Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 25 | 20d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Ollama model provider extension for ECP
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 20d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | maki maki | — | 🪝 | |
|
Package purpose: Code Shell — meta package. Installs @cjhyy/code-shell-core and @cjhyy/code-shell-tui.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 20d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Artem Maltsev | — | 🪝 | |
|
Package purpose: SQLite adapter for @atscript/db with swappable driver support.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 20d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The Krate CLI — a Go-native static site generator with signal-based reactivity.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 20d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A simple ui library for React
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 21d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | imaginario27 | — | 🪝 | |
|
Package purpose: Utility package containing helper functions and reusable logic used across the Air UI ecosystem. Designed for Vue and Nuxt applications with TypeScript support.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 21d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Rob Sweet | — | 🪝 | |
|
Package purpose: MCP server for Apple Notes - create, search, update, and manage notes via Claude and other AI assistants
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 21d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Presentational tiles for Tile storefront apps — props in, callbacks out. Zero runtime dependencies; every native module is a peer pinned by the host, so a kit release is always an OTA and never a store release.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 21d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Colby Gilbert | — | 🌐 | |
|
Package purpose: airtable tools for FrogBot.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 21d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Fireworks AI provider extension for pi - Access Kimi, MiniMax, GLM, DeepSeek, and GPT-OSS models through the Fireworks AI API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 21d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: This package contains the Cosmos integration for the Dynamic SDK.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 24d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 24d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | nokhodian | — | 🪝 | |
|
Package purpose: Open-source CLI extension for Claude Code, OpenCode, Antigravity, Kimi Code, and Codex. Adds an MCP server with a codebase knowledge graph, persistent memory, multi-agent coordination, and reusable slash commands. Apache 2.0 licensed. See https://github.c
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Microsoft Corporation | — | 🪝 | |
|
Package purpose: A high-level API to automate Firefox
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Deprecated compatibility shim for Engram installs. Re-exports @remnic/plugin-openclaw and forwards engram-access to @remnic/core.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 26d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Mailgun production email transport for OwlMeans — implements `MailerService` via the Mailgun HTTP API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 27d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: KaneAI CLI — v16-runner binary for macOS x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 27d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Sci-fi terminal widgets that show only real data.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 27d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Türkay TANRIKULU | — | 🪝 | |
|
Package purpose: lzf compression module for nodejs (Topface/node-lzf fork)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 27d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Rob Sweet | — | 🪝 | |
|
Package purpose: MCP server for Apple Mail - read, search, send, and manage emails via Claude and other AI assistants
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 28d | — | — | — |
Very Risky
|
— | pypi | 1.4.0 | Steffen Probst | — | 🪝 | |
|
Package purpose: Installer protocol + helpers for self-installing Python CLI/GUI tools (desktop shortcuts, bash aliases, cron entries), plus reusable tkinter and curses installer screens
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 28d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Simon Boissonneault-Robert | — | 🪝 | |
|
Package purpose: High level functionality that builds upon the other packages in the Tezos Typescript Library Suite.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 30d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Dynamic Labs, Inc. | — | 🌐 | |
|
Package purpose: A React SDK for implementing wallet web3 authentication and authorization to your website.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Colby Gilbert | — | 🌐 | |
|
Package purpose: stripe tools for FrogBot.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Colby Gilbert | — | 🌐 | |
|
Package purpose: pagerduty tools for FrogBot.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | M. Reifschneider | — | 🪝 | |
|
Package purpose: Tree-sitter grammar for Microsoft SQL Server T-SQL
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 31d | — | — | — |
Very Risky
|
— | pypi | 0.1.10 | Ashish Yadav | — | 🪝 | |
|
Package purpose: Auto-Use: an AI agent that operates your computer, shell, browser and iPhone
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 32d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Ritesh Shukla | — | 🪝 | |
|
Package purpose: A powerful audio player library for React Native with playlist management, playback controls, and support for Android Auto and CarPlay
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 32d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: macOS Intel native payload for Fabr Client
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 32d | — | — | — |
Very Risky
|
— | pypi | 2.0.0 | — | — | 🪝 | |
|
Package purpose: AISEF — AI Software Engineering Framework: input is docs/requirements.md, output is gate-verified code with SHA-bound evidence
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 32d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 32d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Stencil Component Starter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 32d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Tierney Cyren | — | 🪝 | |
|
Package purpose: A personal card for Richard Hess (@eswat42)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Binance market connector plugin for dsh-trading: public market data over REST+WS implementing the @dshtrading/api contracts
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Kirill Lakhtachev | — | 🪝 | |
|
Package purpose: One seat for all your projects and tasks: a local record of what is done, what is next and when it ships - read by you and your coding assistant
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 34d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: NextClaw Discord channel extension process.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 35d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Centralized service to override motors on humanoids and other places
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 35d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Bottom sheet and floating window components for React Native, with configurable presentation and native-driver animations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 35d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Voltro UG | — | 🌐 | |
|
Package purpose: Deep Datadog integration — agentless metrics push (unified Metrics-API → /api/v2/series) + opt-in log forwarding (dd.trace_id-correlated → /api/v2/logs) + traces (framework OTel spans → Datadog Agent OTLP) + the dd-trace continuous profiler, all correlate
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 36d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Securiti.ai | securiti.ai | 🪝 | |
|
Package purpose: A React Native Library for managing user consent preferences and compliance with privacy regulations. Integrates with Securiti's Consent Management Platform.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 36d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: KaneAI CLI — assurance-agent binary for Linux x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 36d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: KaneAI CLI — assurance-agent binary for Linux ARM64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 36d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: KaneAI CLI — assurance-agent binary for macOS x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 36d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: KaneAI CLI — assurance-agent binary for macOS ARM64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 36d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: KaneAI CLI — v16-runner binary for Linux x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 37d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Jason Karns | — | 🪝 | |
|
Package purpose: A nodenv plugin providing node-build definitions for Node.js prereleases.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 37d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Trust Payments | — | 🪝 | |
|
Package purpose: TypeScript Payment Card
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 37d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Zowe | — | 🪝 | |
|
Package purpose: Credential management facilities for Imperative, Zowe CLI, and extenders.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 37d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Robin Paul | — | 🪝 | |
|
Package purpose: Rust-based utilities for proteinpaint
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 37d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | IBM Corp | — | 🪝 | |
|
Package purpose: Be sure to review the [chat documentation](https://chat.carbondesignsystem.com/tag/latest/docs/documents/Overview.html).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||