Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Henry Jewkes | — | 🪝 | |
|
Package purpose: Start and resume agent-chat agents through the agent-chat CLI, with the brief kept out of argv
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: AI Security and Legal Risk CLI Scanner
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agent Workbench 开发机连接器：远端 Agent 执行、会话同步与 Git 分支管理
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Devin subscriptions (the devin CLI's account) in OpenCode and magpie
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Kiro subscriptions (Free, Pro, Pro+, Power) in OpenCode and magpie
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | vrajraj | — | 🪝 | |
|
Package purpose: Keep AI instruction files (CLAUDE.md, AGENTS.md) small as a project grows: a budget-checked library of rulebook, reading desk, path-scoped shelves and partitioned books. CLI, Claude Code plugin and MCP server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Browser-compatible rules evaluator for Blueprint dependency graph rulesets
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | keyon | — | 🪝 | |
|
Package purpose: Package a react-native-flux-desktop app into a self-contained Windows .exe (Go launcher + go:embed payload). Install as a devDependency, add `output`/`main` to app.json, then run `flux-pack`.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | x12i | — | 🪝 🌐 | |
|
Package purpose: x12i Backup Agent: MongoDB full/incremental backups to Cloudflare R2 with retention, restores, transfers to the @x12i hybrid stack and cost forecasts. Every capability exposed as SDK, CLI, HTTP API and MCP server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Lajat Manekar | — | 🪝 🌐 | |
|
Package purpose: Record and replay AI agent tool calls with Khonsu, the time-travel debugger for AI agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DeepSeek Harness (DSH) plugin: one quiet native card above the composer for every subscription you use — OpenCode GO, DeepSeek, GLM, Kimi, Grok, MiMo, OpenRouter, SiliconFlow, Qwen Token Plan, Command Code, plus any custom JSON endpoint (kind: custom2 wit
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH character companion plugin: Hu Tao & Furina desktop pets plus the character theme (wallpaper, colors, appearance) in one installable package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: SDK for Circle Borrow Kit operations
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Provider for BorrowKit's Circle-hosted lending backend
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | OBINexus Computing — Nnamdi Michael Okpala | — | 🪝 | |
|
Package purpose: Release tooling for an OBIX workspace: versions, TypeScript, export maps, dependency graph, ghost/empty packages and tarball contents, checked mechanically. Development use only; it never publishes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for 港嘢 Canto-Gen — manage your own voices and generate Cantonese TTS
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Engine for animated explainers and demo videos: scene components, render targets, headless render and PowerPoint decks.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Deprecated compatibility package; use @gsb-core/react-auth
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Publish apps to Shareabl from your terminal or your AI agent. See an app, make yours, it runs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Angel Labrada Massó | — | 🪝 🌐 | |
|
Package purpose: Revalidate tagged fetch() calls by tag in the Next.js App Router, with a dev panel that lists every cached fetch and query
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | tikmark | — | 🪝 🌐 | |
|
Package purpose: One video per product for Medusa v2, stored via the Medusa File Module, with a native admin widget.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 一只随 DeepSeek Harness 工作状态变化的蓝色大肥鱼桌宠
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | ajithkumar.a | ajithkumar.a | 🪝 🌐 | |
|
Package purpose: Report React exceptions to BugTrack (AppRadar)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: react-native-pell-rich-editor for HarmonyOS
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | ellyseum | — | 🪝 🌐 | |
|
Package purpose: Node/TypeScript client for Adobe Firefly Services' audio/video (DGR) API — promises that resolve with the finished asset, native preset/.epr authoring, redacted logging, and an npx CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | zhanglei | — | 🪝 | |
|
Package purpose: ZTools / Ruck 插件 - 查找并解除被占用文件，支持解锁、解锁并删除/重命名/移动、批量处理
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Meta WhatsApp Business MCP Server in Node.js
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: One shared React for runtime-loaded plugin UIs: a Vite plugin that emits the host import map, the plugin-side externals config, and a browser preflight.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: EditorBrain editorial knowledge, portable workspaces and skills for AI video agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Prisma AIRS Harness: a local coding agent using your Prisma AIRS AI Gateway.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Anton Zemlyansky | — | 🪝 🌐 | |
|
Package purpose: Symbolic regression, classification, and formula features backed by the wlearn C11 core
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Deploy projects to Deployka from your terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Self-contained terminal CLI to onboard a tenant to a deployed OpenFlows instance
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: NethVoice chat island: a stand-alone chat widget (XMPP) embeddable in nethvoice-cti, NethLink and any web app
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | EightDoor | — | 🪝 🌐 | |
|
Package purpose: Rehydra Pi extension — anonymizes secrets in Pi conversations via the ExtensionAPI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Scaffold a product from the YSK Kit tree.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Booqable | — | 🪝 🌐 | |
|
Package purpose: JavaScript/TypeScript toolkit for the Booqable API. Zero-dependency port of the booqable.rb gem — works in Node.js, browsers, and edge runtimes such as Cloudflare Workers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | JustOnAir | — | 🪝 🌐 | |
|
Package purpose: Official Node.js and TypeScript SDK for the JustOnAir live video API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | workwithchris | — | 🪝 | |
|
Package purpose: Scaffold an enterprise-ready Next.js 16 production starter template with React 19, Tailwind CSS v4, Base UI, and Zod
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Dr. Constantino Msigwa, Intelfric Technology Limited | — | 🪝 | |
|
Package purpose: NestLaravel — the Nx + Laravel microservice framework with Kafka. Create, generate, develop, build and upgrade projects.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | PowerSync | — | 🪝 🌐 | |
|
Package purpose: Host-neutral Vue UI for PowerSync live-attach diagnostics, driven by the Diagnostics Port.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Offline-friendly ML lab code reference (Exp 1-5): data exploration, cleaning, feature engineering, regression, decision trees. Every way to do each task, fully commented, no theory.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||