Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 25 | 4d | — | — | — |
Very Risky
|
— | pypi | 3.1.2 | MIZAN Contributors | — | 🪝 | |
|
Package purpose: Agentic Personal AI - Quranic Cognitive Architecture for human-like reasoning
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Slid Phi Labs | — | 🪝 | |
|
Package purpose: Residual-governed tool gate for agentic systems (Slid Phi Labs commercial product). Public package is a stub only.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Send simulator notifications and inspect app receipt, interactions and device tokens.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | wangxiang0605 | — | 🌐 | |
|
Package purpose: Pi extension: Shows the DeepSeek account balance in the status bar (refreshed every 5 minutes and after each turn) and tracks token usage and cost per task. / Pi 扩展：在状态栏显示 DeepSeek 账户余额（每 5 分钟及每轮对话后刷新），并统计一次任务消耗的 token 与费用。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Shared bounded equirectangular panorama loader for Workshop and NextVR. Uses the host Three.js r117 renderer and camera. No input handlers, business requests, server transforms, or animation loop are created by the package.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Cloudflare runtime for the UniDocs Operator: Agent session Durable Object and operator CAS storage
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Manage your todos through Notion: keeps a local SQLite mirror of your Notion task databases for fast reads, time tracking, and agent-driven task management
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | M. Reifschneider | — | 🪝 | |
|
Package purpose: Strict CSS grammar for tree-sitter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | M. Reifschneider | — | 🪝 | |
|
Package purpose: Tree-sitter grammar for ASP.NET Web Forms markup
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Floating DeepSeek API balance badge for the DeepSeek Harness Web UI, backed by the harness's own DEEPSEEK_API_KEY credential
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 失敗したコマンドの原因と対処法を日本語で表示する CLI（オフライン・AI なし）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: SendHoney platform CLI for authenticated API, CRUD, release, and ThunderCompute operations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | stream | — | 🌐 | |
|
Package purpose: Cloudflare Workers AI 这一家在 Stream 里的知识。宿主不认识 Cloudflare，只认识「`transcribe` 梯子上有个转写成员」。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Mouse tracking for OS X
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Hans Zeller | — | 🪝 | |
|
Package purpose: The minimaz/mz CLI binary — a published distribution of @minimaz/cli's commands.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Sebastian Hildebrandt | — | 🪝 | |
|
Package purpose: SMC reader for macOS on Apple Silicon: temperatures, frequencies, power and fans
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: System One decision gateway CLI + server — von/laya local ONNX backends, jev on OpenRouter Decisions. One wire protocol: noul/choice/score questions in, typed answers out.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 9d | — | — | — |
Very Risky
|
— | pypi | 0.5.1 | dbmrq | — | 🪝 | |
|
Package purpose: Turn coding-agent session history into reviewed skills, memories, and rules.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | jhotadhari | — | 🪝 | |
|
Package purpose: Weather GRIB overlay extension for react-native-mapsforge-vtm. Renders gridded weather data (wind, temperature, pressure, etc.) as colored overlays on offline vector maps. Android only.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | MuxYang | — | 🌐 | |
|
Package purpose: Monitor Sentry crash and ANR events and send grouped reports to Koishi channels.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: HAWKV2 — AI-powered development tool. Community fork of opencode (MCP auto-reconnect, hot reload, eval pipeline, memory consolidation, unified prompt); installs the HAWKV2 CLI as `hawk` alongside the official opencode.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Max Brunsfeld | — | 🪝 | |
|
Package purpose: Bash grammar for tree-sitter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Anthropic Messages model binding for Castle agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Chat Completions model binding for Castle agents, including OpenRouter.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Gemini API model binding for Castle agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A 6MB coding agent. Run a fleet on your laptop.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: DeepSeek Harness plugin: manage a local sops+age encrypted credential vault from a sidebar panel. Agents see structure only; plaintext flows only on human click.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | DTMosken | — | 🌐 | |
|
Package purpose: Cortico 的 DeepSeek Responses API 模型供应商扩展。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 11d | — | — | — |
Very Risky
|
— | pypi | 0.2.2 | — | — | 🪝 | |
|
Package purpose: Find fellow GitHub geeks who match your CV and repos and are likely to follow back. Suggests only — you always follow manually.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | shifterbit | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Ali Yasir | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 14d | — | — | — |
Very Risky
|
— | pypi | 0.1.8 | arsalanriaz | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Microsoft Corporation | — | 🪝 | |
|
Package purpose: Playwright package that automatically installs WebKit
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Microsoft Corporation | — | 🪝 | |
|
Package purpose: Playwright package that automatically installs Firefox
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Microsoft Corporation | — | 🪝 | |
|
Package purpose: A high-level API to automate WebKit
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Microsoft Corporation | — | 🪝 | |
|
Package purpose: Playwright package that automatically installs Chromium
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Microsoft Corporation | — | 🪝 | |
|
Package purpose: A high-level API to automate Chromium
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Agentgates | — | 🪝 | |
|
Package purpose: Wallet operations for AI agents and humans
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Pugi CLI - terminal-native software execution system
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | johan@frost.se johan@frost.se | frost.se | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | imaginario27 | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | maki maki | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Artem Maltsev | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A simple ui library for React
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | imaginario27 | — | 🪝 | |
|
Package purpose: Utility package containing helper functions and reusable logic used across the Air UI ecosystem. Designed for Vue and Nuxt applications with TypeScript support.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Rob Sweet | — | 🪝 | |
|
Package purpose: MCP server for Apple Notes - create, search, update, and manage notes via Claude and other AI assistants
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||