Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Call Claude Code from your own scripts over a localhost-only HTTP API (personal use)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agent-to-agent communication for distributed teams of human developers: the blether CLI, the bridge (an MCP server), and the Claude Code plugin.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | Girish Garg | — | 🪝 🌐 | |
|
Package purpose: A job finder for the Indian tech market that runs on your own computer: it gathers postings from company careers pages and job boards, ranks them against your profile, and uses the AI CLI you already have.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Symmetry v3 vault operations for humans and agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | Emmanuel Essam | — | 🪝 | |
|
Package purpose: MySQL and MariaDB database adapter for Payload CMS 3.x, built on Drizzle ORM
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for the Vook transcription API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 34h | — | — | — |
Unverified Signal
|
— | npm | latest | Display Design Studio | — | 🪝 🌐 | |
|
Package purpose: Source-aware Shopify theme devtools for Vite
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 34h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mitt JAG design system: Figma-synced tokens, four colour themes and the UI components from the Mitt JAG web app.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 34h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: An evidence-driven product-UI design workflow for coding agents: tier router, Design Director, coupled design grammar, contextual reference selection, static drift checking, browser review and user-flow testing. Not an application, framework or component
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 34h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | mleclercq | — | 🪝 | |
|
Package purpose: This library was generated with [Angular CLI](https://github.com/angular/angular-cli) version 9.1.12.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 34h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The Vivd command line: work on your Vivd website from your own folder, editor and coding agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 35h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Read-only audit tools for Claude Code Router: failure diagnosis, prompt-cache hit rate, gateway health, and silent config-takeover risk
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 35h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cashback for developers: share consented dev-tool usage data (redacted on-device) and earn, plus a share of sponsored spinner ads — in any terminal, no VS Code required. Use means acceptance of the Terms (TERMS.md).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 35h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Codemenschen GmbH | — | 🪝 🌐 | |
|
Package purpose: Connects a Node or React website to Werk, the Codemenschen support app: status, hourly ping and the overview of the site with sales.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 35h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Seemant Rajvanshi | — | 🪝 🌐 | |
|
Package purpose: Structured writing & self-publishing application
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 35h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CloudPool from Node: list, upload, download and share your files from code or the terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 35h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP server that lets an agent look at and drive one iOS simulator, with one exclusive simulator per agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 35h | — | — | — |
Unverified Signal
|
— | npm | latest | Evil Kiwi Limited | — | 🪝 | |
|
Package purpose: Docker-based Monorepo Local Development CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 35h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | iMBRACE | — | 🪝 🌐 | |
|
Package purpose: Create, deploy and run apps and scripts on iMBRACE Fission: scaffold a React/Vite + Hono app (or py/js/go scripts), upload the source and the cluster builds and serves it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 35h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A minimal, type-safe fetch full-stack kernel for Node.js: routing, middleware, WebSocket, resources, React Router SSR and CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 36h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: PBFuzz as a DeepSeek Harness plugin: campaign questionnaire, PIER guards, directed-fuzzing tools and the auxiliary-analysis provider registry
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 36h | — | — | — |
Unverified Signal
|
— | npm | latest | Galleon Labs | — | 🪝 | |
|
Package purpose: Reproducible daily strategy backtests with costs, cash flows and buy-and-hold comparison.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 36h | — | — | — |
Unverified Signal
|
— | npm | latest | JauLukNgai | — | 🪝 🌐 | |
|
Package purpose: 让手机成为 DeepSeek Harness 的第二块屏：手机浏览器打开你自己 tailnet 里的地址，就能直接用电脑上的 DSH。默认走 Tailscale Serve，无需配对、不经第三方中继。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 36h | — | — | — |
Unverified Signal
|
— | npm | latest | mozhi012 | — | 🪝 | |
|
Package purpose: Pi coding agent extension for supervised worker Pi in independent Windows Terminal window with bi-directional IPC
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 37h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | vikasprogrammer | — | 🪝 🌐 | |
|
Package purpose: Share your live Claude Code or Codex session with a link. Others watch, chat, and take control when you allow it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 37h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 37h | — | — | — |
Very Risky
|
— | npm | latest | Abhishek Sharma | — | 🪝 | |
|
Package purpose: Flags the lines an AI wrote in a pull request that no test executes, using provenance recorded when Claude Code writes them.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 37h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TTY-free core of pablo: the document and span model the renderer consumes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 37h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 37h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Create new apps from the Devxcrew starter template
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 37h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: React Native components, copied into your project
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 37h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Inverz Solutions Co.,Ltd. | — | 🪝 🌐 | |
|
Package purpose: Parcel tracking for React: paste one or many tracking numbers, detect the carrier and show a Thai delivery timeline. Server helper set up from .env: Thailand Post, Flash, J&T, Ninja Van, DHL eCommerce, Shopee, Lazada, TikTok Shop, TrackingMore, 17TRACK, T
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 38h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Telegram Bot API client — reusable across projects
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 38h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Wings — 新一代 VuePress 博客 / 文档主题，轻量、快速、可组合
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 38h | — | — | — |
Unverified Signal
|
— | npm | latest | Jakub Plichcinski | — | 🪝 🌐 | |
|
Package purpose: SquadRules MCP server for agent automation: persistent memory and deterministic workflow execution for AI agents and chats
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 38h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Servidor MCP de AZUR: deja que un asistente de IA consulte y prepare comprobantes electrónicos del SRI (Ecuador)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 39h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Generate repository connection maps for AI-assisted code changes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 39h | — | — | — |
Unverified Signal
|
— | npm | latest | Nourreddine Houari | — | 🪝 🌐 | |
|
Package purpose: MCP server for AI-assisted E2E test authoring with the Conductor framework
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 39h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 多模态配置：在 设置 → 插件 → 多模态配置 中填写 Agnes AI API 密钥，持久化到 $DSH_HOME/ag-multimodal.json。dsh-agimage / dsh-agvideo 两个工具从同一配置文件读取密钥（未配置时回退内置默认值）。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 39h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 在上下文用量卡片里直接调节自动压缩阈值。幂等自愈补丁，可跨 DSH 安装复用。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 39h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Independent self-restart control for DeepSeek Harness.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 39h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP 服务器管理器：在 DSH Web GUI 的设置界面中可视化新增 / 编辑 / 删除 / 启停 @deepseek-ai/dsh-mcp-client 配置行，直接读写当前 profile 的 cordis.patch.yml。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 39h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Free Rust SEO and GEO toolkit powered by TypeSafe Jev: 58-rule audits, site crawls, AI citation checks, rank drift, CI gates, 15-tool MCP. Zero cost.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 40h | — | — | — |
Unverified Signal
|
— | pypi | 0.1.2 | — | — | 🪝 | |
|
Package purpose: Readers, topographic and BRDF correction, and optional ISOFIT atmospheric correction for airborne and satellite imaging spectrometers
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 40h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TypeScript client for plimsolld, with Trigger.dev and Mastra executeCode add-ons
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 40h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Portable Cloudflare capability connector for AgentSam applications and SDK consumers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 40h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Deterministic Brand Intelligence + portable brand-asset promotion SDK for AgentSam (inspect, derive, plan, promote, publish, verify).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 40h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: In-app bug reports (screenshot, annotation, screen recording), feedback and feature requests that land as tickets on your Planytic board.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 40h | — | — | — |
Unverified Signal
|
— | npm | latest | Margin Systems | — | 🪝 | |
|
Package purpose: StormGTM CLI (stormgtm, sgtm) and typed client — qualify leads with Barometer before you send. MIT; source: https://github.com/marginsystems/stormgtm-cli
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 41h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Connects an AI agent to a Lingisa document: its tools, and its comments the moment they are given.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||