Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 236d | — | — | — |
Unverified Signal
|
— | npm | latest | Shehryar Sohail | — | 🪝 | |
|
Package purpose: Code auditor: fast static checks, plus an optional Claude-driven audit with read-only tools
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 240d | — | — | — |
Unverified Signal
|
— | npm | latest | Tanner Linsley | — | 🪝 🌐 | |
|
Package purpose: ElevenLabs adapter for TanStack AI realtime voice, text-to-speech, transcription, music, and sound effects.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 244d | — | — | — |
SUSPICIOUS
|
— | pypi | 1.0.88 | — | — | 🪝 | |
|
Package purpose: Drop-in Context Assurance for AI agents: reduce avoidable token usage and AI cost with evidence selection, receipts, exact recovery, and verification.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 248d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: AWS provider adapters for the Frigg Framework (SQS, EventBridge, KMS, Lambda, S3)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 249d | — | — | — |
Unverified Signal
|
— | npm | latest | redf0x1 | — | 🪝 🌐 | |
|
Package purpose: Gemini AI MCP server — chat, stream, and generate with Google Gemini via anti-detection browser
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 254d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 256d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Shashi Kanth | — | 🪝 | |
|
Package purpose: A2A (Agent-to-Agent) protocol wrapper for the GitHub Copilot SDK. Drop a JSON config file in, get a fully-spec-compliant A2A server out. Supports any agent persona, MCP tool servers, streaming, context building, and multi-turn conversations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 267d | — | — | — |
Unverified Signal
|
— | npm | latest | yicr | — | 🪝 🌐 | |
|
Package purpose: Lightweight TypeScript library for fetching secrets from AWS Secrets Manager via the AWS Parameters and Secrets Lambda Extension (http://localhost, default port 2773), with retries and timeouts using fetch-retrier.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 268d | — | — | — |
Unverified Signal
|
— | npm | latest | open-claude contributors | — | 🪝 | |
|
Package purpose: Open-source alternative to Claude Agent SDK - readable source, debuggable, uses local CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 278d | — | — | — |
Unverified Signal
|
— | pypi | 1.2.0 | Xaeian | — | 🪝 | |
|
Package purpose: Simple Python utilities: files, time, serial, binary structs, databases, network, media, electronics, plotting and signals
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 279d | — | — | — |
Unverified Signal
|
— | pypi | 3.1.2 | — | — | 🪝 | |
|
Package purpose: Persistent Project Context for Google Gemini. IANA-registered .faf format, MCP server + Cloud Run REST API, unifies CLAUDE.md, GEMINI.md, AGENTS.md.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 279d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Respan | — | 🪝 🌐 | |
|
Package purpose: Exporter for OpenAI agents traces to Respan
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 281d | — | — | — |
Unverified Signal
|
— | npm | latest | Junji Takashima | — | 🪝 🌐 | |
|
Package purpose: MCP server for xAI Grok Imagine Image API - Generate and edit images using grok-imagine-image model
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 281d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Theia - GitHub Copilot Integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 291d | — | — | — |
Unverified Signal
|
— | pypi | 0.111.4 | — | — | 🪝 | |
|
Package purpose: Multi-account manager and skills suite for Claude Code and Codex: live usage tracking, evidence-safe account switching, swap recommendations, tray app, and web dashboard
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 298d | — | — | — |
Unverified Signal
|
— | npm | latest | Zed Industries | — | 🪝 🌐 | |
|
Package purpose: An ACP-compatible coding agent powered by the Claude Agent SDK (TypeScript)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 300d | — | — | — |
Unverified Signal
|
— | npm | latest | LiveKit | — | 🪝 🌐 | |
|
Package purpose: xAI plugin for LiveKit Node Agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 305d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 317d | — | — | — |
Unverified Signal
|
— | npm | latest | Daniel Rosehill | — | 🪝 🌐 | |
|
Package purpose: MCP server for audio transcription using Gemini models via OpenRouter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 325d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Airline Digitalization | — | 🪝 | |
|
Package purpose: A package that adapts requests between Azure Functions and React Router
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 325d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Edifice | — | 🪝 | |
|
Package purpose: Abstract base for Edifice client SDKs (no application-specific logic)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 326d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.13 | — | — | 🪝 | |
|
Package purpose: Plan, generate, compose, and edit images and video with Gemini image models, Veo 3.1, and Gemini Omni, with a cost estimate before every call and an optional Gemini 4 Argon director that checks each take against your notes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 330d | — | — | — |
Unverified Signal
|
— | npm | latest | Adam Jones | — | 🪝 🌐 | |
|
Package purpose: MCP server for Google Drive - list, search, upload, download, and manage files and folders
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 337d | — | — | — |
Unverified Signal
|
— | npm | latest | Tanner Linsley | — | 🪝 🌐 | |
|
Package purpose: OpenAI adapter for TanStack AI chat, tools, images, video, speech, transcription, realtime, and structured outputs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 337d | — | — | — |
Unverified Signal
|
— | npm | latest | Tanner Linsley | — | 🪝 🌐 | |
|
Package purpose: Google Gemini adapter for TanStack AI chat, images, speech, audio generation, and structured outputs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 350d | — | — | — |
Unverified Signal
|
— | npm | latest | Eugene Chybisov | — | 🪝 🌐 | |
|
Package purpose: LI.FI Ethereum SDK Provider for Any-to-Any Cross-Chain-Swap
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 360d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Circle Wallets blockchain adapter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 371d | — | — | — |
Unverified Signal
|
— | pypi | 0.26.0 | Justyn Shull | — | 🪝 | |
|
Package purpose: Micro-agent runner for task automation using markdown definitions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 397d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: [](https://opensource.org/licenses/MIT)
[](https://aws.amazon.com/cdk/)
[![Platform](https://img.shields.io/badge/Platform-ON
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 406d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Theia - Claude Code Integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 429d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Civic | — | 🪝 🌐 | |
|
Package purpose: Civic Auth Web3 SDK for react-native
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 437d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: EVM blockchain adapter powered by Ethers v6
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 441d | — | — | — |
Unverified Signal
|
— | npm | latest | LiveKit | — | 🪝 🌐 | |
|
Package purpose: Google Gemini plugin for LiveKit Node Agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 463d | — | — | — |
Unverified Signal
|
— | pypi | 1.31.1 | — | — | 🪝 | |
|
Package purpose: Collection of tools for working with Claude Code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 472d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Thorbjorn Kappel Davis | — | 🪝 🌐 | |
|
Package purpose: Extension package to enable maintenance on Pluss Communities Platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 472d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Thorbjorn Kappel Davis | — | 🪝 🌐 | |
|
Package purpose: Extension package to enable maintenance on Pluss Communities Platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 476d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 485d | — | — | — |
Unverified Signal
|
— | npm | latest | Claude Wrapper Team | — | 🪝 | |
|
Package purpose: OpenAI-compatible HTTP API wrapper for Claude Code CLI with Session Management
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 509d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ## 1 Usage
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 516d | — | — | — |
Unverified Signal
|
— | pypi | 0.0.7 | — | — | 🪝 | |
|
Package purpose: Sync SSH keys from GitHub
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 521d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mastra Clerk Auth integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 521d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mastra Auth0 Auth integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 557d | — | — | — |
Unverified Signal
|
— | npm | latest | DevForth | — | 🪝 🌐 | |
|
Package purpose: AdminForth image generation adapter for OpenAI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 602d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mastra OpenAI Realtime API integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 605d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Thorbjorn Kappel Davis | — | 🪝 🌐 | |
|
Package purpose: Extension package to enable maintenance on Pluss Communities Platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 715d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | e-inscricao | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 716d | — | — | — |
Unverified Signal
|
— | npm | latest | MemberJunction.com | memberjunction.com | 🪝 | |
|
Package purpose: Base Classes for MemberJunction Actions. This library is used on both server and network nodes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 738d | — | — | — |
Unverified Signal
|
— | npm | latest | InjectiveLabs | — | 🪝 🌐 | |
|
Package purpose: Ledger wallet strategy for use with @injectivelabs/wallet-core.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 744d | — | — | — |
Unverified Signal
|
— | npm | latest | Wolfram Sokollek | — | 🪝 | |
|
Package purpose: Nx plugin to generate, synthesize, deploy and destroy AWS CDK v2 applications inside an Nx workspace.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 749d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||