Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 15 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Anatoly Ben | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: A durable Postgres PlanningStore for @owlmeans/server-planning — cards, the transition log, links and data-defined types and flows as four tables, an inline fold under a per-card advisory lock, and a LISTEN/NOTIFY commit bus.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Sentora primitives for Morpho Vaults (V1 MetaMorpho and V2): ERC-4626 deposits/withdrawals with gate preflight
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: The ledger engine: the lay of the land as of yesterday. A board of figures with their motion, the editor's signed columns, then decked links from the outlets' feeds — the business desk and the sports desk in one engine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Merkurev Sergei | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Find out where your Claude Code tokens go. Runs on your machine, uploads nothing.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: replicate
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: OpenAI provider for Lunar ADK, implemented through the AI SDK.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: SQLite implementations of the foundation run and session storage ports.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | saajith | — | ||
|
Package purpose: Makes free code for discord.js command/bots
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Read-only project discovery and snapshots for pipe-ls
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Keltoi.Hydra.TS
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Structured NGINX HTTP config generation and checks
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Scroll-driven image transitions for Astro.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Discord sign-in: an OAuth 2 client preset for Discord's endpoints, a typed `GET /users/@me`, and a mapping to the shared [`OAuthIdentity`](../oauth-core/README.md) shape.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: A SQLite Web Worker for Zipline's browser cache: SQLDelight's WebWorkerDriver protocol over SQLite Wasm with OPFS storage
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: 声明式表单组件 BaseForm（弹窗/抽屉/内嵌三态）及配套基础组件（BasePopup/BaseDrawer/BaseRadio/BaseSelect/BaseEditor）—— 纯源码分发的 Vue3 + ElementPlus 表单组件库
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Dependency-free, light-DOM custom elements and one stylesheet for rendering Discord chat transcripts in plain HTML.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Framework-agnostic Stripe subscription toolkit (checkout, webhook verification, portal)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Biblioteca de componentes React com identidade visual Celestia
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Efferent composable agent framework, 0.4.0. Bun on Linux.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: The official TypeScript library for the Anthropic Bedrock API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: The official TypeScript library for the Anthropic AWS API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: The official TypeScript library for the Anthropic Foundry API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: The official TypeScript library for Claude Platform on Google Cloud
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: Native binary for Claude Code on darwin-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: Native binary for Claude Code on darwin-x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: Native binary for Claude Code on linux-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: Native binary for Claude Code on linux-arm64-musl
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: Native binary for Claude Code on linux-x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: Native binary for Claude Code on linux-x64-musl
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: Native binary for Claude Code on win32-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: Native binary for Claude Code on win32-x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: SDK for building AI agents with Claude Code's capabilities. Programmatically interact with Claude to build autonomous agents that can understand codebases, edit files, and execute workflows.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: Native CLI binary for @anthropic-ai/claude-agent-sdk on darwin-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: Native CLI binary for @anthropic-ai/claude-agent-sdk on darwin-x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: Native CLI binary for @anthropic-ai/claude-agent-sdk on linux-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: Native CLI binary for @anthropic-ai/claude-agent-sdk on linux-arm64-musl
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: Native CLI binary for @anthropic-ai/claude-agent-sdk on linux-x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: Native CLI binary for @anthropic-ai/claude-agent-sdk on linux-x64-musl
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: Native CLI binary for @anthropic-ai/claude-agent-sdk on win32-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: Native CLI binary for @anthropic-ai/claude-agent-sdk on win32-x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Geordie AI | — | ||
|
Package purpose: OTEL trace viewer for Claude Code sessions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||