Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 27h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Read and send in Discord through your own bot, hosted by Botyard. Made for AI agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 28h | — | — | — |
Unverified Signal
|
— | npm | latest | Andre Tansil | — | 🪝 🌐 | |
|
Package purpose: OpenAI-compatible HTTP transport for selected Kie.ai image and video models.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 28h | — | — | — |
Unverified Signal
|
— | npm | latest | Gus Fune | — | 🪝 | |
|
Package purpose: Cyclomatic, cognitive and CRAP complexity for TypeScript and JavaScript repositories, with weekly git history, SVG charts, pull-request deltas and a generated GitHub Action.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 28h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 技能中心：管理本机技能文件、模型调用策略与回收站，查看会话技能目录
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 28h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Backwrite | — | 🪝 🌐 | |
|
Package purpose: Official Model Context Protocol (MCP) server for Backwrite — connect Lovable, Cursor, Windsurf, and Claude Code directly to your programmable backend infrastructure
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 28h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Backwrite | — | 🪝 🌐 | |
|
Package purpose: Backwrite Platform API SDK — typed operations generated from the published OpenAPI 3.1 contract
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 28h | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | Muhammad Mohsin Ibrahim | — | 🪝 | |
|
Package purpose: Offline-first security scanner and trust registry for MCP servers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 28h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The bunvex engine: MVCC, the committer, optimistic transactions, the query cache, subscriptions, and the Persistence contract with its zero-dependency drivers (memory, SQLite).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 28h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Furio likes things tidy: validate and map your architecture, straight from your repos.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 28h | — | — | — |
Unverified Signal
|
— | npm | latest | SukunDev | — | 🪝 🌐 | |
|
Package purpose: mr-ext: create, build, test and publish Matane extensions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 28h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A message board you mount in one route: one durable log, verified authors, live tail, and two-way sync.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 28h | — | — | — |
Unverified Signal
|
— | npm | latest | Karan Chourasia | — | 🪝 | |
|
Package purpose: Deterministic repository quality scanner for JavaScript and TypeScript projects
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 29h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Stdio compatibility adapter for Circle Computer's hosted MCP service
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 29h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A high-performance terminal AI agent
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 29h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 本机工具：CLI 与 Web 面板同源
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 29h | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | Pyhroff | — | 🪝 | |
|
Package purpose: One command that runs mcpaudit, memsentry and ragsentry on a repo and emits SARIF for GitHub code scanning.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 29h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Mission Growth | — | 🪝 🌐 | |
|
Package purpose: MCP server that compares a page's raw HTML with its rendered DOM, using the Unrendered extension's own analysis code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 29h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Reppr model storage, Piqoff registration and server PDF printing
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 29h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Reppr report and catalogue designer, browser host and static assets
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 30h | — | — | — |
Unverified Signal
|
— | npm | latest | ChristopherVR | — | 🪝 🌐 | |
|
Package purpose: Shared OOXML logic for the Word, PowerPoint and Excel viewers: everything except the UI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 30h | — | — | — |
Unverified Signal
|
— | npm | latest | Cipher208 | — | 🪝 | |
|
Package purpose: OpenCode plugin: open a file in a tmux pane and read back the text the user selected with the mouse.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 30h | — | — | — |
Unverified Signal
|
— | npm | latest | Suson Waiba | — | 🪝 | |
|
Package purpose: Start a new htmx-ui site: npm create htmx-ui, pnpm create htmx-ui, yarn create htmx-ui, bun create htmx-ui.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 30h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Browser-authenticated CLI for syncing native AI Harness files with SkillShare.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 30h | — | — | — |
Unverified Signal
|
— | npm | latest | tong-io | — | 🪝 🌐 | |
|
Package purpose: TongFlow's media studio for agents: projects as plain folders, one TongFlow workflow per generated asset stored next to its outputs, deterministic media generation — served as an MCP server with a Studio web page.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 30h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 工作台与模块共享的纯代码与契约类型：类型、纯逻辑、哑组件、平台解析。宿主侧的东西从 /host 进（不影响浏览器产物）。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 30h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Better model select for pi — /bms opens a searchable model picker sorted by how often you actually use each model, with inline add, update and delete.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 30h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 个人工作台：Agent 工作台外壳（左栏 + 常驻对话 + 自研右侧数据面板）。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 30h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript contracts for durable Serverless Agents harnesses
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 31h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Named headless commands for Communicate
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 31h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Shared Next.js shell components and theme primitives for Partech apps.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 31h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Search and download icons from the IconVault library without leaving the terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 31h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Node.js SDK for running Wiki Graph programmatically with local config, libraries, and jobs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 31h | — | — | — |
Unverified Signal
|
— | npm | latest | The Planitia authors | — | 🪝 | |
|
Package purpose: Generate ready-to-run MCP servers from business-logic templates
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 31h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DeepSeek Harness browser provider: read a page as an indexed action space, then run one guarded operation at a time.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 31h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Fucini Consulting | — | 🪝 🌐 | |
|
Package purpose: Fucini Coverage Studio on the command line: the same reader as the VS Code and Visual Studio editions, for CI gates, exports, reports, badges, baseline compares and an MCP server for AI agents. Free.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 32h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | MuseFit | — | 🪝 🌐 | |
|
Package purpose: MuseFit AI 服装生图平台的本地 MCP 包装器（stdio）：转发远程 MuseFit MCP 工具，并提供本机图片上传与结果图保存
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 32h | — | — | — |
Unverified Signal
|
— | npm | latest | ContentaSoft AB | — | 🪝 | |
|
Package purpose: MCP server for Contenta Converter — Batch-convert, resize and edit images on your Windows PC: 100+ formats, PDF albums, metadata
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 32h | — | — | — |
Unverified Signal
|
— | npm | latest | ContentaSoft AB | — | 🪝 | |
|
Package purpose: MCP server for AI Video Enhancer Studio — Upscale, stabilize, denoise and raise the frame rate of videos locally on your NVIDIA GPU
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 32h | — | — | — |
Unverified Signal
|
— | npm | latest | ContentaSoft AB | — | 🪝 | |
|
Package purpose: MCP server for 3D CAD Converter — Convert STEP, IGES, STL, OBJ, FBX, glTF and 3MF files on your Windows PC, one file or a folder
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 32h | — | — | — |
Unverified Signal
|
— | npm | latest | Kadirul Islam | — | 🪝 🌐 | |
|
Package purpose: Bring-your-own-key terminal coding agent. OpenAI-compatible, no account, no server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 32h | — | — | — |
Unverified Signal
|
— | npm | latest | sueccku | — | 🪝 | |
|
Package purpose: 用中文对话操控 WPS 表格 / 文字 / 演示的 DeepSeek Harness 插件（仅 Windows x64 / COM）。自带 MCP server、常驻 COM 宿主与技能文档，免装 WPS 加载项、免配环境变量。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Pao@Office pao@office | — | 🪝 🌐 | |
|
Package purpose: Reports.Web for Node.js: build PREPEJ print data from report definitions (.prepdj) and render PDF with the Reports.Web engine (C++ WebAssembly). Japanese business forms such as invoices, estimates and labels.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | PassiveSentinel Team | — | 🪝 | |
|
Package purpose: Passive streaming network threat intelligence CLI (SIH PS-145)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Call Claude Code from your own scripts over a localhost-only HTTP API (personal use)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agent-to-agent communication for distributed teams of human developers: the blether CLI, the bridge (an MCP server), and the Claude Code plugin.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | Girish Garg | — | 🪝 🌐 | |
|
Package purpose: A job finder for the Indian tech market that runs on your own computer: it gathers postings from company careers pages and job boards, ranks them against your profile, and uses the AI CLI you already have.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Symmetry v3 vault operations for humans and agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | Emmanuel Essam | — | 🪝 | |
|
Package purpose: MySQL and MariaDB database adapter for Payload CMS 3.x, built on Drizzle ORM
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for the Vook transcription API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 34h | — | — | — |
Unverified Signal
|
— | npm | latest | Display Design Studio | — | 🪝 🌐 | |
|
Package purpose: Source-aware Shopify theme devtools for Vite
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||