Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 22h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Run a dreamteamer workspace as a local Docker container, and move its workspaces between containers as one encrypted file.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 22h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: NotebookLM for a dreamteamer workspace: export and sync the workspace as notebook sources, and keep each notebook as a record it is restored from.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 22h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Behaviour proofs for a dreamteamer workspace's skills, commands, command-bindings and module scripts.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 22h | — | — | — |
Unverified Signal
|
— | npm | latest | Oskar Grunning | — | 🪝 | |
|
Package purpose: Zero-config Oxlint house style for TypeScript projects, run through Vite Plus.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 22h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local wikis for a dreamteamer workspace — corpora of markdown committed in the repo, grepped with nothing installed and asked by meaning once qmd is.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 22h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: One board for every official dreamteamer module a workspace has: which optional capabilities are ready, which are degraded, and the fix for each.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 22h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Zero-dependency uploader for webshot-mcp
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 22h | — | — | — |
Unverified Signal
|
— | npm | latest | Sean Lee | — | 🪝 | |
|
Package purpose: Use several accounts in Claude Desktop on macOS: keep Code sessions visible under every account, and switch accounts in one click from the menu bar with live 5-hour and weekly usage. Unofficial.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 22h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Interfere CLI native binary for win32-x64.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 22h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Bookarest Digital SRL | — | 🪝 🌐 | |
|
Package purpose: What proves a nervur world before it runs: the layout that nervur check reads, and the bench that nervur test stands.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 23h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Realtime server for agent turns and UI actions — declared client events, room tokens, the UI action result store, the approval store, declared product events and their job settlements, Redis fan-out; the product supplies auth, room policy and keys
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 23h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | linsyking | — | 🪝 🌐 | |
|
Package purpose: JS port of the ml-regl
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 23h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Give your AI coding agent a style to write in: your own, learned from your git history, or a house style
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 23h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Fully local MCP server for indexing a codebase and answering semantic search queries about it. No external API calls, no telemetry, no server process to run.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 23h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Add Peekay Auth sign-in, sessions and organizations to a Next.js app.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 23h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 23h | — | — | — |
Unverified Signal
|
— | npm | latest | krishnapawar | — | 🪝 | |
|
Package purpose: Modular Node.js, Express & Sequelize REST API starter with CLI scaffolding and code generation for models, controllers, services, modules, middleware, migrations, relations, events, notifications, cron jobs, seeders and tests
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 24h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Build apps for the Ritual Engine: verify the engine JWT, read identity, and spend credits through Fuel.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 24h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Independent, deterministic evidence and verification layer for AI-assisted software development.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 24h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | ars2k03 | — | 🪝 | |
|
Package purpose: CLI tool to instantly scaffold a production-ready NestJS + Prisma backend
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 24h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Longzai Intelligence 漏洞情报采集引擎
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25h | — | — | — |
Unverified Signal
|
— | npm | latest | providcc | — | 🪝 🌐 | |
|
Package purpose: DSH Remote Control host plugin: pairs a running DeepSeek Harness with the DRC relay so a WeChat Mini Program can send prompts, watch streamed output, and answer approvals. Payload-level E2E encryption; the relay never sees plaintext.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25h | — | — | — |
Unverified Signal
|
— | npm | latest | adlakhavansh | — | 🪝 | |
|
Package purpose: Configurable status line for Claude Code. Pick your segments from a checkbox list, zero dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Hybrid MCP server for SEO Core cloud and local SEO preflight workflows
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Connect any system to voice agents: create agents and tools, prepare and connect calls, bridge telephony streams and receive call events.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Show remaining OpenAI Codex quota in Pi with /usage
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Create a new Ranu.js project
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25h | — | — | — |
Unverified Signal
|
— | npm | latest | Safayet Hossain | — | 🪝 | |
|
Package purpose: Rotate leaked secrets automatically: detect, mint a new credential, redeploy, revoke the old one.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Brandon Rajkowski | — | 🪝 | |
|
Package purpose: Zero-dependency QR code generator (PNG and SVG) for Node.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25h | — | — | — |
Unverified Signal
|
— | npm | latest | Joshua Almeida | — | 🪝 | |
|
Package purpose: One command scans your agent's diff and flags every way it faked a green build. Deterministic, zero-LLM, no API key.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: EmulatorJS 4.2.3 with its RetroArch cores built from source; each core keeps its own license (LICENSES/)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: AbdoCode — a coding agent that runs on your own machine, from the terminal (Arabic and English).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | kyan001 | — | 🪝 🌐 | |
|
Package purpose: Let TypeSafe's Jev decide each prompt's thinking level, then apply it to the model request. · 用 TypeSafe Jev 为每个 prompt 自动决定思考档位。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Vermin MCP server (stdio): scrape, crawl, map and brand tools for Claude, Cursor, VS Code and other MCP clients.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The workspace rooms — Home, Chat, Inbox, Contacts, Meet, Cal, Drive, Board, Work, Bots — and the frame that holds them, once, for every Hanzo surface.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | GJL Digital Investments, LLC | — | 🪝 🌐 | |
|
Package purpose: MCP server for Blockchain IQ's pay-per-call crypto market data API (x402, USDC on Base). Free catalog and sample without a wallet; paid tools are paid by your own wallet.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for DIECASTr — access your eBay inventory, orders, analytics, and AI tools from Claude Desktop
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 26h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cloudflare email sending, inboxes, and delivery history for Convex.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 26h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Send Node.js logs, console output and uncaught errors to Logify.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 26h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 26h | — | — | — |
Unverified Signal
|
— | npm | latest | Gus Fune | — | 🪝 | |
|
Package purpose: Cyclomatic, cognitive and CRAP complexity for TypeScript and JavaScript repositories, with weekly git history, SVG charts, pull-request deltas and a generated GitHub Action.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 26h | — | — | — |
Unverified Signal
|
— | npm | latest | Avazbek Olimov | — | 🪝 | |
|
Package purpose: Turn a folder or repository into focused context for AI from the CLI, TUI, or MCP server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 26h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Issue Dominican electronic invoices (e-CF) from your application, ERP, or POS with one configured client. Invoice issuance and payment collection have separate lifecycles. Use `@timbro/payments` when you also need Timbro to collect money through Checkout.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 26h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 在上下文监控卡片内直接调节自动压缩的触发阈值。host 半在运行时替换 @deepseek-ai/dsh-compaction-basic 已挂载引擎的 thresholdRatio 并持久化，client 半把滑块画进卡片面板。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 26h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TokenTree is an open-source, local-first developer tool that measures AI coding-agent usage and organizes immutable provider requests into projects → work items → sessions → turns. Its production engine is Rust; TypeScript is reserved for plugin glue, the
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 27h | — | — | — |
Unverified Signal
|
— | npm | latest | HastyCapybara (W.Leester) | w.leester | 🪝 | |
|
Package purpose: Command line for Tasks for Markdown: query, add, complete and edit Obsidian Tasks-style task lines in a folder of Markdown notes — no editor required.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 27h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Install and manage the optional Pi Remote Helper for macOS
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 27h | — | — | — |
Unverified Signal
|
— | npm | latest | MEUI Creative | — | 🪝 | |
|
Package purpose: Create a new Meui Creative project: Payload CMS + Next.js from meui-boilerplate, on the latest Payload.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 27h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Installable dsh context-strategy plugin and reproducible Agent benchmark runner
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||