Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 30 | 1791d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Thorbjorn Kappel Davis | — | 🪝 | |
|
Package purpose: Extension package to enable newsletter on Pluss Communities Platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 1791d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Thorbjorn Kappel Davis | — | 🪝 | |
|
Package purpose: Extension package to enable newsletter on Pluss Communities Platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 1797d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Thorbjorn Kappel Davis | — | 🪝 | |
|
Package purpose: Extension package to enable newsletter on Pluss Communities Platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 1798d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Thorbjorn Kappel Davis | — | 🪝 | |
|
Package purpose: Extension package to enable newsletter on Pluss Communities Platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 1803d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Thorbjorn Kappel Davis | — | 🪝 | |
|
Package purpose: Extension package to enable newsletter on Pluss Communities Platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 1809d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Thorbjorn Kappel Davis | — | 🪝 | |
|
Package purpose: Extension package to enable newsletter on Pluss Communities Platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 1809d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Thorbjorn Kappel Davis | — | 🪝 | |
|
Package purpose: Extension package to enable newsletter on Pluss Communities Platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 1822d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Thorbjorn Kappel Davis | — | 🪝 | |
|
Package purpose: Extension package to enable newsletter on Pluss Communities Platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 1850d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Thorbjorn Kappel Davis | — | 🪝 | |
|
Package purpose: Extension package to enable newsletter on Pluss Communities Platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 2143d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3407d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 0h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI for DesignX UI — add accessible, motion-first components to your React app.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 2h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Expo modules as Solid services for solidnative, plus registerExpoView for a module's native view.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 2h | — | — | — |
Unverified Signal
|
— | npm | latest | John Henry | — | 🪝 🌐 | |
|
Package purpose: Framework-agnostic Web Components for rendering HTML-like source into live DOM only after applying an explicit versioned security profile -- never innerHTML/insertAdjacentHTML on untrusted input.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Typed TypeScript client for the Tablation API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7h | — | — | — |
Unverified Signal
|
— | npm | latest | IamCaptainPepe | — | 🪝 🌐 | |
|
Package purpose: Stream .torrent / magnet to VLC or browser — torrent streaming for macOS/Linux without a torrent client. Стрим торрентов в VLC или браузер.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Isomorphic core for Hodios: parse, validate, compile entries to every AI tool, and search the catalog index.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 9h | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | — | — | 🪝 | |
|
Package purpose: Fast CLI tool & Python client for searching, filtering, and extracting Jabama accommodation listings
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 12h | — | — | — |
Unverified Signal
|
— | npm | latest | Dean Hiller | — | 🪝 | |
|
Package purpose: Agent hook protocol, normalized events, and fail-closed application boundary.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 13h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Reusable full-stack website + CMS kit with multi-page public sites, a protected authoring dashboard, local SQLite, starter/theme import, and pluggable auth, storage, and deployment adapters.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 21h | — | — | — |
Unverified Signal
|
— | npm | latest | Acanto | — | 🪝 🌐 | |
|
Package purpose: Scaffold a new Olmo Next.js frontend from olmo-front-template, with @olmocms/front preinstalled.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 21h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Scripted models, deterministic fixtures, and adapter conformance kits for testing Effect Agent applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 22h | — | — | — |
SUSPICIOUS
|
— | npm | latest | Daher Alfawares | — | 🪝 🌐 | |
|
Package purpose: The uione compiler, built for the browser and run in a Web Worker: check a project, build it, and see what each line becomes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 24h | — | — | — |
Unverified Signal
|
— | pypi | 0.2.1 | Leslie Kadenge | — | 🪝 | |
|
Package purpose: An MCP server whose confirmation cannot be replayed against a different call
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 26h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript WebGL framework. Version 0.1.0.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 27h | — | — | — |
Unverified Signal
|
— | npm | latest | SukunDev | — | 🪝 | |
|
Package purpose: The sandboxed QuickJS runtime that runs Matane extensions, shared by the app and mr-ext
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 29h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Portable project memory + scaffold for AI coding tools (.ai/ memory bank, cross-tool AGENTS.md/CLAUDE.md/.cursorrules contracts, ≤1.5KB context fingerprint).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 29h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: VSCode-style command palette for MUI apps: contribution registry, fuzzy matcher, recents ranking, and an accessible RTL-aware dialog
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 33h | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0.dev1 | Global Phoenix Solutions Ltd | — | 🪝 | |
|
Package purpose: ProofPack engine: validated ingest, declarations and statistical evidence packs for AI-enabled medical devices
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Route Chatwoot conversations with TypeSafe Jev on Cloudflare Workers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 48h | — | — | — |
Unverified Signal
|
— | npm | latest | Er. Anil Kumar Thakur | — | 🪝 | |
|
Package purpose: Mason authentication: guards, user providers, and middleware (the Illuminate\Auth equivalent).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 48h | — | — | — |
Unverified Signal
|
— | npm | latest | Piotr Franczyk | — | 🪝 🌐 | |
|
Package purpose: Relocatable SWI-Prolog 10.0.2 runtime for Kibi on Linux x64 (glibc 2.28 or newer)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 48h | — | — | — |
Unverified Signal
|
— | npm | latest | Piotr Franczyk | — | 🪝 🌐 | |
|
Package purpose: Relocatable SWI-Prolog 10.0.2 runtime for Kibi on macOS on Apple silicon (macOS 12 or newer)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Upstash AgentKit backends for TanStack AI: chat persistence, resumable streams, distributed locks, long-term memory, tool caching, rate limiting, and Redis-Search tools — all on one Upstash Redis.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | Greycoat Research Inc. | — | 🪝 | |
|
Package purpose: Address form data (layouts, zones, zip rules, labels) derived from Shopify/worldwide
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 62h | — | — | — |
Unverified Signal
|
— | npm | latest | Sean Morris | — | 🪝 🌐 | |
|
Package purpose: Statically linked embedded PHP for Cloudflare Workers, with Vrzno, ZIP/zlib and PDO-CFD1
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 69h | — | — | — |
Unverified Signal
|
— | npm | latest | ahnafudin | — | 🪝 🌐 | |
|
Package purpose: Start a repo that AI coding agents follow, or add that tooling to one you have: one AGENTS.md, one gate, anti-slop checks.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 71h | — | — | — |
Unverified Signal
|
— | npm | latest | adamaik | — | 🪝 🌐 | |
|
Package purpose: DeepSeek Harness plugin: show Ollama Cloud remaining quota (session/weekly) as a Settings section beside Account & Balance, with an in-page API key editor. · DSH 插件：在设置页“账号与余额”下方显示 Ollama Cloud 剩余额度，并支持在页面内填写 API Key。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 3d | — | — | — |
SUSPICIOUS
|
— | npm | latest | tastypear | — | 🪝 🌐 | |
|
Package purpose: Node.js fs-compatible module backed by HTTP. Drop-in replacement for require('fs') that routes all operations to a remote server via process.binding('fs') interception.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Zero-trust security sidecar, identity broker, and MCP gateway for autonomous agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: In-browser test runner for LLDLab problems: JavaScript, TypeScript, Python (Pyodide) and Go (Yaegi)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | JayYuen | — | 🪝 🌐 | |
|
Package purpose: dsh 插件：对话输入框「整理」按钮（主键直接整理/▾ 以角色视角整理，结合当前目录 + session 模型整理优化草稿）+「模板」下拉（内置精选角色集生成自插件 agents/ 角色库，可按部门分组；设置卡可增删改/一键导入内置全部/导入本地角色 .md）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Josh Stovall | — | 🪝 | |
|
Package purpose: A searchable, themeable emoji picker for React Native and web.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Share files over LAN via HTTP
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Luka Erkapic | — | 🪝 🌐 | |
|
Package purpose: Browser TypeScript wrapper around Khronos libktx for loading, creating, and transcoding KTX2 textures.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Movelytics SAS | — | 🪝 🌐 | |
|
Package purpose: Human pose estimation SDK for React Native — fully optimized for iOS & Android (Expo Go). Bundled MoveNet Lightning, free offline keypoints, optional API-key exercise engine (reps, form score, jumps).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Spec-driven workflow CLI for AI coding agents — align on PRD/TRD before coding, resume tasks across sessions, and archive with acceptance records.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Hallvard R. Indgjerd | — | 🪝 🌐 | |
|
Package purpose: Unofficial npm packaging of the 3DHOP viewer runtime (CNR-ISTI Visual Computing Lab): upstream 4.3 + the 4.3.5 patch set, jQuery-free. Runtime assets only; use with @ikaros-arch/react-3dhop.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Matthieu Bouilloux | — | 🪝 🌐 | |
|
Package purpose: Zero-dependency browser framework: a DI module runtime with 200+ ESM modules — codecs, compression, crypto (WebCrypto + WASM tiers, post-quantum), DOM rendering and query, workers, security lockdown — usable without a bundler via import maps.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | InterSystems Iberia | — | 🪝 | |
|
Package purpose: InterSystems ObjectScript (.cls/.mac/.inc/.rtn) support for graphify (graphifyy) on PyPI, until native support ships upstream
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||