Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MiAW artifact-backed workflow CLI and local server
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Prompt Agency | — | 🪝 🌐 | |
|
Package purpose: On-device wake word and mic gate for React Native voice agents. Any phrase, no training, no API key.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Anton Danilov | — | 🪝 | |
|
Package purpose: One API for agentic coding CLIs — Claude Code, Codex and Antigravity: status checks, one-shot asks, streamed agent runs with steering, sessions, models and MCP.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 邮件待办：读取 dsh-email 的邮件内容，用 LLM 把邮件里的工作事项提取成可管理的待办清单，并在 Web 客户端右侧 Sidebar 提供一个「待办」tab。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Reverse-engineering workbench for DeepSeek Harness: bridges IDA Pro (idalib headless or IDA GUI RPC) into the harness as mcp__ida__* tools, with an environment self-check. / 逆向分析工作台：把本机 IDA Pro 桥接进 DSH（idalib 无头或 IDA GUI RPC），工具以 mcp__ida__* 注册，自带环境自检。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 独立的 TypeScript 报表引擎：模板分页、DOM/Canvas/PDF/Excel 输出与 Vue 3 预览组件
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Installable mail plugin for Doca with IMAP/SMTP, Web UI, files integration, permissions, and AI tools.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | John | — | 🪝 | |
|
Package purpose: Interactive generator for polyglot Git-submodule microservice monorepos
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: workbuddy-switch platform binary (win32-x64)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run your Pasilobus Shopify apps from the terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | 135andres | — | 🪝 🌐 | |
|
Package purpose: An agent skill for brutalist web design: recreate brutalist interfaces from reference images, or take inspiration from them.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Task-based plugin plans, disposable runs and installation into your current DeepSeek Harness environment
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | jpdutoit | — | 🪝 | |
|
Package purpose: Modular synth modules for plain Web Audio: oscillators, filters, envelopes, effects and drum kits as native-feeling nodes, with AudioWorklet DSP inlined and tree-shakeable.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: JavaScript/TypeScript SDK for DPAppRegistry
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Xyne | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK for the Xyne Spaces API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.1 | hao li | — | 🪝 | |
|
Package purpose: Hand off a coding-agent session to the next one: reads Claude Code and Codex CLI transcripts, generates a handover doc
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | seocontentmachine.com | seocontentmachine.com | 🪝 🌐 | |
|
Package purpose: MCP server for SEO Content Machine: run its scraping, crawling, Google Maps and SEO Workspace tasks from Claude Code, Codex or any MCP client.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Terminal client for DeepSeek Harness. Installs the Windows binary for your architecture (x64 or arm64) automatically.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Claude-compatible subagent workflow for Pi
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Private file sharing for agents: upload, share by link, expire.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for the OAISO review app
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Antz | — | 🪝 🌐 | |
|
Package purpose: FileKit server SDK — upload, download, fetch and signed URLs for S3, Azure Blob, local/mounted disk, remote file servers, SFTP and FTP, with multiple providers at once. Stateless: no database.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Node.js bindings for the example KMS and Vault in [`plugins/askar`](../..), built as a native addon with [NAPI-RS](https://napi.rs).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Detect OpenAI shutdown risks, generate migration plans, and safely fix unambiguous model-ID deprecations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | crisweb1994 | — | 🪝 🌐 | |
|
Package purpose: 搜索故障转移网关 MCP：聚合博查/Tavily/Brave/Exa/DuckDuckGo 默认链，可选启用智谱/百度千帆/Serper (Search failover gateway MCP: default chain of Bocha/Tavily/Brave/Exa/DuckDuckGo with opt-in Zhipu/Qianfan/Serper and automatic failover)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MM3, make and model for coding agents: MAK³ uses what is proven, MDL³ learns what is missing, with compact yes/no checklists, a calibrated consensus, and a log that learns where agents go wrong.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH desktop plugin: surface and copy the Web GUI launch-token URL (loopback + LAN) so the desktop app's built-in Web server can be opened from another device.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 云启浏览器命令行工具（yq）：管理店铺环境、启动/关闭浏览器、MCP Server，供 OpenClaw/Codex 等 Agent 调用
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Chamindu Ransika | — | 🪝 | |
|
Package purpose: Universal WhatsApp FastStart MP4 Video & Audio Optimizer for Baileys & WhatsApp Web bots by Chamindu Ransika
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | TechSpy | — | 🪝 🌐 | |
|
Package purpose: Detect any website's tech stack from the terminal or a coding agent. CLI for the TechSpy API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Discover what your CLI actually does. Catch behavioral changes your tests missed.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | vandoor2 | — | 🪝 | |
|
Package purpose: MinerU document parsing MCP server — PDF / Office / image / URL to Markdown, via local MinerU client + cloud API hybrid.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: In-process TypeScript SDK for tokn routing and provider integrations
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Per-model reasoning efforts and input modalities for DeepSeek Harness — one settings section, no YAML.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Djain912 | — | 🪝 | |
|
Package purpose: Copy buttons after every terminal command: copy the command, its output, or both in one click. PowerShell, bash, zsh, fish.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Com2uS Platform | — | 🪝 | |
|
Package purpose: Axyl TCB Cloud Function 프로젝트 스캐폴딩 CLI (npm create @com2usplatform/hiveaxyl-tcbconnector-template)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Advisory, per-concern AI code review for pull requests, driven by Markdown check files.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | jd962 | — | 🪝 🌐 | |
|
Package purpose: Audio/video model input for DeepSeek Harness: injects per-model audio/video switches into the official Models settings provider cards and registers OpenAI-compatible provider routes whose adapter turns attached media files into input_audio / video_url wir
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | ajithkumar.a | ajithkumar.a | 🪝 🌐 | |
|
Package purpose: Report Node.js exceptions to BugTrack
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Bridge between Telegram and a local OpenCode server
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: pi coding-agent extension: process-level sandbox (bwrap / landlock / seatbelt) — workspace writable, everything else readable, fail-closed
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Runtime, UI, build and ESLint capabilities for Douyin Taro templates.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Browser client for auth-una: PKCE sign-in and legacy provider migration.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Claude implements. Codex reviews. You approve the plan. Local coordination with your own accounts.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Eva.js contributors | eva.js | 🪝 🌐 | |
|
Package purpose: PixiJS 8 3D render-pipe extension for Eva.js mixed rendering
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Composer prompt-polisher button plugin for DeepSeek Harness (dsh)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||