Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 50h | — | — | — |
Unverified Signal
|
— | npm | latest | orxfun | — | 🪝 | |
|
Package purpose: Build and integrate orx-parallel Rust->WASM bindings with Vite and worker runtimes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 50h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Agent fleet: run-team controller, merge bot, PR reviewer, and the ticket pipeline they share
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 50h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Keyless MCP server for Payd on Robinhood Chain: read launches, baskets and holder shares, and prepare unsigned transactions for your own wallet.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 50h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Drop your token's Payd payout onto your site: one custom element, or a headless API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 51h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Portable Taobao search-result product-form research skill and CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 52h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Astro Content Layer loaders (sermons, transcripts, series) over the Shepherd's Message delivery API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 52h | — | — | — |
Unverified Signal
|
— | npm | latest | Wisdom Ekpot | — | 🪝 | |
|
Package purpose: Build-time annotation plugins for the Inline Edit Tool — stamp source locations onto the DOM so rendered text can be traced back to the file it came from (React, Vue, Svelte, Angular)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 52h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A coding agent that runs inside Termux on Android. It writes Android apps, packs them into signed APKs on the phone, installs and launches them, then fixes what broke.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 52h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Redis-backed challenge store and rate limiter for OORABLE CAPTCHA, for multi-instance deployments. Bring your own Redis client (ioredis, node-redis, etc.) -- none is bundled.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 53h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Alex Gavrilescu | — | 🪝 | |
|
Package purpose: <p align="center"> <img src="./.github/backlog-logo.png" alt="Backlog.md logo" width="120"> </p>
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 53h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Tapicker local and remote command bridge
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 53h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Sla language toolchain (global sla command), powered by the SA compiler
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 53h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Model-facing agentry tools for DeepSeek Harness
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 53h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | OpenMarkets | — | 🪝 🌐 | |
|
Package purpose: The bet slip, solved: every venue's rules, fees and balances checked before the tap — headless core, React hooks, and a themeable styled sheet for apps built on the OpenMarkets API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 53h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | ORF | — | 🪝 🌐 | |
|
Package purpose: Official JavaScript/TypeScript SDK for the Mayia AI API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 53h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: [](https://github.com/claytonfraga/business-semantic-harness/actions/workflows/ci.yml) [.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 53h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 53h | — | — | — |
Unverified Signal
|
— | npm | latest | Allan Nava | — | 🪝 | |
|
Package purpose: A pre-push guard against publishing internal detail: work email addresses in commit metadata and trailers, private host, service and client names, home-directory paths and file URLs — checked before the push, because a commit on a forge stays reachable by
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 53h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Wojciech Maj | — | 🪝 | |
|
Package purpose: Run React Native unit and component tests with Vitest
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 53h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TopPPT HTML：正式商务演示双交付。单文件 HTML + 版式保真可编辑 PPTX；MD3 密度克制；布局骨架 P1–P12 + 弹性版式（bento/timeline/2col）；内置 48 原创线性图标；模型单写；strict 0/0 交付。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 53h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Index Network HTTP client: seats, principal inbox, and the user event stream.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 53h | — | — | — |
Unverified Signal
|
— | npm | latest | ChristopherVR | — | 🪝 🌐 | |
|
Package purpose: Shared OOXML logic for the Word, PowerPoint and Excel viewers: everything except the UI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 53h | — | — | — |
Unverified Signal
|
— | npm | latest | kukemc | — | 🪝 🌐 | |
|
Package purpose: Local AI coding CLI for Gandi 3 projects
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 54h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Dispatch repo-local .ea/issues to coding agents on any Paseo daemon
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 54h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Set up, add, and update the Treadle design system in a Next.js app.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 54h | — | — | — |
Unverified Signal
|
— | npm | latest | Artur Leao | — | 🪝 | |
|
Package purpose: ICED (Intent, Context, Expectations, Done): host-neutral core library for intent-driven development with independent verification
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 54h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 54h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 54h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A @torpor/build adapter for building desktop apps with Electron
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 54h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Convert .docx files to Typst markup format
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 54h | — | — | — |
Unverified Signal
|
— | npm | latest | Arina | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK for the Arina Document Intelligence API: schema-driven extraction with spatial citations, layout parsing, and reusable extractors.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 55h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: aria-code CLI binary for win32-x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 55h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Server-side Drivecord API v2 client (personal access token) with end-to-end encryption.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 55h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Read-only async process snapshots with independent caller deadlines and coalesced native scans
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | Rahul Arya | — | 🪝 🌐 | |
|
Package purpose: Antigravity / Cloud Code Assist provider for Pi Coding Agent 1.0 — chat, web search, url context, and image models
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The environment an agent works in: what it can see, and what it can do.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | Sajjad Karimi | — | 🪝 | |
|
Package purpose: Make your media web-ready: responsive AVIF/WebP images and MP4 video with ready-to-paste markup and React/Vue components — plus a browser module that shrinks photos before upload.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Codex THS account queries, holdings-based strategy plans and confirmed batch trading CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 56h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Gathers codebase changes and copies a perfectly formatted prompt to your clipboard to paste into ChatGPT.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 57h | — | — | — |
Unverified Signal
|
— | npm | latest | Kamil Mysliwiec | — | 🪝 🌐 | |
|
Package purpose: Nest - modern, fast, powerful node.js web framework (@webhooks)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 57h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Fortify your vibe-coded app. Scan AI-built apps for security, test, deployment and data-safety gaps.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 57h | — | — | — |
Unverified Signal
|
— | npm | latest | Ryuu | — | 🪝 | |
|
Package purpose: An opinionated code formatter for TypeScript.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 57h | — | — | — |
Unverified Signal
|
— | npm | latest | Vizion Digital Agency | — | 🪝 | |
|
Package purpose: Nieuwe projecten van Vizion Digital Agency: npm create vizion-digital-agency
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 58h | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | Samir Sawarkar | — | 🪝 | |
|
Package purpose: A local integrity monitor for stdio MCP servers
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 58h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Hyreal FDE 企业工作台 dsh 插件——在 DeepSeek Harness 内提供结构化工作台界面与平台能力；数据经 MCP（工具）与同源代理（页面）取自 ai-fde 平台
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 58h | — | — | — |
Unverified Signal
|
— | npm | latest | sagar | — | 🪝 | |
|
Package purpose: A tactile, stationery-inspired component system for React + Tailwind CSS v4. Copy the source (shadcn-style) or import compiled modules.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||