Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 2h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 2h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Servidor MCP y CLI para el sistema de avisos del Ayuntamiento de Gijón (CuidaGijón)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 2h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 2h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 2h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | JularDepick | — | 🪝 🌐 | |
|
Package purpose: 将 DSH 的 AI 交互量化并上报至 WakaTime
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 2h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Reaction videos of your app, made by your coding agent. The command line behind the Gaspcut skill.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 2h | — | — | — |
Unverified Signal
|
— | npm | latest | SecretVault Security Engineering | — | 🪝 | |
|
Package purpose: Official CLI for SecretVault — secure multi-tenant secret management, runtime injection, context management, and OIDC workload authentication
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 2h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for the LeadHarbor APIs on RapidAPI: email verify (MX), website contact extractor, LinkedIn jobs search, YouTube data. Bring your own RapidAPI key.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local payment webhook simulator for Indonesian developers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Manifest-driven static documentation portal and coverage checker
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Token-lean LangChain agent: intent routing, zero-token tool fast path, RAG, per-request token budgets and usage for Ollama, OpenAI, Claude, Gemini and OpenRouter.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: npx scaffold and setup check for Open Everywhere — one step engine, reported by --check for an agent-led setup.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local-first evidence verification and project intelligence for coding agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4h | — | — | — |
Unverified Signal
|
— | npm | latest | Eunho Kim | — | 🪝 | |
|
Package purpose: Symmetric Disaggregated Mobile RAM Pooling & On-Device AI Acceleration Runtime for Android Termux & Edge Systems
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4h | — | — | — |
Unverified Signal
|
— | npm | latest | Assuredfive | — | 🪝 | |
|
Package purpose: 123云盘(123pan) WebDAV for DeepSeek Harness: agent tools (pan123_*), a file browser panel and a settings page. · 123云盘 WebDAV 插件：给 Agent 提供 pan123_* 工具，并在 DSH 界面里提供网盘文件浏览器与设置页。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Nitpick CLI and MCP server: let your coding agent install the feedback component and fetch feedback.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Command line interface for the dev.to / Forem API v1
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Official Node.js client for the Sieve fraud-prevention API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Create WordPress plugins with Composer, namespace prefixing, REST routes, migrations, Vite, Vue and Tailwind, then generate modules, migrations, controllers and repositories inside them.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Connect your app to ScreenRight: sign in once in a browser window; the sign-in is checked and handed over.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | DSH Contributor | — | 🪝 🌐 | |
|
Package purpose: GitHub Flow: Native GitHub CLI (gh) integration for DeepSeek Harness — Agent Tools, Slash Commands, and Web UI Workspace
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Yongfeng Mai | — | 🪝 🌐 | |
|
Package purpose: Simperator Official Model Context Protocol (MCP) Server
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5h | — | — | — |
Unverified Signal
|
— | npm | latest | Jainik Patel | — | 🪝 | |
|
Package purpose: An AI dev crew for Claude Code and any Agent Skills tool: agents, skills and workflow commands that take requirements to a tested, released product. Install per project or globally with one npx command.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Open-source hybrid testing and RPA platform with plain-English DSL, web, desktop, database automation, and automatic evidence reporting.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6h | — | — | — |
Unverified Signal
|
— | npm | latest | Rafid Ahmed | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8h | — | — | — |
Unverified Signal
|
— | pypi | 1.1.0 | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8h | — | — | — |
Unverified Signal
|
— | npm | latest | Giuseppe Concas | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9h | — | — | — |
Unverified Signal
|
— | npm | latest | tuoLuoSuan | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||