Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 191d | — | — | — |
Unverified Signal
|
— | pypi | 2.5.0 | — | — | 🪝 | |
|
Package purpose: Automated AI-powered code review CLI for Azure DevOps / TFS Pull Requests
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 196d | — | — | — |
Unverified Signal
|
— | npm | latest | Vignesh T.V | — | 🪝 | |
|
Package purpose: GitHub Copilot AI agent provider for VibeControls Agent
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 196d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Shared Supabase types, app context, and contract helpers for EIN-connected apps.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 197d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Synap memory integration for Anthropic's Claude Agent SDK (TypeScript)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 197d | — | — | — |
Unverified Signal
|
— | npm | latest | Stanislav Kozachenko | — | 🪝 | |
|
Package purpose: TypeScript middleware framework for Claude Code command hooks
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 198d | — | — | — |
Unverified Signal
|
— | npm | latest | Andre Bremer | — | 🪝 🌐 | |
|
Package purpose: rill extension for Google Workspace (Gmail, Drive, Calendar) integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 198d | — | — | — |
Unverified Signal
|
— | npm | latest | heartyoh | — | 🪝 🌐 | |
|
Package purpose: Provider-agnostic AI client abstraction (chat / structured JSON / vision). Anthropic / OpenAI / Bedrock 등 어댑터로 확장.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 199d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Supabase auth adapter for the Brand Portal framework: editor and audience sign-in, user management, live collaboration transport.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 199d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Open many Claude Code sessions at once, tiled across your monitors. Asks once, then launches with one command.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 200d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Pi extension for llama-server router - model discovery, auto-load, per-project config
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 209d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 211d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI for AI-assisted commit review, commit message generation, Git workflow automation, and work reports.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 213d | — | — | — |
Unverified Signal
|
— | pypi | 0.0.4 | — | — | 🪝 | |
|
Package purpose: Structured JSON logging for Starlette on Google Cloud Run
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 218d | — | — | — |
Unverified Signal
|
— | npm | latest | hampsterx | — | 🪝 | |
|
Package purpose: MCP server that wraps Claude Code CLI for query, web search, structured output, and health checks
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 219d | — | — | — |
Unverified Signal
|
— | npm | latest | Abhishek Chauhan | — | 🪝 | |
|
Package purpose: Scaffold a new LangGraph multi-agent project in seconds
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 220d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Node.js native addon for llama.cpp — direct in-process inference
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 223d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Generate typed bindings from Solidity ABI artifacts — pre-built binary
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 223d | 20 | 16 | ↑0.1/day |
Possible Squatted Stub
|
base | pypi | 18.0.1.0.0.3 | Therp BV, Odoo Community Association (OCA) support@odoo-community.org | odoo-community.org | ||
|
Package purpose: Glue module for base views
Claimed homepage: https://github.com/OCA/bank-payment
Matched naming pattern: odoo-base-account
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 223
Registry downloads: 20/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 16 lines, 581 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 223d | — | — | — |
Unverified Signal
|
— | pypi | 1.8.31 | — | — | 🪝 | |
|
Package purpose: Claude Code plugins for autonomous development workflows
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 224d | — | — | — |
Unverified Signal
|
— | pypi | 4.4.0 | Slim | — | 🪝 | |
|
Package purpose: PactKit adapter for GitHub Copilot
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 225d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Microsoft Graph API email provider for email-agent-mcp
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 227d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Base React app template — a React UI Bundle with Vite, TypeScript, Tailwind/shadcn, and Salesforce UI Bundle SDK. Used as the foundation for feature apps (e.g. propertymanagementapp, reactexternalapp) when applying patches.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 231d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mastra Okta Auth and RBAC integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 239d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Google Cloud Storage bucket and object management.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 239d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 240d | — | — | — |
Unverified Signal
|
— | npm | latest | Shehryar Sohail | — | 🪝 | |
|
Package purpose: Code auditor: fast static checks, plus an optional Claude-driven audit with read-only tools
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 244d | — | — | — |
Unverified Signal
|
— | npm | latest | Tanner Linsley | — | 🪝 🌐 | |
|
Package purpose: ElevenLabs adapter for TanStack AI realtime voice, text-to-speech, transcription, music, and sound effects.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 248d | — | — | — |
SUSPICIOUS
|
— | pypi | 1.0.88 | — | — | 🪝 | |
|
Package purpose: Drop-in Context Assurance for AI agents: reduce avoidable token usage and AI cost with evidence selection, receipts, exact recovery, and verification.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 252d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: AWS provider adapters for the Frigg Framework (SQS, EventBridge, KMS, Lambda, S3)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 253d | — | — | — |
Unverified Signal
|
— | npm | latest | redf0x1 | — | 🪝 🌐 | |
|
Package purpose: Gemini AI MCP server — chat, stream, and generate with Google Gemini via anti-detection browser
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 258d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 259d | — | — | — |
Unverified Signal
|
— | npm | latest | remorses | — | 🪝 🌐 | |
|
Package purpose: Local Discord API twin for testing discord.js bots without hitting real Discord servers
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 260d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Shashi Kanth | — | 🪝 | |
|
Package purpose: A2A (Agent-to-Agent) protocol wrapper for the GitHub Copilot SDK. Drop a JSON config file in, get a fully-spec-compliant A2A server out. Supports any agent persona, MCP tool servers, streaming, context building, and multi-turn conversations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 271d | — | — | — |
Unverified Signal
|
— | npm | latest | yicr | — | 🪝 🌐 | |
|
Package purpose: Lightweight TypeScript library for fetching secrets from AWS Secrets Manager via the AWS Parameters and Secrets Lambda Extension (http://localhost, default port 2773), with retries and timeouts using fetch-retrier.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 272d | — | — | — |
Unverified Signal
|
— | npm | latest | open-claude contributors | — | 🪝 | |
|
Package purpose: Open-source alternative to Claude Agent SDK - readable source, debuggable, uses local CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 282d | — | — | — |
Unverified Signal
|
— | pypi | 1.2.1 | Xaeian | — | 🪝 | |
|
Package purpose: Simple Python utilities: files, time, serial, binary structs, databases, network, media, electronics, plotting and signals
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 283d | — | — | — |
Unverified Signal
|
— | pypi | 3.2.0 | — | — | 🪝 | |
|
Package purpose: Persistent Project Context for Google Gemini. IANA-registered .faf format, MCP server + Cloud Run REST API, unifies CLAUDE.md, GEMINI.md, AGENTS.md.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 284d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Respan | — | 🪝 🌐 | |
|
Package purpose: Exporter for OpenAI agents traces to Respan
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 285d | — | — | — |
Unverified Signal
|
— | npm | latest | Junji Takashima | — | 🪝 🌐 | |
|
Package purpose: MCP server for xAI Grok Imagine Image API - Generate and edit images using grok-imagine-image model
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 285d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Theia - GitHub Copilot Integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 296d | — | — | — |
Unverified Signal
|
— | pypi | 0.111.4 | — | — | 🪝 | |
|
Package purpose: Multi-account manager and skills suite for Claude Code and Codex: live usage tracking, evidence-safe account switching, swap recommendations, tray app, and web dashboard
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 302d | — | — | — |
Unverified Signal
|
— | npm | latest | Zed Industries | — | 🪝 🌐 | |
|
Package purpose: An ACP-compatible coding agent powered by the Claude Agent SDK (TypeScript)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 304d | — | — | — |
Unverified Signal
|
— | npm | latest | LiveKit | — | 🪝 🌐 | |
|
Package purpose: xAI plugin for LiveKit Node Agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 309d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 321d | — | — | — |
Unverified Signal
|
— | npm | latest | Daniel Rosehill | — | 🪝 🌐 | |
|
Package purpose: MCP server for audio transcription using Gemini models via OpenRouter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 329d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Airline Digitalization | — | 🪝 | |
|
Package purpose: A package that adapts requests between Azure Functions and React Router
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 329d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Edifice | — | 🪝 | |
|
Package purpose: Abstract base for Edifice client SDKs (no application-specific logic)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 330d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.13 | — | — | 🪝 | |
|
Package purpose: Plan, generate, compose, and edit images and video with Gemini image models, Veo 3.1, and Gemini Omni, with a cost estimate before every call and an optional Gemini 4 Argon director that checks each take against your notes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 335d | — | — | — |
Unverified Signal
|
— | npm | latest | Adam Jones | — | 🪝 🌐 | |
|
Package purpose: MCP server for Google Drive - list, search, upload, download, and manage files and folders
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 341d | — | — | — |
Unverified Signal
|
— | npm | latest | Tanner Linsley | — | 🪝 🌐 | |
|
Package purpose: OpenAI adapter for TanStack AI chat, tools, images, video, speech, transcription, realtime, and structured outputs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||