Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 0 | 33d | — | — | — |
Very Risky
|
— | pypi | 2.8.0 | Michael Fowler | — | 🪝 | |
|
Package purpose: Cost risk, EVM forecasts, DCMA schedule checks, JCL, AoA and portfolio choice for defense and space programs, in one Python package: Excel in, report and briefing out.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 33d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 33d | — | — | — |
🐛 Potential Cross-Ecosystem Worm
Very Risky
|
— | pypi | added | — | — | 🪝 🐛 | |
|
Package purpose: Holds the OpenBao AppRole so NetBox never possesses credentials able to read production secrets
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 34d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 35d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 35d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 35d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 35d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 36d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 37d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 37d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | Ratio Innovations B.V. | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 37d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 37d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 37d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.2.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 38d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 38d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 38d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | Rawson Consulting B.V. | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 38d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | Rawson Consulting B.V. | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 38d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | Rawson Consulting B.V. | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 38d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | Rawson Consulting B.V. | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 38d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 38d | — | — | — |
Possible Squatted Stub
|
— | pypi | added | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 38d | — | — | — |
Very Risky
|
— | pypi | 2.2.1 | SwirEngine contributors | — | 🪝 | |
|
Package purpose: Modern Python-first 2D/3D game engine with a unified API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 39d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 42d | — | — | — |
🐛 Potential Cross-Ecosystem Worm
Very Risky
|
— | pypi | 1.0.3 | Aegis Team | — | 🪝 🐛 | |
|
Package purpose: Real-time AI threat monitoring. Protect your apps from prompt injection, leaks, and attacks in just a few lines of code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 43d | — | — | — |
Very Risky
|
— | pypi | 3.4.1 | Amit Singh | — | 🪝 | |
|
Package purpose: Privacy-first static code health analysis for Python packages
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 43d | — | — | — |
🚨 Possible Stealer
Very Risky
|
— | pypi | 0.4.0b2 | Ghost Chimera Contributors | — | 🪝 | |
|
Package purpose: Local-first agent orchestration prototype with Chimera Pilot scheduling and runtime control.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 43d | — | — | — |
🐛 Potential Cross-Ecosystem Worm
Very Risky
|
— | pypi | 0.2.0 | — | — | 🪝 🐛 | |
|
Package purpose: A command-line tool for preparing and publishing Python package releases.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 46d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.5.0 | Richard West | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 46d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.5.0 | Richard West | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 49d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.94 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 49d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.94 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 49d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.94 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 53d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 73d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.3 | SAIHM | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 74d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.4 | SAIHM | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 81d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 118d | — | — | — |
Very Risky
|
— | pypi | 0.4.1 | paris-paraskevas | — | 🪝 | |
|
Package purpose: Windows tray widget + dashboard for Claude plan usage (5-hour & weekly limits)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 162d | — | — | — |
Possible Squatted Stub
|
— | pypi | 1.0.40 | Cursor | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 175d | — | — | — |
Possible Squatted Stub
|
— | pypi | 2.6.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 175d | — | — | — |
Possible Squatted Stub
|
— | pypi | 2.6.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 175d | — | — | — |
Possible Squatted Stub
|
— | pypi | 2.6.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 176d | — | — | — |
Possible Squatted Stub
|
— | pypi | 2.6.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 176d | — | — | — |
Possible Squatted Stub
|
— | pypi | 2.6.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 176d | — | — | — |
Possible Squatted Stub
|
— | pypi | 2.6.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 176d | — | — | — |
Possible Squatted Stub
|
— | pypi | 2.6.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 176d | — | — | — |
Possible Squatted Stub
|
— | pypi | 2.6.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 180d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.11.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 185d | — | — | — |
Possible Squatted Stub
|
— | pypi | 1.7.0b4 | ethereum | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 197d | — | — | — |
Possible Squatted Stub
|
— | pypi | 1.1.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||