Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 35 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Portable PAI core: chunk, threat, table-detect, message-id. Plain TS, no deps. Hosts provide storage (sqlite-wasm + OPFS) and transport.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Kuriv Vesti | — | 🪝 🌐 | |
|
Package purpose: MySQL 是一款免费开源的关系型数据库软件。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Abdul Wasay | — | 🪝 🌐 | |
|
Package purpose: Catch AI coding agents faking "done": detects deleted tests, skipped tests and removed assertions by diffing before vs. after.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Stormworks Lua runtime, screen rasterization, Vehicle compiler and explicit host services
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Ingeniería Creativa | — | 🪝 🌐 | |
|
Package purpose: Transpilador de Tailwind a CSS3 puro bajo estándar AUM-IC
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TurboJev WebAssembly core for browser applications
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Liiift Studio | — | 🪝 🌐 | |
|
Package purpose: Sanity Studio utilities for type foundry projects — Utilities desk, Fingerprint Reader for font forensics, and font metadata tools. Supports Sanity v3 through v6.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Quinn Keaveney | — | 🪝 🌐 | |
|
Package purpose: Flexible bulk data operations utility for Sanity Studio — search, add, and modify data across any document types with safety features
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Masai School | — | 🪝 🌐 | |
|
Package purpose: Mantine v8 UI for Schema Grid: cell editors, filter and column builders, import wizard and export dialog.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Courier for PromptKit OS: fetches a pinned release tarball and runs the canonical installer. Not a runtime dependency.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | mig | — | 🪝 🌐 | |
|
Package purpose: Hardhat task nactrace:last and the nactrace-foundry script; thin wrappers around the nactrace CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | zhouxiao | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Remotion integration suite for Web React Player: in-browser TSX compiler, WebCodecs MP4/WebM exporter, dynamic audio mixer, scenario adapters and widget runtime.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Gokul Nair | — | 🪝 🌐 | |
|
Package purpose: Interactive map of Kerala for React Native — districts, local bodies, wards and Lok Sabha / State Assembly constituencies with search, drill-down and popups. Renders the react-kerala-map component inside a WebView and exposes its full imperative API over
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Raby Whyte | — | 🪝 🌐 | |
|
Package purpose: Small, fast, dependency-free connected-components / blob detection, compiled to WebAssembly
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 1.0.0 | — | — | 🪝 | |
|
Package purpose: Encode, decode, wrap, and run Python source with reversible codecs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | vjymisal0 | — | 🪝 | |
|
Package purpose: Universal AI context and rules synchronizer for Claude Code, Cursor, Copilot, Gemini, Windsurf, and custom agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Timothy Schneider | — | 🪝 | |
|
Package purpose: Interim npm home for @distilled.cloud/openbao — see docs/distilled-interim.md. Not published upstream yet; the kit aliases @distilled.cloud/openbao onto this package until it is.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 9d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Kuriv Vesti | — | 🪝 🌐 | |
|
Package purpose: Redis 是一款开源、内存型、 Key‑Value 数据库。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | https://github.com/RinDevJunior | github.com | 🪝 🌐 | |
|
Package purpose: Matterbridge LG ThinQ Plugin
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Kusama Shield Developers | — | 🪝 🌐 | |
|
Package purpose: Nym and Tor privacy clients that wrap EVM JSON-RPC (ethers) and Polkadot/Substrate API calls for Kusama Shield.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | PledgeStack Contributors | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | ybouane | — | 🪝 🌐 | |
|
Package purpose: LibRaw WASM bindings for the browser — a single-threaded (no -pthread) fork of libraw-wasm, built to avoid the SharedArrayBuffer/recursive-worker pattern that breaks bundlers like Turbopack.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Maxime Larrivée-Roy | — | 🪝 🌐 | |
|
Package purpose: The kiri command-line interface for Kirigami — a thin terminal wrapper around @kirigami/kirigami's programmatic API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Molen materials: pixel grids, SVG and procedural material graphs (rungs 2-4). No three.js.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Aurelio Nakamura | — | 🪝 | |
|
Package purpose: The seatbelt for coding agents — a Claude Code safety hook that blocks destructive commands (rm -rf /, curl | sudo bash, force-push, dd to disk) and credential leaks before they run. Offline, zero-config.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
SUSPICIOUS
|
— | npm | latest | BravoTech | — | 🪝 🌐 | |
|
Package purpose: Webphone BCVOZ embutível em qualquer página web. Renderiza uma janela flutuante arrastável com todas as funcionalidades do softphone.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: On-device NSFW image detection for JavaScript. Runs in the browser (WebAssembly + LiteRT.js) and server-side in Node (native), from one import.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Samré Team | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Edem Dogbe | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | DreamNum Co., Ltd. | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | DreamNum Co., Ltd. | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | DreamNum Co., Ltd. | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | DreamNum Co., Ltd. | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | DreamNum Co., Ltd. | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | DreamNum Co., Ltd. | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Muthukumaran Navaneethakrishnan | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | kollors | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | juntiantan | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Chip Dong Lim | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | pbarros1979 | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | HeadCount CMMS | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Josh Goldberg | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Josh Goldberg | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Josh Goldberg | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Josh Goldberg | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||