Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 242d | — | — | — |
Unverified Signal
|
— | npm | latest | Tanner Linsley | — | 🪝 🌐 | |
|
Package purpose: ElevenLabs adapter for TanStack AI realtime voice, text-to-speech, transcription, music, and sound effects.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 246d | — | — | — |
SUSPICIOUS
|
— | pypi | 1.0.88 | — | — | 🪝 | |
|
Package purpose: Drop-in Context Assurance for AI agents: reduce avoidable token usage and AI cost with evidence selection, receipts, exact recovery, and verification.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 250d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: AWS provider adapters for the Frigg Framework (SQS, EventBridge, KMS, Lambda, S3)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 251d | — | — | — |
Unverified Signal
|
— | npm | latest | redf0x1 | — | 🪝 🌐 | |
|
Package purpose: Gemini AI MCP server — chat, stream, and generate with Google Gemini via anti-detection browser
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 256d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 257d | — | — | — |
Unverified Signal
|
— | npm | latest | remorses | — | 🪝 🌐 | |
|
Package purpose: Local Discord API twin for testing discord.js bots without hitting real Discord servers
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 258d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Shashi Kanth | — | 🪝 | |
|
Package purpose: A2A (Agent-to-Agent) protocol wrapper for the GitHub Copilot SDK. Drop a JSON config file in, get a fully-spec-compliant A2A server out. Supports any agent persona, MCP tool servers, streaming, context building, and multi-turn conversations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 269d | — | — | — |
Unverified Signal
|
— | npm | latest | yicr | — | 🪝 🌐 | |
|
Package purpose: Lightweight TypeScript library for fetching secrets from AWS Secrets Manager via the AWS Parameters and Secrets Lambda Extension (http://localhost, default port 2773), with retries and timeouts using fetch-retrier.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 270d | — | — | — |
Unverified Signal
|
— | npm | latest | open-claude contributors | — | 🪝 | |
|
Package purpose: Open-source alternative to Claude Agent SDK - readable source, debuggable, uses local CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 280d | — | — | — |
Unverified Signal
|
— | pypi | 1.2.0 | Xaeian | — | 🪝 | |
|
Package purpose: Simple Python utilities: files, time, serial, binary structs, databases, network, media, electronics, plotting and signals
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 281d | — | — | — |
Unverified Signal
|
— | pypi | 3.1.2 | — | — | 🪝 | |
|
Package purpose: Persistent Project Context for Google Gemini. IANA-registered .faf format, MCP server + Cloud Run REST API, unifies CLAUDE.md, GEMINI.md, AGENTS.md.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 281d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Respan | — | 🪝 🌐 | |
|
Package purpose: Exporter for OpenAI agents traces to Respan
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 283d | — | — | — |
Unverified Signal
|
— | npm | latest | Junji Takashima | — | 🪝 🌐 | |
|
Package purpose: MCP server for xAI Grok Imagine Image API - Generate and edit images using grok-imagine-image model
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 283d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Theia - GitHub Copilot Integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 293d | — | — | — |
Unverified Signal
|
— | pypi | 0.111.4 | — | — | 🪝 | |
|
Package purpose: Multi-account manager and skills suite for Claude Code and Codex: live usage tracking, evidence-safe account switching, swap recommendations, tray app, and web dashboard
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 300d | — | — | — |
Unverified Signal
|
— | npm | latest | Zed Industries | — | 🪝 🌐 | |
|
Package purpose: An ACP-compatible coding agent powered by the Claude Agent SDK (TypeScript)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 302d | — | — | — |
Unverified Signal
|
— | npm | latest | LiveKit | — | 🪝 🌐 | |
|
Package purpose: xAI plugin for LiveKit Node Agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 307d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 319d | — | — | — |
Unverified Signal
|
— | npm | latest | Daniel Rosehill | — | 🪝 🌐 | |
|
Package purpose: MCP server for audio transcription using Gemini models via OpenRouter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 327d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Airline Digitalization | — | 🪝 | |
|
Package purpose: A package that adapts requests between Azure Functions and React Router
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 327d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Edifice | — | 🪝 | |
|
Package purpose: Abstract base for Edifice client SDKs (no application-specific logic)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 328d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.13 | — | — | 🪝 | |
|
Package purpose: Plan, generate, compose, and edit images and video with Gemini image models, Veo 3.1, and Gemini Omni, with a cost estimate before every call and an optional Gemini 4 Argon director that checks each take against your notes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 333d | — | — | — |
Unverified Signal
|
— | npm | latest | Adam Jones | — | 🪝 🌐 | |
|
Package purpose: MCP server for Google Drive - list, search, upload, download, and manage files and folders
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 339d | — | — | — |
Unverified Signal
|
— | npm | latest | Tanner Linsley | — | 🪝 🌐 | |
|
Package purpose: OpenAI adapter for TanStack AI chat, tools, images, video, speech, transcription, realtime, and structured outputs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 339d | — | — | — |
Unverified Signal
|
— | npm | latest | Tanner Linsley | — | 🪝 🌐 | |
|
Package purpose: Google Gemini adapter for TanStack AI chat, images, speech, audio generation, and structured outputs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 352d | — | — | — |
Unverified Signal
|
— | npm | latest | Eugene Chybisov | — | 🪝 🌐 | |
|
Package purpose: LI.FI Ethereum SDK Provider for Any-to-Any Cross-Chain-Swap
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 362d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Circle Wallets blockchain adapter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 373d | — | — | — |
Unverified Signal
|
— | pypi | 0.26.0 | Justyn Shull | — | 🪝 | |
|
Package purpose: Micro-agent runner for task automation using markdown definitions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 399d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: [](https://opensource.org/licenses/MIT)
[](https://aws.amazon.com/cdk/)
[![Platform](https://img.shields.io/badge/Platform-ON
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 408d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Theia - Claude Code Integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 431d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Civic | — | 🪝 🌐 | |
|
Package purpose: Civic Auth Web3 SDK for react-native
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 439d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: EVM blockchain adapter powered by Ethers v6
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 443d | — | — | — |
Unverified Signal
|
— | npm | latest | LiveKit | — | 🪝 🌐 | |
|
Package purpose: Google Gemini plugin for LiveKit Node Agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 465d | — | — | — |
Unverified Signal
|
— | pypi | 1.32.0 | — | — | 🪝 | |
|
Package purpose: Collection of tools for working with Claude Code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 475d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Thorbjorn Kappel Davis | — | 🪝 🌐 | |
|
Package purpose: Extension package to enable maintenance on Pluss Communities Platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 475d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Thorbjorn Kappel Davis | — | 🪝 🌐 | |
|
Package purpose: Extension package to enable maintenance on Pluss Communities Platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 478d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 487d | — | — | — |
Unverified Signal
|
— | npm | latest | Claude Wrapper Team | — | 🪝 | |
|
Package purpose: OpenAI-compatible HTTP API wrapper for Claude Code CLI with Session Management
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 511d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ## 1 Usage
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 518d | — | — | — |
Unverified Signal
|
— | pypi | 0.0.7 | — | — | 🪝 | |
|
Package purpose: Sync SSH keys from GitHub
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 523d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mastra Clerk Auth integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 523d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mastra Auth0 Auth integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 559d | — | — | — |
Unverified Signal
|
— | npm | latest | DevForth | — | 🪝 🌐 | |
|
Package purpose: AdminForth image generation adapter for OpenAI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 604d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mastra OpenAI Realtime API integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 607d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Thorbjorn Kappel Davis | — | 🪝 🌐 | |
|
Package purpose: Extension package to enable maintenance on Pluss Communities Platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 717d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | e-inscricao | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 718d | — | — | — |
Unverified Signal
|
— | npm | latest | MemberJunction.com | memberjunction.com | 🪝 | |
|
Package purpose: Base Classes for MemberJunction Actions. This library is used on both server and network nodes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 740d | — | — | — |
Unverified Signal
|
— | npm | latest | InjectiveLabs | — | 🪝 🌐 | |
|
Package purpose: Ledger wallet strategy for use with @injectivelabs/wallet-core.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 746d | — | — | — |
Unverified Signal
|
— | npm | latest | Wolfram Sokollek | — | 🪝 | |
|
Package purpose: Nx plugin to generate, synthesize, deploy and destroy AWS CDK v2 applications inside an Nx workspace.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 751d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||