🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Growing Packages Fastest-adopted since publish Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▲ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
15 1314d — — —
Possible Squatted Stub
— npm latest — —
Package purpose: Trust Wallet integration for hub. [Homepage](https://trustwallet.com/) | [Docs](https://developer.trustwallet.com/developer/develop-for-trust/browser-extension)
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 1536d — — —
Possible Squatted Stub
— npm latest — —
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 1906d — — —
Possible Squatted Stub
— npm latest — —
Package purpose: This library was generated with [Angular CLI](https://github.com/angular/angular-cli) version 10.0.6.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 1972d — — —
Possible Squatted Stub
— npm latest — —
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 2147d — — —
Possible Squatted Stub
— npm latest — —
Package purpose: This library was generated with [Angular CLI](https://github.com/angular/angular-cli) version 10.0.6.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 2223d — — —
Possible Squatted Stub
— npm latest Guillaume Felley —
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 2696d — — —
Possible Squatted Stub
— npm latest — —
Package purpose: Actions on Google channel for stentor
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 3320d — — —
Possible Squatted Stub
— npm latest Progress —
Package purpose: Ripple Package for Angular
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
20 83d 10 6 ↑0.1/day
Possible Squatted Stub
shadolog pypi 0.0.1 — eng@shadolog.com shadolog.com
Package purpose: Tamper-evident, independently signed receipts for AI agent actions. Placeholder - full release imminent.
Claimed homepage: https://pypi.org/project/shadolog/
Matched naming pattern: python-shadolog-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 83
Registry downloads: 10/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 6 lines, 372 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@shadolog.com' matches package identifier token 'shadolog', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (67 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (6 LOC, 1 file(s), 372 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 106d 9 7 ↑0.1/day
Possible Squatted Stub
translation pypi 0.1.dev0 — pyansys.core@ansys.com ansys.com
Package purpose: Placeholder package. Contact pyansys.core@ansys.com for private package access.
Claimed homepage: https://pypi.org/project/ansys-translation-utilities/
Matched naming pattern: ansys-translation-utilities
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 106
Registry downloads: 9/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 205 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@ansys.com' matches package identifier token 'ansys', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (97 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 205 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 115d 6 20 ↑0.1/day
Possible Squatted Stub
llama pypi 0.1.0 tempguru-co megan@tempguru.co tempguru.co
Package purpose: LlamaIndex tools for TempGuru event staffing: city coverage, W-2 rate ranges, booking lead times, and state labor compliance for 345+ US/CA cities, plus opt-in quote submission. No API key required.
Claimed homepage: https://pypi.org/project/llama-index-tools-tempguru/
Matched naming pattern: llama-llama-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 115
Registry downloads: 6/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 901 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • INFOPublisher email domain '@tempguru.co' matches package identifier token 'tempguru', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (108 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (20 LOC, 2 file(s), 901 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 116d 12 7 ↑0.1/day
Possible Squatted Stub
valgroup pypi 0.0.1 — luan.marques@valgroupco.com valgroupco.com
Package purpose: Placeholder package to reserve the valgroup-lib-core name on public PyPI and prevent dependency confusion attacks.
Claimed homepage: https://pypi.org/project/valgroup-lib-core/
Matched naming pattern: valgroup-valgroup-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 116
Registry downloads: 12/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 274 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@valgroupco.com' matches package identifier token 'valgroupco', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (105 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 274 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 157d 7 4 ↑0.0/day
Possible Squatted Stub
tribulnation pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: An SDK to connect Blockchaincom with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-blockchaincom/
Matched naming pattern: python-tribulnation-blockchaincom
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 157
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 116 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@tribulnation.com' matches package identifier token 'tribulnation', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (147 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 116 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 157d 6 4 ↑0.0/day
Possible Squatted Stub
tribulnation pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: An SDK to connect Apex with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-apex/
Matched naming pattern: python-tribulnation-apex
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 157
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 98 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@tribulnation.com' matches package identifier token 'tribulnation', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (147 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 98 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 165d 2 2 ↑0.0/day
Possible Squatted Stub
coder pypi 0.0.1 — admin@scalix.world scalix.world
Package purpose: Scalix World platform package. See https://scalix.world
Claimed homepage: https://pypi.org/project/scalix-coder/
Matched naming pattern: python-coder-scalix
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 165
Registry downloads: 2/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 91 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@scalix.world' matches package identifier token 'scalix', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (158 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 91 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 336d 4 12 ↑0.0/day
Possible Squatted Stub
cuda pypi 0.0.1 — kitmaker@nvidia.com nvidia.com
Package purpose: DEPRECATED: Use nvidia-cuda-culibos instead
Claimed homepage: https://pypi.org/project/nvidia-cuda-culibos-cu13/
Matched naming pattern: nvidia-cuda-culibos
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 336
Registry downloads: 4/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 12 lines, 458 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@nvidia.com' matches package identifier token 'nvidia', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 328 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (12 LOC, 2 file(s), 458 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 537d 14 18 ↑0.0/day
Possible Squatted Stub
claude pypi 0.1.0 orange support@orange.ai orange.ai
Package purpose: Multi-tool MCP integration for Claude
Claimed homepage: https://pypi.org/project/orange-claude-tools/
Matched naming pattern: orange-claude-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 537
Registry downloads: 14/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 18 lines, 547 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'orange-claude-tools' matches AI hallucination template [orange] + [claude] + [tools].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • INFOPublisher email domain '@orange.ai' matches package identifier token 'orange', verifying identifiable third-party organization ownership.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (18 LOC, 1 file(s), 547 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 667d 0 13 ↑0.0/day
Possible Squatted Stub
base pypi 19.0.1.0.0.2 Escodoo,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org
Package purpose: Provides general settings for the Repair App
Claimed homepage: https://github.com/OCA/repair
Matched naming pattern: odoo-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 667
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 13 lines, 536 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@odoo-community.org' matches package identifier token 'odoo-community', verifying identifiable third-party organization ownership.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (13 LOC, 2 file(s), 536 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 1193d 0 21 ↑0.0/day
Possible Squatted Stub
test pypi 16.0.1.0.1.4 Camptocamp, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org
Package purpose: Unittests for Base Binary URL Import module
Claimed homepage: https://github.com/OCA/server-ux
Matched naming pattern: odoo-test-test
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1193
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 799 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@odoo-community.org' matches package identifier token 'odoo-community', verifying identifiable third-party organization ownership.
  • INFOEstablished pre-AI legacy package registered 1183 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 3 file(s), 799 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 193d 8 22 ↑0.0/day
Possible Squatted Stub
base pypi 1.0.0 Slash Mark info@slashmark.in slashmark.in
Package purpose: Base CLI tool
Claimed homepage: https://slashmark.in
Matched naming pattern: python-base-slashmark
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 193
Registry downloads: 8/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 22 lines, 574 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@slashmark.in' matches package identifier token 'slashmark', verifying identifiable third-party organization ownership.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 186 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (22 LOC, 1 file(s), 574 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 197d 0 12 ↑0.0/day
Possible Squatted Stub
perplexity pypi 0.1.0 Jacob Stewart jacob@swarmauri.com swarmauri.com
Package purpose: Swarmauri Perplexity LLM adapters from swarmauri_standard.
Claimed homepage: https://pypi.org/project/swarmauri_llm_perplexity/
Matched naming pattern: swarmauri-perplexity-perplexity
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 197
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 12 lines, 446 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'swarmauri-llm-perplexity' matches AI hallucination template [swarmauri] + [perplexity] + [perplexity].
  • HIGHClaims critical enterprise brand identity ('PERPLEXITY').
  • INFOPublisher email domain '@swarmauri.com' matches package identifier token 'swarmauri', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 187 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (12 LOC, 2 file(s), 446 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 197d 67 15 ↑0.3/day
Possible Squatted Stub
mistral pypi 0.1.0 Jacob Stewart jacob@swarmauri.com swarmauri.com
Package purpose: Swarmauri Mistral LLM adapters from swarmauri_standard.
Claimed homepage: https://pypi.org/project/swarmauri_llm_mistral/
Matched naming pattern: swarmauri-mistral-mistral
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 197
Registry downloads: 67/month, 13/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 594 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'swarmauri-llm-mistral' matches AI hallucination template [swarmauri] + [mistral] + [mistral].
  • HIGHClaims critical enterprise brand identity ('MISTRAL').
  • INFOPublisher email domain '@swarmauri.com' matches package identifier token 'swarmauri', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 187 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (15 LOC, 3 file(s), 594 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 197d 57 21 ↑0.3/day
Possible Squatted Stub
groq pypi 0.1.0 Jacob Stewart jacob@swarmauri.com swarmauri.com
Package purpose: Swarmauri Groq LLM adapters from swarmauri_standard.
Claimed homepage: https://pypi.org/project/swarmauri_llm_groq/
Matched naming pattern: swarmauri-groq-groq
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 197
Registry downloads: 57/month, 14/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 857 Bytes across 5 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'swarmauri-llm-groq' matches AI hallucination template [swarmauri] + [groq] + [groq].
  • HIGHClaims critical enterprise brand identity ('GROQ').
  • INFOPublisher email domain '@swarmauri.com' matches package identifier token 'swarmauri', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 187 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 5 file(s), 857 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 197d 0 15 ↑0.0/day
Possible Squatted Stub
gemini pypi 0.1.0 Jacob Stewart jacob@swarmauri.com swarmauri.com
Package purpose: Swarmauri Gemini LLM adapters from swarmauri_standard.
Claimed homepage: https://pypi.org/project/swarmauri_llm_gemini/
Matched naming pattern: swarmauri-gemini-gemini
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 197
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 599 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'swarmauri-llm-gemini' matches AI hallucination template [swarmauri] + [gemini] + [gemini].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • INFOPublisher email domain '@swarmauri.com' matches package identifier token 'swarmauri', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 187 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (15 LOC, 3 file(s), 599 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 197d 52 15 ↑0.3/day
Possible Squatted Stub
cohere pypi 0.1.0 Jacob Stewart jacob@swarmauri.com swarmauri.com
Package purpose: Swarmauri Cohere LLM adapters from swarmauri_standard.
Claimed homepage: https://pypi.org/project/swarmauri_llm_cohere/
Matched naming pattern: swarmauri-cohere-cohere
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 197
Registry downloads: 52/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 581 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'swarmauri-llm-cohere' matches AI hallucination template [swarmauri] + [cohere] + [cohere].
  • HIGHClaims critical enterprise brand identity ('COHERE').
  • INFOPublisher email domain '@swarmauri.com' matches package identifier token 'swarmauri', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 183 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (15 LOC, 3 file(s), 581 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 197d 45 15 ↑0.2/day
Possible Squatted Stub
anthropic pypi 0.1.0 Jacob Stewart jacob@swarmauri.com swarmauri.com
Package purpose: Swarmauri Anthropic LLM adapters from swarmauri_standard.
Claimed homepage: https://pypi.org/project/swarmauri_llm_anthropic/
Matched naming pattern: swarmauri-anthropic-anthropic
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 197
Registry downloads: 45/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 620 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'swarmauri-llm-anthropic' matches AI hallucination template [swarmauri] + [anthropic] + [anthropic].
  • HIGHClaims critical enterprise brand identity ('ANTHROPIC').
  • INFOPublisher email domain '@swarmauri.com' matches package identifier token 'swarmauri', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 183 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (15 LOC, 3 file(s), 620 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 220d 9 0 ↑0.0/day
Possible Squatted Stub
crewai pypi 1.1.0 — contact@piqrypt.com piqrypt.com
Package purpose: PiQrypt cryptographic audit trail bridge for CrewAI
Claimed homepage: https://pypi.org/project/piqrypt-crewai-integration/
Matched naming pattern: piqrypt-crewai-integration
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 220
Registry downloads: 9/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 11 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'piqrypt-crewai-integration' matches AI hallucination template [piqrypt] + [crewai] + [integration].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • INFOPublisher email domain '@piqrypt.com' matches package identifier token 'piqrypt', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 217 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 11 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 220d 10 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 1.1.0 — contact@piqrypt.com piqrypt.com
Package purpose: PiQrypt Verifiable AI Agent Memory bridge for LangChain
Claimed homepage: https://pypi.org/project/piqrypt-langchain-integration/
Matched naming pattern: piqrypt-langchain-integration
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 220
Registry downloads: 10/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 12 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'piqrypt-langchain-integration' matches AI hallucination template [piqrypt] + [langchain] + [integration].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • INFOPublisher email domain '@piqrypt.com' matches package identifier token 'piqrypt', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 217 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 12 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 323d 7 7 ↑0.0/day
Possible Squatted Stub
gcp pypi 0.0.1 — dev@zephyr-ai.io zephyr-ai.io
Package purpose: Placeholder distribution reserving the Zephyr AI GCP integration name.
Claimed homepage: https://pypi.org/project/zephyr-ai-gcp/
Matched naming pattern: zephyr-gcp-gcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 323
Registry downloads: 7/month, 14/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 254 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'zephyr-ai-gcp' matches AI hallucination template [zephyr] + [gcp] + [gcp].
  • HIGHClaims critical enterprise brand identity ('GCP').
  • INFOPublisher email domain '@zephyr-ai.io' matches package identifier token 'zephyr-ai', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 319 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 254 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 323d 8 7 ↑0.0/day
Possible Squatted Stub
aws pypi 0.0.1 — dev@zephyr-ai.io zephyr-ai.io
Package purpose: Placeholder distribution reserving the Zephyr AI AWS integration name.
Claimed homepage: https://pypi.org/project/zephyr-ai-aws/
Matched naming pattern: zephyr-aws-aws
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 323
Registry downloads: 8/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 254 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'zephyr-ai-aws' matches AI hallucination template [zephyr] + [aws] + [aws].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • INFOPublisher email domain '@zephyr-ai.io' matches package identifier token 'zephyr-ai', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 319 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 254 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
25 5h — — —
Possible Squatted Stub
— npm latest ultimate-websocket-dev — 🪝
Package purpose: Ultra-fast WebSocket client built for Discord gateway workloads. Raw TLS, hand-rolled frame codec, native payload filtering, zlib-stream and ETF support. Zero dependencies.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node -e "console.log('ultimate-websocket v' + require('./package.json').version + ' installed'); try { require('node-net-pool'); console.log('node-net-pool: ok'); } catch { console.log('node-net-pool: missing'); }"'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 7h — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Live terminal heads-up display for coding-agent usage, limits and cost
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node preinstall.cjs'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 10h — — —
Possible Squatted Stub
— npm latest prentece — 🪝
Package purpose: Astrix binary for Windows x64
Static code signals:
  • BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bin/astrix.exe' in npm tarball

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 22h — — —
Possible Squatted Stub
— npm latest Tovonirina Andrianarivelo — 🪝
Package purpose: Claude Skill for XtendM3 API development - Interactive with Claude capabilities
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 24h — — —
Possible Squatted Stub
— npm latest — — 🌐
Package purpose: Bitbucket API Integration for Ferrox-Node
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:15 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 28h — — —
Possible Squatted Stub
— npm latest Kieran Rosenberg — 🪝
Package purpose: Tree-sitter grammar for Rake, a vector-first SIMD language
Static code signals:
  • LIFECYCLE_SCRIPT: 'install' -> 'node-gyp rebuild'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 36h — — —
Possible Squatted Stub
— npm latest — — 🌐
Package purpose: Moteur de comptabilité en partie double : écritures équilibrées et immuables, numérotation sans trou, clôture, lettrage, rapprochement bancaire, états SYSCOHADA, plans OHADA (SYSCOHADA, SYSCEBNL) et TVA RDC.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/import-odoo.js:156

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 45h — — —
Possible Squatted Stub
— npm latest — — 🌐
Package purpose: In-process, dev-only S3 emulator backed by the FS storage adapter.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:339

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 47h — — —
Possible Squatted Stub
— npm latest — — 🌐
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/GeminiApiClient.js:24

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 55h — — —
Possible Squatted Stub
— npm latest — — 🌐
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/script.js:80

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 61h — — —
Possible Squatted Stub
— npm latest x12 — 🌐
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:168

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 64h — — —
Possible Squatted Stub
— npm latest — — 🪝
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'bun run scripts/install-bitbucket-cli.ts'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 64h — — —
Possible Squatted Stub
— npm latest — — 🪝
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'bun run scripts/install-jira-cli.ts'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 64h — — —
Possible Squatted Stub
— npm latest — — 🪝
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'bun run scripts/install-atlassian-admin-cli.ts'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 68h — — —
Very Risky
— pypi 1.0.7 — — 🪝
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in beautifytext-1.0.7/beautifyText/_compat.py:126
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in beautifytext-1.0.7/beautifyText/_compat.py:31
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in beautifytext-1.0.7/beautifyText/_compat.py:206
  • SOURCE_CODE_ENV_VARS_ACCESS: Call to os.environ.get() in beautifytext-1.0.7/setup.py:7
  • SOURCE_CODE_ENV_VARS_ACCESS: Access to os.environ in beautifytext-1.0.7/setup.py:7
  • SOURCE_CODE_ENV_VARS_ACCESS: Access to os.environ in beautifytext-1.0.7/setup.py:10
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in beautifytext-1.0.7/setup.py:7
  • INSTALL_TIME_EXECUTION: 'Python setup.py Custom Install Hook' found in beautifytext-1.0.7/setup.py:20

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
25 69h — — —
Possible Squatted Stub
— npm latest — — 🌐
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/commonjs/Fetch.js:56 (+23 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 70h — — —
Possible Squatted Stub
— npm latest — — 🌐
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.cjs:88 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 71h — — —
Possible Squatted Stub
— npm latest — — 🪝
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/install.mjs'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 3d — — —
Possible Squatted Stub
— npm latest — — 🌐
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/src/bot_api_transport.js:159

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 4d — — —
Possible Squatted Stub
— npm latest — — 🌐
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:76 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
« Prev Next »
LINK COPIED TO CLIPBOARD