Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 0 | 26d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.1 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 26d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.1 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 26d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 26d | — | — | — |
Possible Squatted Stub
|
— | pypi | 1.0.0b6892506 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 26d | — | — | — |
Very Risky
|
— | pypi | 2.1.8 | — | — | 🪝 | |
|
Package purpose: Provider-based developer configuration generation engine and CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 26d | — | — | — |
Very Risky
|
— | pypi | 0.1.13 | Nicolás Rivas | — | 🪝 | |
|
Package purpose: Un telar para hilos de trabajo: multiplexor de terminal, perfiles de repositorio y agentes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 26d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0b1 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 27d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.1 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 27d | — | — | — |
Very Risky
|
— | pypi | 0.26.1 | — | — | 🪝 | |
|
Package purpose: Find fellow GitHub geeks who match your CV and repos and are likely to follow back. Suggests only — you always follow manually.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 27d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 27d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 27d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 27d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 27d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.5.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 27d | — | — | — |
Very Risky
|
— | pypi | 66.0.3 | Yandex | — | 🪝 | |
|
Package purpose: A package to prevent Dependency Confusion attacks against Yandex.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 27d | — | — | — |
Very Risky
|
— | pypi | 66.0.3 | Yandex | — | 🪝 | |
|
Package purpose: A package to prevent Dependency Confusion attacks against Yandex.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 27d | — | — | — |
Very Risky
|
— | pypi | 66.0.3 | Yandex | — | 🪝 | |
|
Package purpose: A package to prevent Dependency Confusion attacks against Yandex.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 27d | — | — | — |
Very Risky
|
— | pypi | 66.0.3 | Yandex | — | 🪝 | |
|
Package purpose: A package to prevent Dependency Confusion attacks against Yandex.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 27d | — | — | — |
Very Risky
|
— | pypi | 0.1.5 | Jimmie Rodgers | — | 🪝 | |
|
Package purpose: Civ Inspired Tool for AI Research - a Civilization V-style 4X game for benchmarking language models
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 28d | — | — | — |
Very Risky
|
— | pypi | 0.1.0 | Orithos | — | 🪝 | |
|
Package purpose: Orithos CLI — AI agent security testing from the terminal: scan deployed agents, MCP servers, and skill/plugin artifacts.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 28d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.0 | Rawson Consulting B.V. | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 28d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.0 | Rawson Consulting B.V. | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 28d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.7.0 | Arnaud Assad | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 29d | — | — | — |
🐛 Potential Cross-Ecosystem Worm
Very Risky
|
— | pypi | 0.1.5 | Tencent BlueKing | — | 🪝 🐛 | |
|
Package purpose: Synchronize AIDEV agent packages through the application OpenAPI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 29d | — | — | — |
Possible Squatted Stub
|
— | pypi | 2.1.1 | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 30d | — | — | — |
Very Risky
|
— | pypi | 0.5.32 | — | — | 🪝 | |
|
Package purpose: Per-process identity, signed evidence and short-lived cloud credentials for AI agents, in your own cluster
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 30d | — | — | — |
Very Risky
|
— | pypi | 0.2.8 | optiland-zh contributors | — | 🪝 | |
|
Package purpose: Optiland GUI 简体中文汉化包 —— 运行时翻译层，不改上游源码
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 30d | — | — | — |
Very Risky
|
— | pypi | 2.8.0 | Michael Fowler | — | 🪝 | |
|
Package purpose: Cost risk, EVM forecasts, DCMA schedule checks, JCL, AoA and portfolio choice for defense and space programs, in one Python package: Excel in, report and briefing out.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 30d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 30d | — | — | — |
🐛 Potential Cross-Ecosystem Worm
Very Risky
|
— | pypi | added | — | — | 🪝 🐛 | |
|
Package purpose: Holds the OpenBao AppRole so NetBox never possesses credentials able to read production secrets
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 30d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 31d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 31d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 31d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 32d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 33d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 33d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 33d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | Ratio Innovations B.V. | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 34d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 34d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 34d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.2.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 34d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 34d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 35d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | Rawson Consulting B.V. | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 35d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | Rawson Consulting B.V. | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 35d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | Rawson Consulting B.V. | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 35d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | Rawson Consulting B.V. | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 35d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 35d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 35d | — | — | — |
Very Risky
|
— | pypi | 2.2.1 | SwirEngine contributors | — | 🪝 | |
|
Package purpose: Modern Python-first 2D/3D game engine with a unified API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||