Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 1.2.3 | — | — | 🪝 | |
|
Package purpose: 四套 Markdown 协作骨架 + 零依赖工具链：让多个 AI 工具在同一个仓库里不打架
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: An experimental command line interface for Runta
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Show Quest tour packages on your Next.js website with styled cards and detail pages.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Samir | — | 🪝 | |
|
Package purpose: Universal 2D & 2.5D Motion Design, Animation & Video Studio
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A React + Vite chat widget powered by LiveKit, available as a **React component library**, a **script-tag embed**, or an **iframe embed**.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Laeeq Siddique | — | 🪝 | |
|
Package purpose: Name reserved by Cremencing Solutions. The CSPeach CLI is @cspeach/cli: npm i -g @cspeach/cli@latest
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Install and update the Marvelous UI component Pack for coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Intuition memory for Pi: search, notes, and the Steward's settings, backed by Markdown in git
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Peerkith MCP plugin: verify a row, post five fields, cap_preflight before spend/send. Zero deps, stdio.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: One command to get [mise](https://github.com/RamonGebben/mise)'s conventions into a project - an existing one, a fresh `create-next-app`, or an empty repo. It doesn't care which.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Blipbar | — | 🪝 🌐 | |
|
Package purpose: Build extensions for Blipbar, the Mac's notch as a status bar: types, blip builders, the integration kit, and the blipkit CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Chris Cook | — | 🪝 | |
|
Package purpose: Watch GitHub issues and PRs linked in TODO comments
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ARBFEED MCP server: prediction-market data (markets, ticks, whale feed, spreads, pressure) for AI assistants over stdio.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Drives the mattpocock-skills chain unattended: humans plan, the pipeline executes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.5 | weixin_53700778 | — | 🪝 | |
|
Package purpose: 类 Xshell 终端工具：SSH/串口、批量连接、多页签、会话管理、SFTP、免密部署
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | mediapipe@google.com mediapipe@google.com | google.com | 🪝 🌐 | |
|
Package purpose: MediaPipe Retrieval Tasks. See the privacy notice at https://goo.gle/mediapipe-privacy.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for Tendata customs and trade data APIs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: SundhedMCP: local, read-only MCP server that lets your AI read your own sundhed.dk record (medicine card, prescriptions, test results, vaccinations, referrals) after you log in with MitID
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A local task board and handoff protocol for independent AI agent sessions.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Nikolai Liapin | — | 🪝 | |
|
Package purpose: MCP server for TDCv2: agents write a .tdc config, check it and generate test data locally — deterministic, same seed, same bytes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | David Šíma | — | 🪝 | |
|
Package purpose: CLI nastroj pro spravu a optimalizaci Live Linux Mintu
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Agnibha Ray | — | 🪝 🌐 | |
|
Package purpose: Sovereign Bare-Metal Cloud CLI, AI Agent SDK & Model Context Protocol (MCP) Server
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Gateman Contract v1 canonical Node.js client
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Emmanuel Odii | — | 🪝 🌐 | |
|
Package purpose: n8n community node for Featurebase: feedback boards, changelogs, help center, and support conversations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Markdown-native task manager for humans and AI agents (personal fork of Backlog.md).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | JOT contributors | — | 🪝 | |
|
Package purpose: The JOT command-line tools and project generators.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Jev-powered Auto Mode, selectable model router, agent routing, and context filtering for OpenCode 1.18.x.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Hamza | — | 🪝 🌐 | |
|
Package purpose: Indexing, language analysis, Publications, and hybrid retrieval for Satori's local-first code intelligence.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Hamza | — | 🪝 | |
|
Package purpose: Local-first code intelligence for AI coding agents: natural-language + lexical repository search, exact source/symbol navigation, relationships, freshness, and indexing.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Hariraghav.S | hariraghav.s | 🪝 🌐 | |
|
Package purpose: Official Node.js SDK for the ThousandMails client API — transactional email, attachments, statistics, delivery logs and a live event stream.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Peter Ferguson | — | 🪝 | |
|
Package purpose: A library for using (webauthn) passkeys on iOS, Android & web with a single api
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | lidge-ai | — | 🪝 🌐 | |
|
Package purpose: The video CLI for coding agents: capture your real app, generate assets, cut to the beat. Powered by ffmpeg.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Sesv2.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS SES.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Servicediscovery.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Service Quotas.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Service Catalog Appregistry.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Service Catalog.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | thdctrt | — | 🪝 | |
|
Package purpose: Drive Adobe After Effects from the shell or an AI agent: lint + run ExtendScript as one undo step, dump comps, render frames to contact sheets.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Bun-native delivery CLI for project-local agent skills
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK and CLI for AI invoice extraction, OCR, and accounting automation with the Temlavo API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Keyboard picker to list, resume, delete or start Claude Code sessions in the current folder
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Uptimely CLI для мониторинга и автоматизации
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Joe Edelman | — | 🪝 🌐 | |
|
Package purpose: A small Pandoc/Tectonic paper builder with sensible LaTeX defaults.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Muhammad Atif | — | 🪝 | |
|
Package purpose: Evograph CLI — evolution knowledge graph for your repo
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: User-authorized CLI for Hodman
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Official TypeScript SDK for the VoixCall public API (/v1): rates, credits, calls, contacts, numbers and caller ID.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||