Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 0 | 3h | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.0 | Prima Assicurazioni | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4h | — | — | — |
🐛 Potential Cross-Ecosystem Worm
Very Risky
|
— | pypi | 0.1.2 | — | — | 🪝 🐛 | |
|
Package purpose: Independent incremental file backups with verified saved-point restoration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 8h | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.11 | Fuju Trace | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 8h | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.11 | Fuju Trace | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 10h | — | — | — |
Possible Squatted Stub
|
— | pypi | 1.0.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 21h | — | — | — |
Possible Squatted Stub
|
— | pypi | 202610.22.80100 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 21h | — | — | — |
Possible Squatted Stub
|
— | pypi | 202610.22.80100 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 22h | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.1 | byteplus-sdk | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 24h | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.4 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 26h | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 26h | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 49h | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.1 | byteplus-sdk | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 49h | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.1 | byteplus-sdk | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 51h | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0.dev0 | ICAMS, Ruhr-Universität Bochum | — | 🪝 | |
|
Package purpose: AMD GPU backend (ROCm 7) of grace-runtime (placeholder)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 51h | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0.dev0 | ICAMS, Ruhr-Universität Bochum | — | 🪝 | |
|
Package purpose: AMD GPU backend (ROCm 6) of grace-runtime (placeholder)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 51h | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0.dev0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 51h | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0.dev0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 52h | — | — | — |
Very Risky
|
— | pypi | 0.2.0 | Your Name | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 60h | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.2 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 62h | — | — | — |
Very Risky
|
— | pypi | 0.3.0 | kvothesson | — | 🪝 | |
|
Package purpose: Real-time simultaneous translation. Speak your language. Be understood.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 66h | — | — | — |
Possible Squatted Stub
|
— | pypi | 1.0.0b2 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 66h | — | — | — |
Possible Squatted Stub
|
— | pypi | 1.0.0b2 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 66h | — | — | — |
Possible Squatted Stub
|
— | pypi | 1.0.0b2 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 3d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.1 | byteplus-sdk | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 3d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 3d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4d | — | — | — |
🐛 Potential Cross-Ecosystem Worm
Very Risky
|
— | pypi | 2.0.0 | YiGraph contributors | — | 🪝 🐛 | |
|
Package purpose: YiGraph: graph analytics and Analytics-Augmented Generation
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.1 | EntityRisk, Inc | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.1 | EntityRisk, Inc | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4d | — | — | — |
Very Risky
|
— | pypi | 0.4.3 | Muhammed Ali | — | 🪝 | |
|
Package purpose: Evidence-based JavaScript intelligence for bug bounty hunters and web app pentesters
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0.dev0 | ICAMS, Ruhr-Universität Bochum | — | 🪝 | |
|
Package purpose: AMD GPU backend (ROCm) of grace-runtime (placeholder)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0.dev0 | ICAMS, Ruhr-Universität Bochum | — | 🪝 | |
|
Package purpose: NVIDIA GPU backend (CUDA 13) of grace-runtime (placeholder)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0.dev0 | ICAMS, Ruhr-Universität Bochum | — | 🪝 | |
|
Package purpose: NVIDIA GPU backend (CUDA 12) of grace-runtime (placeholder)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0.dev0 | ICAMS, Ruhr-Universität Bochum | — | 🪝 | |
|
Package purpose: GRACE interatomic potentials: standalone inference runtime (placeholder)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0b1 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 5d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.9.0 | VantaDB Team | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 5d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.9.0 | VantaDB Team | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 7d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 7d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.18.1 | Cyborg Inc. | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 7d | — | — | — |
Possible Squatted Stub
|
— | pypi | 2.49.0 | docling.rs contributors | docling.rs | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 7d | — | — | — |
Possible Squatted Stub
|
— | pypi | 3.2.0 | f0e | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 7d | — | — | — |
Possible Squatted Stub
|
— | pypi | 2.48.5 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 7d | — | — | — |
Very Risky
|
— | pypi | 0.26.0 | Vincent Denise | — | 🪝 | |
|
Package purpose: Application graphique Material pour composer des pipelines DevOps cohérents à partir du CNCF Landscape.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 7d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0b1 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 7d | — | — | — |
Very Risky
|
— | pypi | 0.1.0 | Valentino Margarit | — | 🪝 | |
|
Package purpose: Hold a mouse button, talk, let go. Private, offline dictation for Windows that runs Whisper on your own PC.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 8d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.40 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 8d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 8d | — | — | — |
Possible Squatted Stub
|
— | pypi | 1.0.0b1 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||