Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 2210d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A simple way to create a startup Discord bot.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 2294d | — | — | — |
Unverified Signal
|
— | npm | latest | Tiago Siebler | — | 🪝 🌐 | |
|
Package purpose: Complete & robust Node.js SDK for Bybit's REST APIs and WebSockets, with TypeScript & strong end to end tests.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 2307d | — | — | — |
Unverified Signal
|
— | npm | latest | Max Rohde | — | 🪝 | |
|
Package purpose: Easily deploy Terraform IaC with npm package scripts
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 2314d | — | — | — |
Unverified Signal
|
— | npm | latest | Weaviate | — | 🪝 🌐 | |
|
Package purpose: JS/TS client for Weaviate
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 2602d | — | — | — |
Unverified Signal
|
— | npm | latest | Auth0 | — | 🪝 🌐 | |
|
Package purpose: Auth0 Next.js SDK
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 2743d | — | — | — |
Unverified Signal
|
— | npm | latest | heartyoh | — | 🪝 🌐 | |
|
Package purpose: Server-side module for handling authentication.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 2801d | — | — | — |
Unverified Signal
|
— | npm | latest | Victor Savkin | — | 🪝 | |
|
Package purpose: Smart Monorepos · Fast Builds
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 2941d | — | — | — |
Unverified Signal
|
— | npm | latest | Microsoft | — | 🪝 | |
|
Package purpose: Azure Pipelines Task SDK
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3029d | — | — | — |
Unverified Signal
|
— | npm | latest | Formidable | — | 🪝 | |
|
Package purpose: Interactive Cursor Component for Victory
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3049d | — | — | — |
Unverified Signal
|
— | npm | latest | Brad Zacher | — | 🪝 | |
|
Package purpose: This is the base eslint configuration for @assignar.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3068d | — | — | — |
Unverified Signal
|
— | pypi | 2.1.1 | OneLogin | — | 🪝 | |
|
Package purpose: Assume an AWS Role and get temporary credentials using OneLogin
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 3093d | — | — | — |
Unverified Signal
|
— | pypi | 38.9.1 | — | — | 🪝 | |
|
Package purpose: The Datadog Check Toolkit
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 3093d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A simple way to create a startup Discord bot.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 3460d | — | — | — |
Unverified Signal
|
— | pypi | 5.9.0 | Certbot Project | — | 🪝 | |
|
Package purpose: Google Cloud DNS Authenticator plugin for Certbot
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 3671d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: SharePoint Framework support for building web parts
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 4189d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Styleable select elements built on Tether
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 3h | — | — | — |
Unverified Signal
|
— | pypi | 0.1.100 | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 16h | — | — | — |
Unverified Signal
|
— | pypi | 10.0.0 | security researcher | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 28h | — | — | — |
SUSPICIOUS
|
— | pypi | 2.4.12 | OddMeta Team | — | 🪝 | |
|
Package purpose: XiaoMATE: Your Digital Assistant
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 42h | — | — | — |
Very Risky
|
— | pypi | 0.0.4 | — | — | 🪝 | |
|
Package purpose: Text to Speech with Reader
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 57h | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0a3 | — | — | 🪝 | |
|
Package purpose: Run a HypSwarm research swarm inside a governed-egress pod: a UID-scoped egress floor, an allowlisting TLS-intercepting proxy, vaulted credentials, hourly caps, a hash-chained audit — and an egress check from the swarm's own seat on every start.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 3d | — | — | — |
SUSPICIOUS
|
— | pypi | 0.3.0 | 元意识（重庆）人工智能科技有限公司 | — | 🪝 | |
|
Package purpose: 元意识知识资产引擎：把学说变成可被 AI / Agent 调用的结构化知识
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 3d | — | — | — |
SUSPICIOUS
|
— | pypi | 0.1.0 | 元意识（重庆）人工智能科技有限公司 | — | 🪝 | |
|
Package purpose: 元意识知识资产引擎：把学说变成可被 AI / Agent 调用的结构化知识
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | Forex Robotics Co., Ltd. | — | 🪝 | |
|
Package purpose: Defensive server hardening & patch automation for Ubuntu (plugin-based).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 0.8.1 | genzagents | — | 🪝 | |
|
Package purpose: Is your English rental ready for the landlord database (Register your rental property, Renters' Rights Act)? Region window and deadline, gas/EICR/EPC validity, the £65 fee, the upload checklist. Zero dependencies. Also an MCP server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.2 | genzagents | — | 🪝 | |
|
Package purpose: Can ChatGPT, Claude and Perplexity read and cite your site? Checks robots.txt, edge blocks, llms.txt, schema and JS-only content. Zero dependencies. Also an MCP server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 6d | — | — | — |
SUSPICIOUS
|
— | pypi | 0.1.1 | Verdis contributors | — | 🪝 | |
|
Package purpose: Reproduce-first triage for vulnerability and security reports: run the proof of concept in a sandbox and get a verdict with an evidence bundle.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 9d | — | — | — |
Unverified Signal
|
— | pypi | 4.0.0 | Timur Tursunov | — | 🪝 | |
|
Package purpose: MF Ardon v4.0 — Cloud SDK for Zero-Forgetting AI Memory (port 8001) and 1C/E-Commerce Matrix Optimization (port 8000)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 10d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | — | — | 🪝 | |
|
Package purpose: Клиент для собственного TTS API (Edge TTS / Google Translate TTS)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 11d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.1 | CestnyTR | — | 🪝 | |
|
Package purpose: Python reporter and server agent for VitalWatch Hub — server errors, slow requests, heartbeat
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 11d | — | — | — |
Very Risky
|
— | pypi | 0.1.1 | Luiz | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 12d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | Bold Software, Inc. | — | 🪝 | |
|
Package purpose: Official Python SDK for the exe.dev HTTPS API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 13d | — | — | — |
Unverified Signal
|
— | pypi | 0.9.0 | Gur Yaari | — | 🪝 | |
|
Package purpose: Probability models of biological sequences such as T cell receptor CDR3s: sequence probabilities, sampling depth, publicness and repertoire comparison, summed over every possible sequence without simulation
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 13d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.1 | — | — | 🪝 | |
|
Package purpose: moth: a tiny local companion chatbot that thinks it's a moth, and keeps you company while your coding agent works
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 13d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | — | — | 🪝 | |
|
Package purpose: MCP server for the Pastebin API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 14d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | digitalblack210 | — | 🪝 | |
|
Package purpose: Offline push-to-talk dictation for Windows, powered by NVIDIA Parakeet.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 14d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.2 | Abdulrahman Elassal | — | 🪝 | |
|
Package purpose: Fix text typed on the wrong keyboard layout (Arabic <-> English) with one hotkey.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 16d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.3 | Kestrel Data | — | 🪝 | |
|
Package purpose: Kestrel Data on-demand download SDK
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.1 | Nouhan Kourouma | — | 🪝 | |
|
Package purpose: MCP server for the LWS (lws.fr) API: manage domains, DNS zones, hosting and your account from any AI assistant.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 19d | — | — | — |
Very Risky
|
— | pypi | 0.0.2 | DBM | — | 🪝 | |
|
Package purpose: Blended Command Line Application
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 19d | — | — | — |
🐛 Potential Cross-Ecosystem Worm
Very Risky
|
— | pypi | 0.1.0.dev1 | — | — | 🪝 🐛 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 19d | — | — | — |
🐛 Potential Cross-Ecosystem Worm
Very Risky
|
— | pypi | 0.1.0 | — | — | 🪝 🐛 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 21d | — | — | — |
Unverified Signal
|
— | pypi | 0.22.14 | ShadeOne | — | 🪝 | |
|
Package purpose: O runtime dos robôs da ShadeOne: ledger por chave de negócio, recuperação, relatório e o protocolo com o executor.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 23d | — | — | — |
Unverified Signal
|
— | pypi | 6.0.0 | — | — | 🪝 | |
|
Package purpose: ESPN NBA stats: resumable fetch -> compact Parquet -> DuckDB warehouse -> local-LLM natural-language query
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 23d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.2 | — | — | 🪝 | |
|
Package purpose: Fail-closed handoff of closed SQLite chat databases between Linux machines
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 24d | — | — | — |
SUSPICIOUS
|
— | pypi | 0.3.0 | Neoma Physical AI | — | 🪝 | |
|
Package purpose: NEOMA P-CAM: Sub-millisecond In-Materio Physical AI Client SDK
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 24d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.9 | — | — | 🪝 | |
|
Package purpose: Phocinae command approval gate for AI harnesses (L0 whitelist/blacklist)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 25d | — | — | — |
Unverified Signal
|
— | npm | latest | better-compute contributors | — | 🪝 🌐 | |
|
Package purpose: Testing kit for better-compute: fixtures, simulated daemons, sim clock and conformance runners.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 26d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Studio native CSS Lightpanda binary
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 26d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Seithr v6 Testing - Sandboxed test fixtures, platform mocks, and Chrome CDP runner
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||