Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 280d | — | — | — |
Unverified Signal
|
— | npm | latest | Junji Takashima | — | 🪝 🌐 | |
|
Package purpose: MCP server for xAI Grok Imagine Image API - Generate and edit images using grok-imagine-image model
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 280d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Theia - GitHub Copilot Integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 297d | — | — | — |
Unverified Signal
|
— | npm | latest | Zed Industries | — | 🪝 🌐 | |
|
Package purpose: An ACP-compatible coding agent powered by the Claude Agent SDK (TypeScript)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 299d | — | — | — |
Unverified Signal
|
— | npm | latest | LiveKit | — | 🪝 🌐 | |
|
Package purpose: xAI plugin for LiveKit Node Agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 304d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 316d | — | — | — |
Unverified Signal
|
— | npm | latest | Daniel Rosehill | — | 🪝 🌐 | |
|
Package purpose: MCP server for audio transcription using Gemini models via OpenRouter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 324d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Airline Digitalization | — | 🪝 | |
|
Package purpose: A package that adapts requests between Azure Functions and React Router
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 324d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Edifice | — | 🪝 | |
|
Package purpose: Abstract base for Edifice client SDKs (no application-specific logic)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 325d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.13 | — | — | 🪝 | |
|
Package purpose: Plan, generate, compose, and edit images and video with Gemini image models, Veo 3.1, and Gemini Omni, with a cost estimate before every call and an optional Gemini 4 Argon director that checks each take against your notes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 329d | — | — | — |
Unverified Signal
|
— | npm | latest | Adam Jones | — | 🪝 🌐 | |
|
Package purpose: MCP server for Google Drive - list, search, upload, download, and manage files and folders
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 336d | — | — | — |
Unverified Signal
|
— | npm | latest | Tanner Linsley | — | 🪝 🌐 | |
|
Package purpose: OpenAI adapter for TanStack AI chat, tools, images, video, speech, transcription, realtime, and structured outputs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 336d | — | — | — |
Unverified Signal
|
— | npm | latest | Tanner Linsley | — | 🪝 🌐 | |
|
Package purpose: Google Gemini adapter for TanStack AI chat, images, speech, audio generation, and structured outputs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 349d | — | — | — |
Unverified Signal
|
— | npm | latest | Eugene Chybisov | — | 🪝 🌐 | |
|
Package purpose: LI.FI Ethereum SDK Provider for Any-to-Any Cross-Chain-Swap
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 359d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Circle Wallets blockchain adapter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 370d | — | — | — |
Unverified Signal
|
— | pypi | 0.26.0 | Justyn Shull | — | 🪝 | |
|
Package purpose: Micro-agent runner for task automation using markdown definitions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 396d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: [](https://opensource.org/licenses/MIT)
[](https://aws.amazon.com/cdk/)
[ - [Embedded Wallets](#embedded-wallets) - [Quick Start](#quick-start) - [Installation](#installation) - [npm](#npm) - [yarn](#yarn) - [pnpm](#pnpm) - [bun](#bun) - [**Integr
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 843d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 🔐 Telegram login widget integration for Nuxt
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 845d | — | — | — |
Unverified Signal
|
— | pypi | 0.0.23 | — | — | 🪝 | |
|
Package purpose: The panopticas file type and CLI tool.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 867d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Dynamic Labs, Inc. | — | 🪝 🌐 | |
|
Package purpose: A React SDK for implementing wallet web3 authentication and authorization to your website.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 889d | — | — | — |
Unverified Signal
|
— | npm | latest | Tiago Siebler | — | 🪝 🌐 | |
|
Package purpose: Complete Node.js & JavaScript SDK for Coinbase's Advanced Trade, App, Exchange, International, Prime & Commerce REST APIs and WebSockets, with TypeScript & strong end to end tests.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 898d | — | — | — |
Unverified Signal
|
— | npm | latest | LiveKit | — | 🪝 🌐 | |
|
Package purpose: ElevenLabs plugin for LiveKit Node Agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 944d | — | — | — |
Unverified Signal
|
— | pypi | 1.9.1 | — | — | 🪝 | |
|
Package purpose: An integration package connecting AWS and LangChain
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 948d | — | — | — |
SUSPICIOUS
|
— | pypi | 1.14.0.dev17 | — | — | 🪝 | |
|
Package purpose: A Python package with a built-in web application
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 981d | — | — | — |
Unverified Signal
|
— | npm | latest | MemberJunction.com | memberjunction.com | 🪝 🌐 | |
|
Package purpose: MemberJunction Wrapper for OpenAI AI Models
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 982d | — | — | — |
Unverified Signal
|
— | npm | latest | MemberJunction.com | memberjunction.com | 🪝 🌐 | |
|
Package purpose: MemberJunction Wrapper for Google Gemini AI Models
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 1214d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: An extension to the Causa runtime SDK (`@causa/runtime`), providing Google-specific features.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 1256d | — | — | — |
Unverified Signal
|
— | npm | latest | Hidetaka Okamoto | — | 🪝 🌐 | |
|
Package purpose: Framework-agnostic Stripe Payment Elements as Web Components
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 1283d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||