Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 41h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 丸投げインボイスのコマンドで使う道具（請求書の下書き・確定・PDF、受け取った請求書の読み取り）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 41h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A collection of job board scrapers, plus utilities that resolve a scraper for a company on the fly
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 42h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Static analysis engine that derives privacy policy documentation directly from source code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 42h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Create an isolated Rust + Axum SaaS project from Dougong
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 43h | — | — | — |
Unverified Signal
|
— | pypi | 0.5.1 | hao li | — | 🪝 | |
|
Package purpose: Behavior-guardrail hooks for Claude Code: test-tampering + outbound-action guards, mutation test-honesty, and post-exec verification
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 43h | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | hao li | — | 🪝 | |
|
Package purpose: A Claude Code PreToolUse hook that blocks stale concurrent edits across agent sessions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 43h | — | — | — |
Unverified Signal
|
— | npm | latest | David Condrey | — | 🪝 | |
|
Package purpose: Prose analysis for writers: echoes, repeats, rhythm, dialogue, readability, and more. Native Node.js bindings for bluepencil-core.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 43h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 云站平台官方命令行客户端：授权登录一次，之后建站 / 下单 / 钱包支付 / 查余额都不用再登录（OAuth 授权码 + PKCE，公共客户端，零第三方依赖）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 43h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 43h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Your Accountable books from the command line: reports, entries and changes through the public API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 44h | — | — | — |
Unverified Signal
|
— | npm | latest | Anil Yesilkaya | — | 🪝 🌐 | |
|
Package purpose: Give AI agents eyes for motion. An MCP server that turns a short screen interaction into a timestamped, agent-readable contact sheet — so a coding agent can see what changed, not just what the screen looks like. Zero runtime dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 44h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for Outerview Stream.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 44h | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | — | — | 🪝 | |
|
Package purpose: A free honeytoken SSH key trap - catches secret scanners and attackers after a filesystem or repo compromise.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 44h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | erickwendel | — | 🪝 🌐 | |
|
Package purpose: MCP server that exposes a customer CRUD API as tools for use with GitHub Copilot and other MCP-compatible agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 44h | — | — | — |
Unverified Signal
|
— | npm | latest | Suren Shrestha | — | 🪝 | |
|
Package purpose: Language Server Protocol implementation for Indent Markup Language
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 45h | — | — | — |
Unverified Signal
|
— | pypi | 0.5.1 | Erlend Christoffer Hagen Hårsaker | — | 🪝 | |
|
Package purpose: Offline scanners for the code patterns behind 53 CVEs in 9 AI-agent frameworks, plus MCP tool pinning. No dependencies, no telemetry.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 45h | — | — | — |
Unverified Signal
|
— | pypi | 0.7.2 | — | — | 🪝 | |
|
Package purpose: Find leaked secrets, check if they're live, revoke them in one command, and keep them out of AI coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 45h | — | — | — |
Unverified Signal
|
— | npm | latest | robertxxiv | — | 🪝 🌐 | |
|
Package purpose: MCP server for the Fiken accounting API v2: all 189 operations as tools for Claude, Cursor and other MCP clients
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 45h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP Binding for Pachakutech's Situated Agentic Presence Layer
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 45h | — | — | — |
Unverified Signal
|
— | npm | latest | Shah Khalid | — | 🪝 | |
|
Package purpose: Server-rendered .view templates for Bunyad.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 46h | — | — | — |
Unverified Signal
|
— | npm | latest | ruvnet | — | 🪝 | |
|
Package purpose: RuView portable compute kernel for Node and browsers: the ADR-021 vitals pipeline in Rust, shipped as zero-import WebAssembly with an optional napi-rs native backend and a byte-identical JSON ABI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 46h | — | — | — |
Unverified Signal
|
— | npm | latest | Shah Khalid | — | 🪝 🌐 | |
|
Package purpose: Collections, string/array helpers and errors shared across Bunyad packages.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 46h | — | — | — |
Unverified Signal
|
— | pypi | 0.21.0 | — | — | 🪝 | |
|
Package purpose: Measures what an agent tool definition loses when converted between MCP, OpenAI, A2A, Anthropic, Gemini, Bedrock and 10 more formats. Computed, not asserted.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 46h | — | — | — |
Unverified Signal
|
— | npm | latest | Henry Jewkes | — | 🪝 | |
|
Package purpose: Git worktree mechanics for headless agents: budgeted allocation, release safety, park, re-create and sweep
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 46h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: xlsx-viewer core engine: parse, edit, calculate, serialize and convert Excel .xlsx workbooks. Framework-agnostic TypeScript SDK.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 47h | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Partnercentral Revenue Measurement.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 47h | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Eventbridgev2.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 47h | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Cloudwatchomni.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 47h | — | — | — |
Unverified Signal
|
— | npm | latest | kibertoad | — | 🪝 | |
|
Package purpose: Hash-guarded MZ and Borland FBOV executable reader, and the command line for scientific-method-engine reports.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 47h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Celestria Launcher: launch AI coding clients with one gateway key and isolated profiles
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 47h | — | — | — |
Unverified Signal
|
— | npm | latest | Diamond Digital Development | — | 🪝 | |
|
Package purpose: The shared design system for Diamond Digital Development's Electron apps: main-process behaviour, a shared preload, page components and CSS, and test helpers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 47h | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Lambda MicroVMs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 47h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Publish a web app to Slop Store in one command. CLI and typed SDK.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 47h | — | — | — |
Unverified Signal
|
— | npm | latest | xkjxziochu | — | 🪝 | |
|
Package purpose: Prompt optimization for DeepSeek Harness: rewrite the input-box draft into a better prompt through dsh's own LLM routes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 48h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for Notion guest accounts, using the unofficial API via token_v2
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 48h | — | — | — |
Unverified Signal
|
— | pypi | 0.2.5 | — | — | 🪝 | |
|
Package purpose: Read a repository's AI contribution policy before you (or your agent) contribute.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 48h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cloudflare Durable Object SQLite World for Eve workflows.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 48h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local-first security and code-quality impact analysis
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 48h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: This package provides an AI-powered synthesis layer on top of `@prasadkumbhar/webscan-core`'s raw `ScanReport`. It uses a Large Language Model (LLM) to rank issues by business impact, generate a non-technical summary, and intelligently perform follow-up s
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 48h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 48h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Ciciu Alexandru-Costinel | — | 🪝 🌐 | |
|
Package purpose: Finds the production bugs that ship green — swallowed webhooks, bypassable rate limits, blocked account deletion. A Zero Point Logic tool.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 48h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI do Geekapps Auth: gera o catálogo tipado de App Connections e publica as ações da sua app. Independe de framework.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 49h | — | — | — |
Unverified Signal
|
— | npm | latest | Fernando Gómez Graciani | — | 🪝 | |
|
Package purpose: Scaffold a web4 site: pages planned per visitor by System One decision models.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 49h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: End-to-end encrypted inference for terminal agents through NATION: verify the enclave, seal the prompt, check the signed receipt, decrypt locally.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 49h | — | — | — |
Unverified Signal
|
— | npm | latest | Rashwright | — | 🪝 | |
|
Package purpose: CLI rs-ui pour Rashwright UI Mobile
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 49h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Sign in, chat, and run agentic coding tasks against your Tempr license from the terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 49h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Tempr CLI binary for win32 arm64.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 49h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Intent records, compiled-intent Bend models and Jev evaluation receipts for pi.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 49h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Scaffold a Deck plugin.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 50h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: PonsMCP SDK + MCP server - autonomous agent payments (MPP) settled in USDG on Robinhood Chain 4663, with pons launch intelligence tools.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||