🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Fast adoption alone isn't evidence of wrongdoing; use this to find candidates worth a second look, not to accuse anyone.

Threat Feed Flagged packages, sorted by risk score Growing Packages Fastest-adopted since publish Top Emails Accounts most linked to flagged findings About What Sentinel does & why

Packages published in the last 90 days, ranked by downloads-per-day since publish (monthly downloads ÷ days since first published) -- a long-established, hugely popular package can't crowd this out just for having a lot of lifetime downloads; everything here is both recent AND fast-moving. Same email:/domain:/keyword:/version:/age:<6h filters as the other tabs (age: here filters on top of this tab's own 90-day cutoff, not instead of it). Only packages with known download data are shown.

PackageEcosystem Verdict Score Growth/day Downloads/mo Lines Age Targeted
0.1.1rc1
 pypi BENIGN_COMMUNITY 7 ↑ 2963.4/day 41487 757 14d deepseek
Author: DeepSeek
Claimed homepage: https://pypi.org/project/deepseek-harness-sdk/
Matched naming pattern: deepseek-deepseek-sdk
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 26600 (HIGH_COMMUNITY_ADOPTION)
Codebase size: 757 lines, 32.2 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'deepseek-harness-sdk' matches AI hallucination template [deepseek] + [deepseek] + [sdk].
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (12 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (757 LOC across 5 file(s)).
  • INFOHigh community adoption with 41,487 monthly downloads, demonstrating established trust.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.1rc1
 pypi BENIGN_COMMUNITY 10 ↑ 2619.6/day 36675 145 14d deepseek
Author: DeepSeek
Claimed homepage: https://pypi.org/project/deepseek-harness-runtime-bin/
Matched naming pattern: deepseek-deepseek-runtime
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 24049 (HIGH_COMMUNITY_ADOPTION)
Codebase size: 145 lines, 7.1 kB (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'deepseek-harness-runtime-bin' matches AI hallucination template [deepseek] + [deepseek] + [runtime].
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (12 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOHigh community adoption with 36,675 monthly downloads, demonstrating established trust.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.10.0
 pypi BENIGN_COMMUNITY 10 ↑ 1123.1/day 64014 10,601 57d google
Author: Unknown (allen.porter@gmail.com)
Claimed homepage: https://pypi.org/project/google-health-api/
Matched naming pattern: google-google-api
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 16759 (HIGH_COMMUNITY_ADOPTION)
Codebase size: 10601 lines, 424.9 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'google-health-api' matches AI hallucination template [google] + [google] + [api].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'allen.porter@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 11 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (56 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (10601 LOC across 55 file(s)).
  • INFOHigh community adoption with 64,014 monthly downloads, demonstrating established trust.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.0
 pypi BENIGN_COMMUNITY 10 ↑ 836.4/day 18401 5,421 22d langchain
Author: Unknown (noreply@bytedance.com)
Claimed homepage: https://pypi.org/project/langchain-openviking/
Matched naming pattern: python-langchain-openviking
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 7026 (HIGH_COMMUNITY_ADOPTION)
Codebase size: 5421 lines, 222.8 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-openviking' matches AI hallucination template [python] + [langchain] + [openviking].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'noreply@bytedance.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (5421 LOC across 17 file(s)).
  • INFOHigh community adoption with 18,401 monthly downloads, demonstrating established trust.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
2026.8.20
 pypi BENIGN_COMMUNITY 10 ↑ 741.5/day 14088 5,173 19d bitcoin
Author: Unknown (devs@btclib.org)
Claimed homepage: https://pypi.org/project/bitcoin-core-rpc/
Matched naming pattern: bitcoin-bitcoin-rpc
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 2968 (HIGH_COMMUNITY_ADOPTION)
Codebase size: 5173 lines, 316.1 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'bitcoin-core-rpc' matches AI hallucination template [bitcoin] + [bitcoin] + [rpc].
  • HIGHClaims critical enterprise brand identity ('BITCOIN').
  • HIGHPublisher email 'devs@btclib.org' is not affiliated with official vendor domain.
  • MEDIUMPackage published 6 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (17 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (5173 LOC across 8 file(s)).
  • INFOHigh community adoption with 14,088 monthly downloads, demonstrating established trust.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.2.0
 pypi BENIGN_COMMUNITY 14 ↑ 707.6/day 7076 12,083 10d aws
Author: dbt-aws contributors
Claimed homepage: https://pypi.org/project/runner-dbt-aws-airflow/
Matched naming pattern: runner-aws-aws
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 6953 (ACTIVE_COMMUNITY_USE)
Codebase size: 12083 lines, 631.8 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'runner-dbt-aws-airflow' matches AI hallucination template [runner] + [aws] + [aws].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (8 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (12083 LOC across 43 file(s)).
  • INFOActive community usage with 7,076 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.2.0
 pypi BENIGN_COMMUNITY 7 ↑ 608.9/day 23746 1,095 39d claude
Author: NVIDIA Corporation
Claimed homepage: https://pypi.org/project/nemo-fabric-adapters-claude/
Matched naming pattern: nemo-claude-adapters
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 7420 (HIGH_COMMUNITY_ADOPTION)
Codebase size: 1095 lines, 44.1 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'nemo-fabric-adapters-claude' matches AI hallucination template [nemo] + [claude] + [adapters].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (37 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (1095 LOC across 2 file(s)).
  • INFOHigh community adoption with 23,746 monthly downloads, demonstrating established trust.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.3.0
 pypi BENIGN_COMMUNITY 5 ↑ 528.5/day 25896 3,283 49d anthropic
Author: Unknown (dev@airflow.apache.org)
Claimed homepage: https://pypi.org/project/apache-airflow-providers-anthropic/
Matched naming pattern: apache-anthropic-providers
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 6280 (HIGH_COMMUNITY_ADOPTION)
Codebase size: 3283 lines, 210.5 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'apache-airflow-providers-anthropic' matches AI hallucination template [apache] + [anthropic] + [providers].
  • HIGHClaims critical enterprise brand identity ('ANTHROPIC').
  • INFOPublisher email domain '@airflow.apache.org' matches package identifier token 'airflow', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (47 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (3283 LOC across 36 file(s)).
  • INFOHigh community adoption with 27,794 monthly downloads, demonstrating established trust.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.1
 pypi BENIGN_COMMUNITY 10 ↑ 442.8/day 23910 132 54d openai
Author: Unknown (contact@langflow.org)
Claimed homepage: https://pypi.org/project/lfx-openai-compatible/
Matched naming pattern: lfx-openai-compatible
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 5097 (HIGH_COMMUNITY_ADOPTION)
Codebase size: 132 lines, 6.8 kB (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'lfx-openai-compatible' matches AI hallucination template [lfx] + [openai] + [compatible].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'contact@langflow.org' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (53 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOHigh community adoption with 23,910 monthly downloads, demonstrating established trust.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.1
 pypi BENIGN_COMMUNITY 10 ↑ 432.7/day 23798 123 55d vllm
Author: Unknown (contact@langflow.org)
Claimed homepage: https://pypi.org/project/lfx-vllm/
Matched naming pattern: python-vllm-lfx
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 5062 (HIGH_COMMUNITY_ADOPTION)
Codebase size: 123 lines, 6.1 kB (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'lfx-vllm' matches AI hallucination template [python] + [vllm] + [lfx].
  • HIGHClaims critical enterprise brand identity ('VLLM').
  • HIGHPublisher email 'contact@langflow.org' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (54 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOHigh community adoption with 23,798 monthly downloads, demonstrating established trust.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.2
 pypi BENIGN_COMMUNITY 7 ↑ 408.3/day 25316 629 62d amazon
Author: Unknown (contact@langflow.org)
Claimed homepage: https://pypi.org/project/lfx-amazon/
Matched naming pattern: python-amazon-lfx
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 5399 (HIGH_COMMUNITY_ADOPTION)
Codebase size: 629 lines, 27.8 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'lfx-amazon' matches AI hallucination template [python] + [amazon] + [lfx].
  • HIGHClaims critical enterprise brand identity ('AMAZON').
  • HIGHPublisher email 'contact@langflow.org' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (61 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (629 LOC across 7 file(s)).
  • INFOHigh community adoption with 25,316 monthly downloads, demonstrating established trust.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.1
 pypi BENIGN_COMMUNITY 10 ↑ 380.7/day 23602 206 62d cohere
Author: Unknown (contact@langflow.org)
Claimed homepage: https://pypi.org/project/lfx-cohere/
Matched naming pattern: python-cohere-lfx
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 5014 (HIGH_COMMUNITY_ADOPTION)
Codebase size: 206 lines, 8.2 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'lfx-cohere' matches AI hallucination template [python] + [cohere] + [lfx].
  • HIGHClaims critical enterprise brand identity ('COHERE').
  • HIGHPublisher email 'contact@langflow.org' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (61 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOHigh community adoption with 23,602 monthly downloads, demonstrating established trust.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.17.0
 pypi BENIGN_COMMUNITY 5 ↑ 324.4/day 15571 2,090 48d baml
Author: Unknown (contact@boundaryml.com)
Claimed homepage: https://pypi.org/project/baml-bridge/
Matched naming pattern: django-baml-auth
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 2418 (HIGH_COMMUNITY_ADOPTION)
Codebase size: 2090 lines, 128.9 kB (LARGE_CODEBASE)
Automated signals flagged:
  • HIGHPackage registered recently (47 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (2090 LOC across 13 file(s)).
  • INFOHigh community adoption with 15,529 monthly downloads, demonstrating established trust.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
1.6
 pypi BENIGN_COMMUNITY 14 ↑ 312.3/day 1874 7,193 6d base
Author: Unknown
Claimed homepage: https://pypi.org/project/sugarai-erp-connector-base/
Matched naming pattern: sugarai-base-connector
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 1874 (ACTIVE_COMMUNITY_USE)
Codebase size: 7193 lines, 448.0 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'sugarai-erp-connector-base' matches AI hallucination template [sugarai] + [base] + [connector].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 6 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (5 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (7193 LOC across 102 file(s)).
  • INFOActive community usage with 1,874 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.5
 pypi BENIGN_COMMUNITY 5 ↑ 284.8/day 1709 7,536 6d agent
Author: Allen Day
Claimed homepage: https://pypi.org/project/agent-surface/
Matched naming pattern: python-agent-surface
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 1709 (ACTIVE_COMMUNITY_USE)
Codebase size: 7536 lines, 306.2 kB (LARGE_CODEBASE)
Automated signals flagged:
  • HIGHPackage registered recently (5 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (7536 LOC across 48 file(s)).
  • INFOActive community usage with 1,709 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
1.2.1
 pypi BENIGN_COMMUNITY 13 ↑ 248.5/day 497 8,882 58h binance
Author: Alejandro Exequiel Hernández Lara
Claimed homepage: https://pypi.org/project/kainext-binance-mcp/
Matched naming pattern: kainext-binance-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 497 (MODERATE_USAGE)
Codebase size: 8882 lines, 462.6 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'kainext-binance-mcp' matches AI hallucination template [kainext] + [binance] + [mcp].
  • HIGHClaims critical enterprise brand identity ('BINANCE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (1 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (8882 LOC across 96 file(s)).
  • INFOModerate community usage with 541 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.16.0
 pypi BENIGN_COMMUNITY 11 ↑ 236.9/day 8290 713 35d anthropic
Author: Unknown
Claimed homepage: https://pypi.org/project/agento11y-anthropic/
Matched naming pattern: python-anthropic-agento11y
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 336 (ACTIVE_COMMUNITY_USE)
Codebase size: 713 lines, 29.2 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'agento11y-anthropic' matches AI hallucination template [python] + [anthropic] + [agento11y].
  • HIGHClaims critical enterprise brand identity ('ANTHROPIC').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (34 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (713 LOC across 3 file(s)).
  • INFOActive community usage with 8,290 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.5.8
 pypi BENIGN_COMMUNITY 5 ↑ 232.8/day 931 24,595 4d discord
Author: Discord OS contributors
Claimed homepage: https://pypi.org/project/discord-os/
Matched naming pattern: python-discord-os
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 931 (MODERATE_USAGE)
Codebase size: 24595 lines, 925.2 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 11 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (3 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (24595 LOC across 95 file(s)).
  • INFOModerate community usage with 931 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.1
 pypi BENIGN_COMMUNITY 20 ↑ 229.5/day 4360 0 19d base
Author: Unknown (py10x@10x-software.org)
Claimed homepage: https://pypi.org/project/py10x-fin-base-cxx/
Matched naming pattern: py10x-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 1940 (ACTIVE_COMMUNITY_USE)
Codebase size: 0 lines, 0 Bytes (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'py10x-fin-base-cxx' matches AI hallucination template [py10x] + [base] + [base].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'py10x@10x-software.org' is not affiliated with official vendor domain.
  • MEDIUMPackage published 22 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (18 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 8 file(s), 0 bytes).
  • INFOActive community usage with 4,360 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.3.1
 pypi BENIGN_COMMUNITY 16 ↑ 222.5/day 445 3,466 53h claude
Author: Gajanan Rathod
Claimed homepage: https://pypi.org/project/claude-contextmesh/
Matched naming pattern: python-claude-contextmesh
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 445 (MODERATE_USAGE)
Codebase size: 3466 lines, 176.2 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'claude-contextmesh' matches AI hallucination template [python] + [claude] + [contextmesh].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 6 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (1 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (3466 LOC across 35 file(s)).
  • INFOModerate community usage with 445 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.2
 pypi BENIGN_COMMUNITY 7 ↑ 200.3/day 12821 256 64d azure
Author: Unknown (eng@acceleratedata.ai)
Claimed homepage: https://pypi.org/project/vibedata-studio-azure-cred-broker/
Matched naming pattern: vibedata-azure-azure
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 2359 (HIGH_COMMUNITY_ADOPTION)
Codebase size: 256 lines, 11.6 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'vibedata-studio-azure-cred-broker' matches AI hallucination template [vibedata] + [azure] + [azure].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'eng@acceleratedata.ai' is not affiliated with official vendor domain.
  • INFOLegitimate documentation effort (308 chars with homepage link).
  • HIGHPackage registered recently (63 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOHigh community adoption with 12,821 monthly downloads, demonstrating established trust.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.4.2
 pypi BENIGN_COMMUNITY 11 ↑ 199.1/day 5177 18,592 26d base
Author: Base Foundry
Claimed homepage: https://pypi.org/project/base-cli/
Matched naming pattern: python-base-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 152 (ACTIVE_COMMUNITY_USE)
Codebase size: 18592 lines, 832.6 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'base-cli' matches AI hallucination template [python] + [base] + [cli].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (25 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (18592 LOC across 103 file(s)).
  • INFOActive community usage with 5,177 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
1.1b0
 pypi BENIGN_COMMUNITY 11 ↑ 193.2/day 8888 11,176 46d openai
Author: Unknown (cncf-opentelemetry-contributors@lists.cncf.io)
Claimed homepage: https://pypi.org/project/opentelemetry-instrumentation-genai-openai/
Matched naming pattern: opentelemetry-openai-genai
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 3254 (ACTIVE_COMMUNITY_USE)
Codebase size: 11176 lines, 426.9 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'opentelemetry-instrumentation-genai-openai' matches AI hallucination template [opentelemetry] + [openai] + [genai].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'cncf-opentelemetry-contributors@lists.cncf.io' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (45 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (11176 LOC across 41 file(s)).
  • INFOActive community usage with 8,888 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.6.27
 pypi VERIFIED_OFFICIAL 0 ↑ 164.4/day 6413 4,169 39d workspace
Author: Unknown (antigravity@google.com)
Claimed homepage: https://pypi.org/project/mcp-workspace-guardian/
Matched naming pattern: mcp-workspace-guardian
Official vendor account: Yes
Weekly downloads: 20 (ACTIVE_COMMUNITY_USE)
Codebase size: 4169 lines, 237.0 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mcp-workspace-guardian' matches AI hallucination template [mcp] + [workspace] + [guardian].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • INFOAuthor email 'antigravity@google.com' verified as authorized official vendor domain.
  • INFOSubstantial functional codebase (4169 LOC across 15 file(s)).
  • INFOActive community usage with 6,413 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
2.0.1
 pypi BENIGN_COMMUNITY 14 ↑ 155.4/day 6215 164 40d aws
Author: Amazon Web Services<aws-cdk-dev@amazon.com> (aws-cdk-dev@amazon.com)
Claimed homepage: https://github.com/cdklabs/awscdk-asset-kubectl#readme
Matched naming pattern: django-aws-auth
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 2049 (ACTIVE_COMMUNITY_USE)
Codebase size: 164 lines, 5.5 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'aws-cdk-lambda-layer-kubectl-v36' matches AI hallucination template [django] + [aws] + [auth].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (39 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOActive community usage with 6,215 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
1.2.2
 pypi BENIGN_COMMUNITY 11 ↑ 145.6/day 2912 5,370 20d deepseek
Author: Simon
Claimed homepage: https://pypi.org/project/codex-deepseek-vision/
Matched naming pattern: codex-deepseek-vision
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 419 (ACTIVE_COMMUNITY_USE)
Codebase size: 5370 lines, 242.2 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'codex-deepseek-vision' matches AI hallucination template [codex] + [deepseek] + [vision].
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (19 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (5370 LOC across 20 file(s)).
  • INFOActive community usage with 2,912 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.27.0
 pypi BENIGN_COMMUNITY 11 ↑ 140.5/day 7025 9,802 50d langgraph
Author: pace
Claimed homepage: https://pypi.org/project/3tears-langgraph/
Matched naming pattern: python-langgraph-3tears
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 1449 (ACTIVE_COMMUNITY_USE)
Codebase size: 9802 lines, 503.8 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '3tears-langgraph' matches AI hallucination template [python] + [langgraph] + [3tears].
  • HIGHClaims critical enterprise brand identity ('LANGGRAPH').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (9802 LOC across 40 file(s)).
  • INFOActive community usage with 7,025 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.10.0
 pypi BENIGN_COMMUNITY 14 ↑ 131.7/day 6980 3,119 53d claude
Author: LeoAido
Claimed homepage: https://pypi.org/project/claude-real-video/
Matched naming pattern: claude-claude-video
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 1754 (ACTIVE_COMMUNITY_USE)
Codebase size: 3119 lines, 173.8 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'claude-real-video' matches AI hallucination template [claude] + [claude] + [video].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 38 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (52 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (3119 LOC across 15 file(s)).
  • INFOActive community usage with 6,980 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.2.2
 pypi BENIGN_COMMUNITY 16 ↑ 127.3/day 382 4,645 65h xai
Author: Fdere AI, Explainability Auditor Team
Claimed homepage: https://github.com/cleanpigg/xai-auditor
Matched naming pattern: python-xai-auditor
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 382 (MODERATE_USAGE)
Codebase size: 4645 lines, 208.5 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'xai-auditor' matches AI hallucination template [python] + [xai] + [auditor].
  • HIGHClaims critical enterprise brand identity ('XAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 4 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (2 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (4645 LOC across 61 file(s)).
  • INFOModerate community usage with 382 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.2.1
 pypi BENIGN_COMMUNITY 16 ↑ 122.5/day 245 9,085 57h amazon
Author: Suriya Ravichandran
Claimed homepage: https://pypi.org/project/amazon-india-seller-mcp/
Matched naming pattern: amazon-amazon-seller
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 245 (MODERATE_USAGE)
Codebase size: 9085 lines, 465.1 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'amazon-india-seller-mcp' matches AI hallucination template [amazon] + [amazon] + [seller].
  • HIGHClaims critical enterprise brand identity ('AMAZON').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (1 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (9085 LOC across 51 file(s)).
  • INFOModerate community usage with 245 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.27.0
 pypi BENIGN_COMMUNITY 11 ↑ 117.0/day 5614 29,867 48d workspace
Author: pace
Claimed homepage: https://pypi.org/project/3tears-agent-workspace/
Matched naming pattern: 3tears-workspace-workspace
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 1246 (ACTIVE_COMMUNITY_USE)
Codebase size: 29867 lines, 1.3 MB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '3tears-agent-workspace' matches AI hallucination template [3tears] + [workspace] + [workspace].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (46 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (29867 LOC across 109 file(s)).
  • INFOActive community usage with 5,614 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.17.1
 pypi BENIGN_COMMUNITY 5 ↑ 108.4/day 2711 6,833 25d shopify
Author: xopsio
Claimed homepage: https://pypi.org/project/shopify-image-audit/
Matched naming pattern: shopify-shopify-audit
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 137 (ACTIVE_COMMUNITY_USE)
Codebase size: 6833 lines, 323.0 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 24 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (24 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (6833 LOC across 35 file(s)).
  • INFOActive community usage with 2,711 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.1
 pypi BENIGN_COMMUNITY 16 ↑ 108.0/day 216 731 48h claude
Author: Unknown (pravinsomula@gmail.com)
Claimed homepage: https://pypi.org/project/kirocrew-claude/
Matched naming pattern: python-claude-kirocrew
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 216 (MODERATE_USAGE)
Codebase size: 731 lines, 47.7 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'kirocrew-claude' matches AI hallucination template [python] + [claude] + [kirocrew].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'pravinsomula@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (1 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (731 LOC across 6 file(s)).
  • INFOModerate community usage with 216 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
1.7.0
 pypi BENIGN_COMMUNITY 14 ↑ 104.4/day 3029 26,631 29d openai
Author: mrwogu
Claimed homepage: https://pypi.org/project/factory-droid-openai/
Matched naming pattern: factory-openai-openai
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 210 (ACTIVE_COMMUNITY_USE)
Codebase size: 26631 lines, 1.1 MB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'factory-droid-openai' matches AI hallucination template [factory] + [openai] + [openai].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 26 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (28 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (26631 LOC across 46 file(s)).
  • INFOActive community usage with 3,026 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.0
 pypi BENIGN_COMMUNITY 16 ↑ 103.0/day 103 715 35h google
Author: Particle Academy
Claimed homepage: https://pypi.org/project/fancy-google-analytics/
Matched naming pattern: fancy-google-analytics
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 103 (MODERATE_USAGE)
Codebase size: 715 lines, 34.9 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'fancy-google-analytics' matches AI hallucination template [fancy] + [google] + [analytics].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (715 LOC across 8 file(s)).
  • INFOModerate community usage with 103 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
1.0.1
 pypi BENIGN_COMMUNITY 16 ↑ 102.0/day 204 1,159 42h openai
Author: MemorySync
Claimed homepage: https://pypi.org/project/openai-agents-memorysync/
Matched naming pattern: openai-openai-memorysync
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 204 (MODERATE_USAGE)
Codebase size: 1159 lines, 52.4 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'openai-agents-memorysync' matches AI hallucination template [openai] + [openai] + [memorysync].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (1159 LOC across 7 file(s)).
  • INFOModerate community usage with 204 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.1
 pypi BENIGN_COMMUNITY 11 ↑ 100.9/day 1917 5,150 19d base
Author: Unknown (py10x@10x-software.org)
Claimed homepage: https://pypi.org/project/py10x-fin-base/
Matched naming pattern: py10x-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 792 (ACTIVE_COMMUNITY_USE)
Codebase size: 5150 lines, 263.8 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'py10x-fin-base' matches AI hallucination template [py10x] + [base] + [base].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'py10x@10x-software.org' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (18 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (5150 LOC across 101 file(s)).
  • INFOActive community usage with 1,917 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.0
 pypi BENIGN_COMMUNITY 18 ↑ 99.0/day 99 4,196 35h solana
Author: Olive
Claimed homepage: https://pypi.org/project/olive-solana-sdk/
Matched naming pattern: olive-solana-sdk
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 99 (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4196 lines, 188.8 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'olive-solana-sdk' matches AI hallucination template [olive] + [solana] + [sdk].
  • HIGHClaims critical enterprise brand identity ('SOLANA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (4196 LOC across 17 file(s)).

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.0
 pypi BENIGN_COMMUNITY 17 ↑ 98.5/day 1280 404 13d llama
Author: Unknown
Claimed homepage: https://pypi.org/project/mineru-llama-cpp/
Matched naming pattern: mineru-llama-cpp
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 433 (ACTIVE_COMMUNITY_USE)
Codebase size: 404 lines, 21.1 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mineru-llama-cpp' matches AI hallucination template [mineru] + [llama] + [cpp].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (11 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOActive community usage with 1,280 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.4
 pypi BENIGN_COMMUNITY 17 ↑ 98.2/day 2454 110 25d chroma
Author: zhenzi0322 (82131529@qq.com)
Claimed homepage: https://pypi.org/project/chroma-term-console/
Matched naming pattern: chroma-chroma-console
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 88 (ACTIVE_COMMUNITY_USE)
Codebase size: 110 lines, 3.9 kB (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'chroma-term-console' matches AI hallucination template [chroma] + [chroma] + [console].
  • HIGHClaims critical enterprise brand identity ('CHROMA').
  • HIGHPublisher email '82131529@qq.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (24 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOActive community usage with 2,454 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
1.0.1
 pypi BENIGN_COMMUNITY 19 ↑ 97.0/day 291 90 3d langchain
Author: Unknown (gchen12016@gmail.com)
Claimed homepage: https://pypi.org/project/neuforge-langchain/
Matched naming pattern: python-langchain-neuforge
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 291 (MODERATE_USAGE)
Codebase size: 90 lines, 4.9 kB (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'neuforge-langchain' matches AI hallucination template [python] + [langchain] + [neuforge].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'gchen12016@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 3 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (2 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 291 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.6.7
 pypi BENIGN_COMMUNITY 14 ↑ 96.6/day 2415 2,236 25d copilot
Author: Jason Li
Claimed homepage: https://pypi.org/project/prompt-copilot-cli/
Matched naming pattern: prompt-copilot-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 1068 (ACTIVE_COMMUNITY_USE)
Codebase size: 2236 lines, 120.8 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'prompt-copilot-cli' matches AI hallucination template [prompt] + [copilot] + [cli].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 22 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (24 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (2236 LOC across 8 file(s)).
  • INFOActive community usage with 2,415 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
3.1.1
 pypi SUSPICIOUS 95 ↑ 96.3/day 289 193 3d aws
Author: Your Name (you@example.com)
Claimed homepage: https://pypi.org/project/vintasend-aws-s3-attachments/
Matched naming pattern: vintasend-aws-s3
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 289 (MODERATE_USAGE)
Codebase size: 193 lines, 8.8 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'vintasend-aws-s3-attachments' matches AI hallucination template [vintasend] + [aws] + [s3].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 3 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (2 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 289 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.3.1
 pypi SUSPICIOUS 80 ↑ 95.5/day 382 71 4d claude
Author: Claude System Maintainers
Claimed homepage: https://pypi.org/project/claude-system/
Matched naming pattern: python-claude-system
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 382 (MODERATE_USAGE)
Codebase size: 71 lines, 3.3 kB (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'claude-system' matches AI hallucination template [python] + [claude] + [system].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (3 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 382 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
1.0.1
 pypi BENIGN_COMMUNITY 19 ↑ 95.3/day 286 103 3d llamaindex
Author: Unknown
Claimed homepage: https://pypi.org/project/neuforge-llamaindex/
Matched naming pattern: python-llamaindex-neuforge
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 286 (MODERATE_USAGE)
Codebase size: 103 lines, 5.0 kB (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'neuforge-llamaindex' matches AI hallucination template [python] + [llamaindex] + [neuforge].
  • HIGHClaims critical enterprise brand identity ('LLAMAINDEX').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 3 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (2 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 286 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.9.17
 pypi BENIGN_COMMUNITY 8 ↑ 95.1/day 1902 9,778 20d claude
Author: Craig Stoller
Claimed homepage: https://pypi.org/project/claude-code-sessions/
Matched naming pattern: claude-claude-sessions
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 951 (ACTIVE_COMMUNITY_USE)
Codebase size: 9778 lines, 630.1 kB (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'claude-code-sessions' matches AI hallucination template [claude] + [claude] + [sessions].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOLegitimate documentation effort (220 chars with homepage link).
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (9778 LOC across 18 file(s)).
  • INFOActive community usage with 1,902 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
1.0.6
 pypi BENIGN_COMMUNITY 5 ↑ 93.4/day 2521 923 27d stripe
Author: Unknown (oss@tai42.ai)
Claimed homepage: https://pypi.org/project/tai42-tools-stripe/
Matched naming pattern: tai42-stripe-stripe
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 923 (ACTIVE_COMMUNITY_USE)
Codebase size: 923 lines, 51.8 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'tai42-tools-stripe' matches AI hallucination template [tai42] + [stripe] + [stripe].
  • HIGHClaims critical enterprise brand identity ('STRIPE').
  • INFOPublisher email domain '@tai42.ai' matches package identifier token 'tai42', verifying identifiable third-party organization ownership.
  • INFOLegitimate documentation effort (314 chars with homepage link).
  • HIGHPackage registered recently (26 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (923 LOC across 13 file(s)).
  • INFOActive community usage with 2,521 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
1.1b0
 pypi BENIGN_COMMUNITY 14 ↑ 92.1/day 4236 208 46d openai
Author: Unknown (cncf-opentelemetry-contributors@lists.cncf.io)
Claimed homepage: https://pypi.org/project/opentelemetry-instrumentation-genai-openai-agents/
Matched naming pattern: opentelemetry-openai-genai
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 2054 (ACTIVE_COMMUNITY_USE)
Codebase size: 208 lines, 10.5 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'opentelemetry-instrumentation-genai-openai-agents' matches AI hallucination template [opentelemetry] + [openai] + [genai].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'cncf-opentelemetry-contributors@lists.cncf.io' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (45 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOActive community usage with 4,236 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
1.5.0
 pypi BENIGN_COMMUNITY 6 ↑ 90.7/day 272 383 3d discord
Author: Unknown
Claimed homepage: https://pypi.org/project/discord.ae/
Matched naming pattern: python-discord-ae
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 272 (MODERATE_USAGE)
Codebase size: 383 lines, 16.1 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (2 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 436 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
0.1.5
 pypi BENIGN_COMMUNITY 5 ↑ 90.6/day 634 737 7d docs
Author: Unknown
Claimed homepage: https://pypi.org/project/docs-hub/
Matched naming pattern: python-docs-hub
Official vendor account: No — publisher domain doesn't match the brand it names
Weekly downloads: 358 (MODERATE_USAGE)
Codebase size: 737 lines, 31.9 kB (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 6 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (7 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (737 LOC across 11 file(s)).
  • INFOModerate community usage with 634 monthly downloads.

Fast growth plus these signals is worth a look; fast growth alone is not evidence of wrongdoing.

View package on PyPI →
LINK COPIED TO CLIPBOARD