Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Floating desktop to-do list with importance flags and local data storage
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | Hugo-huy2004 | — | 🪝 | |
|
Package purpose: Express modules that document themselves: drop a folder to mount an API, one-line CRUD, generated docs and OpenAPI, endpoint types for hugo-api, and a test runner that finds its own tests
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | 4OfficeAutomation GmbH | — | 🪝 🌐 | |
|
Package purpose: Transfer all or selected Twenty People to mailfino using the existing CRM import profile.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 59h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Chinese writing workbench for DeepSeek Harness Web, with AI drafting, revision review, source materials and version history.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 蛋白质结构预测与设计插件：序列设计（ProteinMPNN/SolubleMPNN/LigandMPNN）、结构预测（ESMFold）、复合物界面筛选、序列理化打分与多样性聚类——零手动自举（本地 CPU/GPU 自适应），供 dsh-bio-genie 消费 | Protein structure prediction & design toolkit for dsh (sequence design, folding, interface screening)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 60h | — | — | — |
Unverified Signal
|
— | npm | latest | Parth Jadhav | — | 🪝 🌐 | |
|
Package purpose: Interactive 3D badges from any SVG, in metal, enamel, glitter, pearl and more, for React, Vue, Web Components and JavaScript, with a web Studio and image export CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 61h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: An evidence-aware research CLI built on Pi with Python MCP tools
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 61h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: This project was bootstrapped with
[Create React App](https://github.com/facebook/create-react-app).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 61h | — | — | — |
Unverified Signal
|
— | npm | latest | mamoru_kun | — | 🪝 🌐 | |
|
Package purpose: Universal Slip Verification & PromptPay SDK for Discord Bots and Web Apps
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 61h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Command-line client for the BloomX administration API: control a BloomX instance (users, quotas, audit, security, branding, spam, extensions, import/export) from your terminal over HTTPS.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 61h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Drop or paste images, PDFs, office docs, zips, videos and audio into the DSH composer as workspace file paths instead of model attachments — lets a text-only model agent read them via vision tools.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 62h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Maxwell International | — | 🪝 🌐 | |
|
Package purpose: Maxwell Directory (x402 + MCP): local providers worldwide, plus travel and public data. Free search; paid answers via x402, from your own wallet within budgets you set.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 62h | — | — | — |
Unverified Signal
|
— | npm | latest | copylee | — | 🪝 🌐 | |
|
Package purpose: DeepSeek Harness 生图插件：侧边栏全局画廊（Cherry Studio 式绘画页）、对话生图/编辑、可自定义 Provider 端点与代理。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 62h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Headless browser SDK for Supportwave voice agents: bring your own UI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 63h | — | — | — |
Unverified Signal
|
— | npm | latest | Johnny Wu | — | 🪝 🌐 | |
|
Package purpose: Image generation tool for the pi coding agent (Codex / Grok / OpenAI Images)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 63h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agnes connect bundle for the Harness Web UI: Token Plan quota panel (account-wide quota windows, cumulative usage, console sign-in) plus optional provider registration that brings Agnes models into DSH conversation, with host-side rate-limit self-healing.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 63h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Authentication package for all types of login on DH applications
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 63h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Use DG Scout from your terminal or your agent: read the people inbox, look up a person, act on one person at a time. Installs a skill; changes nothing about your agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 64h | — | — | — |
Unverified Signal
|
— | npm | latest | mdestafadilah | — | 🪝 🌐 | |
|
Package purpose: SDK multi-gateway WhatsApp untuk JavaScript/TypeScript — satu antarmuka untuk Fonnte, OpenWA, ApiMe, Evolution API, Wuzapi, Wwebjs, dan Waxum. Porting dari paket PHP mdestafadilah/sikuwa, tanpa dependensi runtime.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 64h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Kagemi: mint one of 2,066 public seats (2,222 portraits) on Robinhood Chain with your agent. Use your burner wallet, or let your agent keep its own key. CLI (guide/check/key/mint/whitelist/address) + MCP stdio server. The mint opens 24 h after the 500th w
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 64h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 64h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Batch-download public media from Instagram, TikTok, Pinterest and Twitter/X with your DeepInsta plan
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 64h | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | agentsbridge contributors | — | 🪝 | |
|
Package purpose: Bridge AGENTS.md to every AI coding tool's rules file - one source of truth for Claude Code, Copilot, Cursor, Windsurf, Cline, Aider, Roo Code, Kilo Code, Junie, and Amazon Q.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 64h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Imagera Code: a coding agent for your terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 64h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Aviv Keller | — | 🪝 🌐 | |
|
Package purpose: MCP server exposing University of Maryland data
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 65h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Typed client, React hooks and headless components for the SuiteOp Storefront API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 65h | — | — | — |
Unverified Signal
|
— | npm | latest | notkainoa | — | 🪝 🌐 | |
|
Package purpose: 5c — agent-first CLI for Claremont Colleges (5C) course search.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 65h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: GitHub Copilot Agent Skill: AI Data Scientist over Jupyter MCP (npm bootstrap for the Python implementation)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 65h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Chord Computer component payload
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 65h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI for Plugipay — a payments infrastructure (part of the Forjio commerce suite).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 65h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Deterministic procedural 2D asset generation for Expo + react-native-skia — Python CLI wrapper
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 66h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Doca developer toolbox — private, browser-local utilities
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 66h | — | — | — |
Unverified Signal
|
— | npm | latest | Adam Timmerberg | — | 🪝 | |
|
Package purpose: The last command before you launch. A free, local, cross-agent security gate for AI-built apps: prevents leaked secrets while you build, blocks them at commit time, and gives you a plain-English safe-to-ship verdict.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 66h | — | — | — |
Unverified Signal
|
— | pypi | 1.3.0 | Jayakrishna Ichapurapu | — | 🪝 | |
|
Package purpose: Auto-generate AI agent context files. Keep AGENTS.md, CLAUDE.md, .cursorrules, and .agentic-config.json in sync with your codebase.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 66h | — | — | — |
Unverified Signal
|
— | npm | latest | Alex | — | 🪝 🌐 | |
|
Package purpose: Local dashboard for Claude Code usage: tokens, activity, models, tools, agents and projects
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 67h | — | — | — |
Unverified Signal
|
— | npm | latest | GEX Monitor | — | 🪝 | |
|
Package purpose: One-command GEX Monitor Skill + Remote MCP installer for AI clients
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 67h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Famulor | — | 🪝 🌐 | |
|
Package purpose: Official command-line interface for the Famulor voice AI platform: every REST API operation as a command.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 67h | — | — | — |
Unverified Signal
|
— | npm | latest | Jake Rains | — | 🪝 🌐 | |
|
Package purpose: Open any SCORM package in your browser, click through it like an LMS would, and leave pinned notes you can hand to a teammate or an AI agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 67h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Wave orchestration tooling: wave events, plan verification and review, status, gate and project health
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 67h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | iamdelrio | — | 🪝 | |
|
Package purpose: Harness and engine for AI-built browser games
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 68h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: hacli, a CLI da Hospede Aqui: deploy, logs, variáveis e previews dos seus apps pelo terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 68h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: One skills library, every agent harness, every project on the machine. Declares third-party sources in skills-sync.json, keeps them at upstream's tip (pins excepted) with snapshots and skills-lock.json, links every skill into Claude Code, Codex, Goose and
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 68h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Countersignatory Ltd | — | 🪝 🌐 | |
|
Package purpose: The going rate for a human minute. A dependency-free client for the Countersignatory quote API and Spot Index.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 68h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | StoreShots | — | 🪝 🌐 | |
|
Package purpose: MCP server for StoreShots: turn raw app screenshots into App Store & Google Play marketing screenshots via the hosted StoreShots API (no Chrome needed).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 68h | — | — | — |
Unverified Signal
|
— | npm | latest | obov | — | 🪝 | |
|
Package purpose: Pluggable content-production workspace: core record store, builtin modules, shared agent skills and the cg CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 68h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 68h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Lifecycle and interruption simulator for React Native: see what your app does when people leave it and come back. Background, interruptions, memory warnings, deep links, appearance, battery and relaunch.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 68h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Location override for React Native: pin the app to any place, play routes with speed and heading, trigger geofences and test signal loss. Works with expo-location, @react-native-community/geolocation and react-native-geolocation-service.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 68h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Permission state overrides for React Native: make your app see not asked, allowed, limited, denied or blocked for location, camera, notifications and more, without touching device settings. Works with Expo modules, PermissionsAndroid and react-native-perm
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 68h | — | — | — |
Unverified Signal
|
— | npm | latest | Nik S. | — | 🪝 | |
|
Package purpose: macOS power-gating service — starts and stops local apps on AC/battery transitions, asking first via an actionable notification.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||