Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 15 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: 全景图标签和标注的共享视觉组件。宿主负责坐标投影、数据读取，以及通过 `onClick` 绑定业务行为。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: LangGraph.js adapter for the canonical Yieldpoint CLI verifier
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: OpenCode plugin that loads GitHub Copilot custom instruction files
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Oguzhan Uysal | — | ||
|
Package purpose: NestJS Redis module with lifecycle, health, cache helpers, and rate limiting.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Ivan Siianytsia | — | ||
|
Package purpose: Shared Google OAuth userinfo lookup with typed output and provider error mapping. Consumers own the tool key, consent list, and OAuth-only auth-method restriction. `getCurrentUserRecipe` requires both `userinfo.email` and `userinfo.profile`. Use `createGo
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Opaque cursor encoding and in-memory cursor pagination for JavaScript APIs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | MikroTik2 | — | ||
|
Package purpose: NestJS module for Cloudflare Turnstile CAPTCHA verification.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Cloudflare Workers middleware, KV token caching, edge tenant routing, and local JWKS validation for Serafort IAM.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Alias of @mikro-orm/mongodb, republished under the @mikro-orm-graaljs scope.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Alias of @mikro-orm/migrations-mongodb, republished under the @mikro-orm-graaljs scope.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Alias of @mikro-orm/postgresql, republished under the @mikro-orm-graaljs scope.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Alias of @mikro-orm/sqlite, republished under the @mikro-orm-graaljs scope.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Postgres-backed resources for @owlmeans/marketing-consent — the state and log tables of a generated target project, compiled from the shared AJV schema in @owlmeans/server-marketing-consent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Mongo storage for @owlmeans/server-marketing-consent's two resources (marketing-consent-state, marketing-consent-log) — schemas imported, never duplicated. For the platform; generated target projects use @owlmeans/marketing-consent-postgres.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Hydra routing, unified BYOK inference, streaming, usage and prepaid billing client
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: OIDC trusted publishing setup package for @lunora/cloudflare-access
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: 语义包：combos.yaml 唯一真相源，36 组语义条目
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Denis Ratushniak | — | ||
|
Package purpose: PostgreSQL driver for @smuzi/database
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Utility to simplify integration with Open Telemetry
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Reactive atom primitive for the Quark framework
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Voltro UG | — | ||
|
Package purpose: SQLite dialect adapter for Voltro's cross-dialect DataStore (single-process; in-process change events).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Voltro UG | — | ||
|
Package purpose: Deep Sentry integration — error tracking correlated to distributed traces, breadcrumbs from the framework log sink, controlled browser performance spans, and server traces routed from the framework's OTel tracer via @sentry/node in OTel-consumer mode.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Cleartrip | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Pegasystems | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Pegasystems | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Pegasystems | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Pegasystems | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Pegasystems | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||