Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 15 | 30d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Voltro UG | — | ||
|
Package purpose: ClickHouse AnalyticsSink. Native HTTP ingest into a ClickHouse cluster — self-hosted OR ClickHouse Cloud. Production-grade OLAP for high-cardinality events with millisecond aggregate queries over billions of rows.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 30d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Voltro UG | — | ||
|
Package purpose: Embedded DuckDB AnalyticsSink. Runs DuckDB in-process for real OLAP performance without an external service. Events land in a DuckDB column-store table; aggregate / timeseries / topN queries execute vectorized.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 30d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Voltro UG | — | ||
|
Package purpose: Clerk-backed AuthStrategy for the Voltro framework. Verifies Clerk-issued __session JWTs via the Frontend API JWKS. Conforms to @voltro/protocol AuthStrategy so it composes with other IdP plugins.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 32d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: OIDC trusted publishing setup package for @lunora/platform-cloudflare
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 32d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Salesforce UI Security Team | — | ||
|
Package purpose: Lightning Web Security AST library maker utilities
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | bitgobot | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 34d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: ## Installation
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 34d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 34d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: DSH plugin for semantic code search via Milvus vector database
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 43d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Circle flag SVGs as Mithril.js components
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 43d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: External BYOK provider for OpenAI (ChatGPT/Codex) in cmd.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 44d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | info@overcast.xyz info@overcast.xyz | overcast.xyz | ||
|
Package purpose: RawSigner implementation backed by AWS KMS (Ed25519).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 45d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 47d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 52d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 54d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Stripe payment abstractions — injectable services for checkout sessions, webhooks, customers, billing portal, discounts, products, prices, and revenue analytics
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 60d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Reusable Wilma Copilot presentational components for React and Wildix UIKit.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 60d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: React hooks for Wilma Copilot relationships, session streams and asks with injected clients.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 62d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 67d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: ```bash npm install @dynamic-labs/legacy-solana-extension ```
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 80d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Voltro UG | — | ||
|
Package purpose: Auth0-backed AuthStrategy for the Voltro framework. Verifies Auth0-issued JWTs via the tenant's JWKS endpoint. Conforms to @voltro/protocol AuthStrategy so it composes with other IdP plugins.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 81d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: @wildix/wilma-copilot-sessions-client client
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 81d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: @wildix/wilma-copilot-client client
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 83d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 86d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 88d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 88d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 89d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 90d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 90d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 93d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Yasser Rosas | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 106d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 152d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 177d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Aasim Bhat | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 189d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Mayank Khan Singh DeSouza | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 196d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 204d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 218d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 221d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 221d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 221d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 237d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 242d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 280d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 340d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 355d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 356d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 409d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 694d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Optimajet | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||