Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 35 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Part of the [Qadam Flow](https://github.com/aiqadam/qadam-flow) monorepo. See the repository for documentation. Licensed under MIT.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Latin morphological analysis engine for WebAssembly
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Kundan | — | 🪝 🌐 | |
|
Package purpose: Simple UI — lightweight Vue 3 component library with S-prefixed components (s-input, s-button, s-dialog…) that coexist with Element Plus.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 13d | — | — | — |
SUSPICIOUS
|
— | pypi | 8.7.1 | Palakurthi Gowri Shankar | — | 🪝 | |
|
Package purpose: Run code an AI wrote without handing it everything you can reach. Each function declares what it may touch. You grant the run one folder, one host or a number of calls, and the runtime refuses anything else the moment it's tried.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 学习教练 Agent Skill：面试倒计时定计划、背八股、刷算法、读项目源码、模拟面试、错题本滚动复习、启动学习
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Wire format and crypto for the Waterlands vault: client-side encryption of catch locations, species and notes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 14d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Pure TypeScript in-memory SQLite implementation with zero WASM/native dependencies
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 14d | — | — | — |
Unverified Signal
|
— | npm | latest | Softjey | — | 🪝 | |
|
Package purpose: See where the time went in a Claude Code session: model vs tools vs approvals, per tool, per turn and per subagent, in a terminal UI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Igor Kroitor | — | 🪝 🌐 | |
|
Package purpose: A cryptocurrency trading API with more than 100 exchanges in JavaScript / TypeScript / Python / C# / PHP / Go
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 15d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | — | — | 🪝 | |
|
Package purpose: Agent memory-poisoning scanner (OWASP Agentic ASI06): detect injected directives disguised as facts in what an AI agent remembers, and diff memory against a baseline to catch poison that appears over time.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Evercam - Constuction Cameras. | — | 🪝 🌐 | |
|
Package purpose: Evercam API client
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Headless agent core for Ask Buoy - the tool catalog, BYO-model providers, turn loop and effect ledger that let an LLM drive Buoy devtools
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | 1kbgz | — | 🪝 🌐 | |
|
Package purpose: Generic communication library
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 21d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for intelligent web page fetching with LLM-optimized markdown output
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 22d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Treeship CLI binary for linux x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 22d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Reusable React controls for SharePoint Framework solutions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 25d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A Pulumi package for creating and managing Google Cloud Platform resources.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 27d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.1 | — | — | 🪝 | |
|
Package purpose: Infernux (熔炉) — a Python-first game engine advancing toward Neural Network-Native Engine (3N), powered by C++, Vulkan and WebGPU.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 27d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.20 | — | — | 🪝 | |
|
Package purpose: HEP C++ package manager with cppyy dynamic bindings
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 29d | — | — | — |
Unverified Signal
|
— | pypi | 0.6.2 | — | — | 🪝 | |
|
Package purpose: In-process probe reporting what a Python workload imports and runs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 30d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | ByOmakase | — | 🪝 🌐 | |
|
Package purpose: ## Omakase Player - Open source JavaScript framework for building frame accurate video experiences
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 32d | — | — | — |
Unverified Signal
|
— | pypi | 1.1.0 | — | — | 🪝 | |
|
Package purpose: MemorySync memory store for ChatDev 2.0 (DevAll): type: memorysync in workflow YAML — semantic recall with budgets, honest timestamps, fact extraction from the user's input, and idempotent writes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 34d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Kiko Beats | — | 🪝 🌐 | |
|
Package purpose: Comprehensive list of free email provider domains for signup validation and disposable filtering.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 34d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Treeship CLI binary for darwin x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 34d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Treeship CLI binary for darwin arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 34d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Treeship CLI binary for linux arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 58d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 68d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 111d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 132d | — | — | — |
Unverified Signal
|
— | npm | latest | vLannaAi | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 199d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 259d | 24 | 15 | ↑0.1/day |
Possible Squatted Stub
|
addon | pypi | 19.0.1.0.0.8 | HAV Media GmbH, Odoo Community Association (OCA) support@odoo-community.org | odoo-community.org | ||
|
Claimed homepage: https://github.com/OCA/server-brand
Matched naming pattern: odoo-addon-sale
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 259
Registry downloads: 24/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 436 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 276d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: n8n community node for Claude Code CLI integration - execute AI-assisted coding tasks
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 652d | — | — | — |
Unverified Signal
|
— | npm | latest | Constructive | — | 🪝 | |
|
Package purpose: interchain-kit wallet connector for leap cosmos extension metamask
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 681d | — | — | — |
Unverified Signal
|
— | npm | latest | Constructive | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 840d | — | — | — |
Unverified Signal
|
— | npm | latest | Filip Dupanović | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 899d | 170 | 212 | ↑0.2/day |
SUSPICIOUS
|
safe | pypi | 1.5.1 | — ronan@boiteau.eu | boiteau.eu | 🪝 | |
|
Package purpose: A Django template engine to render untrusted template code
Claimed homepage: https://pypi.org/project/django-safe-template-engine/
Matched naming pattern: django-safe-template
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 899
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 170/month, 16/week (MODERATE_USAGE)
Codebase size: 212 lines, 6.3 kB across 7 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 987d | 11 | 378 | ↑0.0/day |
SUSPICIOUS
|
coder | pypi | 0.0.0 | Shahaf Frank-Shapir shahaffrs@gmail.com | gmail.com | 🪝 | |
|
Package purpose: A QR handling module for writing and reading QR.
Claimed homepage: https://github.com/Shahaf-F-S/project-template
Matched naming pattern: python-coder-qr
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 987
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 11/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 378 lines, 15.2 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 1175d | 19 | 582 | ↑0.0/day |
SUSPICIOUS
|
base | pypi | 0.1.2 | — sgelias@outlook.com | outlook.com | 🪝 | |
|
Package purpose: A simple and lighweight package tor clean softwares.
Claimed homepage: https://pypi.org/project/clean-base/
Matched naming pattern: python-base-clean
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1175
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 19/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 582 lines, 23.9 kB across 7 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 1798d | — | — | — |
Unverified Signal
|
— | npm | latest | Romain Casati | — | 🪝 🌐 | |
|
Package purpose: Basthon - Base Kernel
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 1801d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Verdaccio authentication plugin using Okta OAuth
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 2466d | — | — | — |
Unverified Signal
|
— | npm | latest | heartyoh | — | 🪝 🌐 | |
|
Package purpose: Module for managing integration scenario.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4195d | — | — | — |
Unverified Signal
|
— | pypi | 2.0.0 | Graham Dumpleton | — | 🪝 | |
|
Package purpose: Bootstrap mechanism for monkey patches.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 4197d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Check, compile, optimize and compress Javascript with Closure-Compiler
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 0h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 0h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 0h | — | — | — |
Unverified Signal
|
— | npm | latest | Abel Yagubyan | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 1h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 1h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 1h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||