day | 459 | 125 | 39d | @ziuus/orbit |
|
Author: zius
Package purpose: Aesthetic Rust TUI system dashboard — CPU, memory, disk, network, GPU, processes, now-playing, clock, file manager, notes and visualizer in one terminal pane
Claimed homepage: https://github.com/ziuus/orbit-tui#readme
Matched naming pattern: node-@ziuus/orbit-orbit
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 114 (MODERATE_USAGE)
Codebase size: 125 lines, 5.2 kB (TINY_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.2.0
|
npm | Very Risky | 140 | ↑ 10.4/day | 417 | 536 | 40d | byteflowdb |
|
Author: byteflow
Package purpose: Build your own UI or agent on top of ByteFlow workflows — run, stream, schedule, upload, chat. Ships instructions for Claude Code, Cursor and other coding agents.
Matched naming pattern: node-byteflowdb-sdk
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 104 (MODERATE_USAGE)
Codebase size: 536 lines, 188.0 kB (MODERATE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
2.3.2
|
pypi | SUSPICIOUS | 75 | ↑ 10.2/day | 429 | 7,613 | 42d | event |
|
Author: Hexadexa (andrei@hexadexa.dev)
Package purpose: Analytics suite for Pretix: sales against previous editions, first-timers and returning people, audience, tickets and check-in — without storing personal data
Claimed homepage: https://github.com/h3x4d3x4/Pretix-Event-Analytics
Matched naming pattern: pretix-event-analytics
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 9 (MODERATE_USAGE)
Codebase size: 7613 lines, 394.8 kB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on PyPI → |
||||||||
|
0.2.0
|
pypi | Very Risky | 155 | ↑ 9.2/day | 378 | 619 | 41d | meddroid |
|
Author: Unknown (support@medicalandroid.com)
Package purpose: MedDroid SDK — fine-tune medical models, build RAGs, run local inference, and publish to the MedDroid Marketplace.
Claimed homepage: https://pypi.org/project/meddroid-sdk/
Matched naming pattern: python-meddroid-sdk
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 25 (MODERATE_USAGE)
Codebase size: 619 lines, 32.1 kB (MODERATE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on PyPI → |
||||||||
|
0.2.0
|
npm | Very Risky | 180 | ↑ 9.1/day | 344 | 79 | 38d | @cookmd/mcp |
|
Author: Unknown
Package purpose: MCP server for Cooklang recipes and cook.md: validate, plan, shop, pantry, reports, nutrition and import
Claimed homepage: https://cook.md/help/mcp
Matched naming pattern: node-@cookmd/mcp-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 86 (MODERATE_USAGE)
Codebase size: 79 lines, 3.1 kB (TINY_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.1.2
|
npm | Very Risky | 170 | ↑ 8.9/day | 365 | 5,282 | 41d | cogito |
|
Author: Tarun Agnihotri
Package purpose: Institutional memory for your codebase. Cogito captures architectural decisions and surfaces them automatically when relevant files are edited.
Claimed homepage: https://github.com/tarunagnihotri534/Cogito#readme
Matched naming pattern: node-cogito-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 91 (MODERATE_USAGE)
Codebase size: 5282 lines, 482.2 kB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
2.6.12
|
npm | Very Risky | 170 | ↑ 7.2/day | 297 | 19,074 | 41d | inneranimalmedia |
|
Author: Unknown
Package purpose: Prepackaged AgentSam CAD, spatial design, and robotics application kit.
Claimed homepage: https://github.com/SamPrimeaux/agentsam-sdk#readme
Matched naming pattern: node-inneranimalmedia-agentsam-cad-creator
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 74 (MODERATE_USAGE)
Codebase size: 19074 lines, 909.3 kB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.1.2
|
pypi | SUSPICIOUS | 75 | ↑ 6.9/day | 262 | 589 | 38d | invoice |
|
Author: Gjusev
Package purpose: Matched-pair EN/DE/ES invoice extraction regression tests with deterministic CI gates.
Claimed homepage: https://pypi.org/project/locale-invoice-check/
Matched naming pattern: locale-invoice-check
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 18 (MODERATE_USAGE)
Codebase size: 589 lines, 30.9 kB (MODERATE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on PyPI → |
||||||||
|
latest
|
npm | Possible Squatted Stub | 75 | ↑ 6.3/day | 260 | 15 | 41d | scroll |
|
Author: Unknown
Package purpose: Polyfill for CSS scroll anchoring in older browsers
Matched naming pattern: css-scroll-anchor
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 65 (MODERATE_USAGE)
Codebase size: 15 lines, 525 Bytes (EMPTY_STUB)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.1.0
|
npm | Very Risky | 165 | ↑ 6.1/day | 243 | 92 | 40d | pixelsteer |
|
Author: Unknown
Package purpose: Point-and-click visual feedback for frontend coding agents
Claimed homepage: https://pixelsteer.com
Matched naming pattern: node-pixelsteer-core
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 60 (MODERATE_USAGE)
Codebase size: 92 lines, 3.5 kB (TINY_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
latest
|
npm | Possible Squatted Stub | 75 | ↑ 6.0/day | 245 | 15 | 41d | scroll |
|
Author: Unknown
Package purpose: Polyfill for CSS scroll-state container queries
Matched naming pattern: css-scroll-state
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 61 (MODERATE_USAGE)
Codebase size: 15 lines, 525 Bytes (EMPTY_STUB)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.2.0
|
npm | Very Risky | 140 | ↑ 5.9/day | 229 | 30,650 | 39d | xokolat |
|
Author: jo-sense-mi
Package purpose: A local content-generation app that hands you a finished artifact
Claimed homepage: https://xoko.lat
Matched naming pattern: node-xokolat-core
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 57 (MODERATE_USAGE)
Codebase size: 30650 lines, 1.7 MB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
latest
|
npm | Possible Squatted Stub | 75 | ↑ 5.8/day | 236 | 15 | 41d | hardhat |
|
Author: Unknown
Package purpose: This document describes the management of vulnerabilities for the project and all modules within the organization.
Matched naming pattern: node-hardhat-jsx
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 59 (MODERATE_USAGE)
Codebase size: 15 lines, 525 Bytes (EMPTY_STUB)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
latest
|
npm | Possible Squatted Stub | 75 | ↑ 5.5/day | 214 | 15 | 39d | hardhat |
|
Author: Unknown
Package purpose: Hardhat integration providing kex utility for Node
Matched naming pattern: node-hardhat-kex
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 53 (MODERATE_USAGE)
Codebase size: 15 lines, 525 Bytes (EMPTY_STUB)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.1.0
|
npm | Very Risky | 140 | ↑ 5.5/day | 218 | 40,924 | 40d | agent |
|
Author: Unknown
Package purpose: MCP server for Agent Escrow: let your agent hire other agents on Solana and pay only for work that passes a committed acceptance test.
Claimed homepage: https://aralroca.github.io/agent-escrow/
Matched naming pattern: agent-agent-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 54 (MODERATE_USAGE)
Codebase size: 40924 lines, 1.6 MB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.6.0
|
pypi | SUSPICIOUS | 75 | ↑ 5.4/day | 210 | 521 | 39d | fornix |
|
Author: Unknown
Package purpose: Project memory for AI coding sessions. Lives in the repo, travels with the code, shared by every model that opens it, consulted on every prompt.
Claimed homepage: https://pypi.org/project/fornix/
Matched naming pattern: python-fornix-core
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 34 (MODERATE_USAGE)
Codebase size: 521 lines, 29.0 kB (MODERATE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on PyPI → |
||||||||
|
1.0.0
|
npm | Very Risky | 235 | ↑ 5.3/day | 213 | 21 | 40d | @imgauravbhosale/malwhunter |
|
Author: Unknown
Package purpose: SAFE, INERT test fixture for exercising MalwHunter (https://github.com/ImGauravbhosale/Malwhunter) in a real CI pipeline. Every pattern in this package is written to match known npm supply-chain malware SHAPES (install-script abuse, bulk env enumeration,
Matched naming pattern: node-@imgauravbhosale/malwhunter-malwhunter-ci-demo-fixture
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 53 (MODERATE_USAGE)
Codebase size: 21 lines, 934 Bytes (TINY_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.2.0
|
npm | Very Risky | 125 | ↑ 5.1/day | 204 | 4,431 | 40d | uncovr |
|
Author: Abhishek Sharma
Package purpose: Flags the lines an AI wrote in a pull request that no test executes, using provenance recorded when Claude Code writes them.
Claimed homepage: https://github.com/uncovrhq/uncovr#readme
Matched naming pattern: node-uncovr-core
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 51 (MODERATE_USAGE)
Codebase size: 4431 lines, 186.6 kB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
1.0.0
|
pypi | Very Risky | 120 | ↑ 5.0/day | 151 | 700 | 30d | webpygame |
|
Author: Brodie
Package purpose: Stream Pygame windows directly to an HTML browser viewport.
Claimed homepage: https://pypi.org/project/webpygame/
Matched naming pattern: python-webpygame-core
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 8 (MODERATE_USAGE)
Codebase size: 700 lines, 34.5 kB (MODERATE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on PyPI → |
||||||||
|
0.1.0
|
npm | Very Risky | 155 | ↑ 4.9/day | 191 | 33 | 39d | element |
|
Author: Unknown
Package purpose: Install the Element Code app and the elc CLI.
Claimed homepage: https://elementcode.io
Matched naming pattern: node-element-code
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 47 (MODERATE_USAGE)
Codebase size: 33 lines, 1.4 kB (TINY_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.1.0
|
npm | Very Risky | 225 | ↑ 4.8/day | 187 | 53,796 | 39d | @happycc/cli |
|
Author: Kirill Dubovitskiy
Package purpose: Run coding agents on your workstation and follow them from your organization's happycc app
Claimed homepage: https://github.com/rophy/happycc
Matched naming pattern: node-@happycc/cli-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 46 (MODERATE_USAGE)
Codebase size: 53796 lines, 2.0 MB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.1.0
|
npm | Very Risky | 155 | ↑ 4.7/day | 199 | 1,039 | 42d | streaked |
|
Author: Ayush Kumar
Package purpose: Your git commit streaks as a smooth desktop widget: activity rings, streaks, a heatmap and insights.
Matched naming pattern: node-streaked-widget
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 49 (MODERATE_USAGE)
Codebase size: 1039 lines, 55.7 kB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.8.1
|
pypi | Very Risky | 170 | ↑ 4.6/day | 189 | 345 | 41d | data |
|
Author: Unknown (support@safenai.io)
Package purpose: Generative inpaint transformation (LaMa) and the associated tool-model plugin for kcai data-sampling
Claimed homepage: https://pypi.org/project/kcai-data-sampling-lama/
Matched naming pattern: kcai-data-sampling
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 22 (MODERATE_USAGE)
Codebase size: 345 lines, 16.8 kB (MODERATE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on PyPI → |
||||||||
|
1.0.0
|
npm | Very Risky | 140 | ↑ 4.6/day | 184 | 57 | 40d | api |
|
Author: Unknown
Package purpose: Push files to a GitHub repo via the Git Data API — a lightweight fallback channel when github.com git push is unreachable (e.g. network blocks) but api.github.com still works.
Claimed homepage: https://github.com/439436269-ctrl/qingji-todo#readme
Matched naming pattern: gh-api-push
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 46 (MODERATE_USAGE)
Codebase size: 57 lines, 3.1 kB (TINY_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
latest
|
npm | Possible Squatted Stub | 75 | ↑ 4.5/day | 175 | 15 | 39d | hardhat |
|
Author: Unknown
Package purpose: Hardhat integration providing spack utility for Node
Matched naming pattern: node-hardhat-spack
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 43 (MODERATE_USAGE)
Codebase size: 15 lines, 525 Bytes (EMPTY_STUB)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.1.0
|
npm | Very Risky | 155 | ↑ 4.4/day | 186 | 2,775 | 42d | agentdesk |
|
Author: Unknown
Package purpose: One panel for all your AI coding agents. Know which one is waiting on you.
Claimed homepage: https://github.com/longroad93/agentdesk#readme
Matched naming pattern: node-agentdesk-panel
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 46 (MODERATE_USAGE)
Codebase size: 2775 lines, 139.5 kB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
latest
|
npm | Possible Squatted Stub | 75 | ↑ 4.4/day | 163 | 15 | 37d | hardhat |
|
Author: Unknown
Package purpose: Hardhat integration providing bits utility for Node
Matched naming pattern: node-hardhat-bits
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 40 (MODERATE_USAGE)
Codebase size: 15 lines, 525 Bytes (EMPTY_STUB)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.4.0
|
npm | Very Risky | 180 | ↑ 4.4/day | 175 | 96 | 40d | @codeteck/agentml |
|
Author: Nom-nom-hub
Package purpose: AI-native markup language and CLI for agent execution contracts
Claimed homepage: https://nom-nom-hub.github.io/agentml/
Matched naming pattern: node-@codeteck/agentml-agentml
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 43 (MODERATE_USAGE)
Codebase size: 96 lines, 3.9 kB (TINY_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
1.0.0
|
npm | Very Risky | 75 | ↑ 4.0/day | 163 | 10,337 | 41d | aretea-group |
|
Author: Unknown
Package purpose: Agentic SOC alert investigation for Microsoft Defender XDR and Microsoft Sentinel: one bin, a .env, and a run artifact per sweep
Claimed homepage: https://github.com/Aretea-Group/isophase#readme
Matched naming pattern: node-aretea-group-isophase
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 40 (MODERATE_USAGE)
Codebase size: 10337 lines, 425.6 kB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.1.0
|
npm | Very Risky | 170 | ↑ 3.8/day | 142 | 463 | 37d | burrejak |
|
Author: burrejak22
Package purpose: X-ray for Chrome extensions — audit permissions, host access, and code for risky patterns
Claimed homepage: https://github.com/burrejak22/crxray#readme
Matched naming pattern: node-burrejak-crxray
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 35 (MODERATE_USAGE)
Codebase size: 463 lines, 20.3 kB (MODERATE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
latest
|
npm | Possible Squatted Stub | 75 | ↑ 3.8/day | 155 | 15 | 41d | hardhat |
|
Author: Unknown
Package purpose: Hardhat integration providing devkit utility for Node
Matched naming pattern: node-hardhat-devkit
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 38 (MODERATE_USAGE)
Codebase size: 15 lines, 525 Bytes (EMPTY_STUB)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.2.0
|
npm | Very Risky | 230 | ↑ 3.7/day | 155 | 56,599 | 42d | @tekma/cli |
|
Author: Unknown
Package purpose: Tekma CLI, recorder and reader skills, and automatic agent setup
Claimed homepage: https://tekma.dev
Matched naming pattern: node-@tekma/cli-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 38 (MODERATE_USAGE)
Codebase size: 56599 lines, 1.8 MB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
latest
|
npm | Possible Squatted Stub | 75 | ↑ 3.6/day | 146 | 15 | 41d | hardhat |
|
Author: Unknown
Package purpose: Hardhat integration providing roof utility for Node
Matched naming pattern: node-hardhat-roof
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 36 (MODERATE_USAGE)
Codebase size: 15 lines, 525 Bytes (EMPTY_STUB)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
1.0.0
|
npm | Very Risky | 170 | ↑ 3.2/day | 123 | 48 | 39d | behala_1198 |
|
Author: Unknown
Package purpose: CLI to install BellaUI components
Matched naming pattern: node-behala_1198-bellaui
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 30 (MODERATE_USAGE)
Codebase size: 48 lines, 2.2 kB (TINY_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||
|
0.1.0
|
npm | Very Risky | 155 | ↑ 3.1/day | 129 | 9,669 | 41d | agentcombatleague |
|
Author: Unknown
Package purpose: Agentcombatleague integration providing Command-line interface tool for Node
Claimed homepage: https://github.com/thewelshrich/AgentCombatLeague#readme
Matched naming pattern: node-agentcombatleague-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 32 (MODERATE_USAGE)
Codebase size: 9669 lines, 2.2 MB (LARGE_CODEBASE)
Automated signals flagged:
Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing. View package on npm → |
||||||||