Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 25 | 82d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 82d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 82d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 82d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 82d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 82d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 82d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 82d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 82d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 82d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 82d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 82d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 82d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 111d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Mesh-owned Tron wallet connector for Universal Wallet Connector — zero third-party Tron runtime deps; signs via the wallet's injected tronWeb, builds/broadcasts via the Tron full-node HTTP API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 130d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: ph-clint plugin: authenticate against the Anthropic API using a Claude.ai Pro/Max subscription (OAuth) instead of an API key.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 141d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Google connectors for AgentForge — Gmail, Drive, Calendar and Sheets as four independent per-service connectors with narrower scope sets, plus a deprecated legacy combo for back-compat.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 154d | — | — | — |
Very Risky
|
— | pypi | 11434.0.0 | — | — | 🪝 | |
|
Package purpose: llama.cpp server binary built from source
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 170d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Holo-JS Framework - Google social auth provider
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 170d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Holo-JS Framework - Discord social auth provider
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 170d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Holo-JS Framework - Clerk auth integration contracts
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 209d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 224d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 508d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Dynamic Labs, Inc. | — | 🌐 | |
|
Package purpose: A React SDK for implementing wallet web3 authentication and authorization to your website.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 571d | — | — | — |
Very Risky
|
— | pypi | 2.1145.0 | — | — | 🪝 | |
|
Package purpose: Python wrapper for AWS CDK CLI with smart Node.js runtime management
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 599d | — | — | — |
Very Risky
|
— | pypi | 0.28.0rc1 | vLLM-Ascend team | — | 🪝 | |
|
Package purpose: vLLM Ascend backend plugin
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 656d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Aurigma Inc | — | 🌐 | |
|
Package purpose: Axios API Client for Shopify Adapter API service of Customer's Canvas web-to-print system.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 685d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Mux, Inc | — | 🌐 | |
|
Package purpose: Mux Data SDK extension for monitoring Google IMA Ads with mux-embed
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 1062d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | BonnierNews Annonsutveckling & A$AP | — | 🌐 | |
|
Package purpose: This repo is a fork of https://github.com/thewizarodofoz/google-ad-manager-api to update dependencies, functionality and add typing for the different gam services.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 1192d | — | — | — |
Very Risky
|
— | pypi | 4.0.0 | — | — | 🪝 | |
|
Package purpose: Model Serving Made Easy
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 1484d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Planet's Lightning Arrester | — | 🪝 | |
|
Package purpose: Parse Brazilian brokerage notes PDFs (Rico, Clear, and Inter holders available)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 1797d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Amazon plugin for 'Telemetry.js' library
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 2952d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Syncfusion Inc. | — | 🪝 | |
|
Package purpose: A common package of Essential JS 2 base Angular libraries, methods and class definitions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 27 | 89d | 18 | 0 | ↑0.2/day |
Possible Squatted Stub
|
priceless | pypi | 0.1.0 | Pricing UK Red pricing-uk-red@prima.it | prima.it | ||
|
Package purpose: Priceless integration providing point utility for Primapy
Claimed homepage: https://pypi.org/project/primapy-priceless-point-of-sale-underwriting/
Matched naming pattern: primapy-priceless-point
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 89
Registry downloads: 18/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 95d | 30 | 20 | ↑0.3/day |
Possible Squatted Stub
|
langchain | pypi | 0.1.1 | — hello@baponi.ai | baponi.ai | ||
|
Package purpose: Baponi sandbox provider for LangChain Deep Agents
Claimed homepage: https://pypi.org/project/langchain-baponi/
Matched naming pattern: python-langchain-baponi
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 95
Registry downloads: 30/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 887 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 107d | 9 | 0 | ↑0.1/day |
Possible Squatted Stub
|
llamaindex | pypi | 0.1.0 | — reachout@tealtiger.ai | tealtiger.ai | ||
|
Package purpose: TealTiger governance callback handler for LlamaIndex — deterministic policy enforcement, cost tracking, and audit for RAG pipelines
Claimed homepage: https://pypi.org/project/llamaindex-tealtiger/
Matched naming pattern: python-llamaindex-tealtiger
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 107
Registry downloads: 9/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 7 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 165d | 3 | 4 | ↑0.0/day |
Possible Squatted Stub
|
okx | pypi | 0.1.0 | — marcel@tribulnation.com | tribulnation.com | ||
|
Package purpose: An SDK to connect Okx with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-okx/
Matched naming pattern: python-okx-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 165
Registry downloads: 3/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 96 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 165d | 0 | 4 | ↑0.0/day |
Possible Squatted Stub
|
gemini | pypi | 0.1.0 | — marcel@tribulnation.com | tribulnation.com | ||
|
Package purpose: An SDK to connect Gemini with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-gemini/
Matched naming pattern: python-gemini-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 165
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 102 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 165d | 6 | 4 | ↑0.0/day |
Possible Squatted Stub
|
cryptocom | pypi | 0.1.0 | — marcel@tribulnation.com | tribulnation.com | ||
|
Package purpose: An SDK to connect Cryptocom with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-cryptocom/
Matched naming pattern: python-cryptocom-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 165
Registry downloads: 6/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 108 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 165d | 6 | 4 | ↑0.0/day |
Possible Squatted Stub
|
bitfinex | pypi | 0.1.0 | — marcel@tribulnation.com | tribulnation.com | ||
|
Package purpose: An SDK to connect Bitfinex with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-bitfinex/
Matched naming pattern: python-bitfinex-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 165
Registry downloads: 6/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 106 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 187d | 10 | 2 | ↑0.1/day |
Possible Squatted Stub
|
langchain | pypi | 0.0.1 | — ceo@karonlabs.net | karonlabs.net | ||
|
Package purpose: Karon Web Unblocker — Reserved package. See https://karonlabs.net/api/
Claimed homepage: https://pypi.org/project/karon-langchain/
Matched naming pattern: python-langchain-karon
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 187
Registry downloads: 10/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 82 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 243d | 46 | 14 | ↑0.2/day |
Possible Squatted Stub
|
addon | pypi | 18.0.1.0.0.3 | Binhex, Odoo Community Association (OCA) support@odoo-community.org | odoo-community.org | ||
|
Package purpose: Add Cloudflare Turnstile captcha to login form
Claimed homepage: https://github.com/OCA/website
Matched naming pattern: odoo-addon-website
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 243
Registry downloads: 46/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 602 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 348d | 0 | 16 | ↑0.0/day |
Possible Squatted Stub
|
addon | pypi | 16.0.1.0.0.3 | Coop IT Easy SC, Odoo Community Association (OCA) support@odoo-community.org | odoo-community.org | ||
|
Package purpose: Load new partner data during a POS sale
Claimed homepage: https://github.com/OCA/pos
Matched naming pattern: odoo-addon-pos
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 348
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 16 lines, 716 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 353d | 56 | 22 | ↑0.2/day |
Possible Squatted Stub
|
base | pypi | 18.0.1.0.0.4 | =?utf-8?q?Heligr=C3=A0fics_Fotogrametr=C3=ADa_S=2EL=2E=2C_Odoo_Community_Association_=28OCA=29?= support@odoo-community.org | odoo-community.org | ||
|
Package purpose: Integration between base_fontawesome and web_editor for FontAwesome >= 6.7.2 support.
Claimed homepage: https://github.com/OCA/server-tools
Matched naming pattern: odoo-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 353
Registry downloads: 56/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 22 lines, 948 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Authenticated UserReason onboarding and management CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: This repository maintains 3 Shopify custom app configurations and extentsion. Each subdirectory is a discrete app in the Type/Code Partner Dashboard (https://partners.shopify.com/1602090).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 全局安装 UltraStiching CLI、配置支持的 MCP，并提供通用 Skill 安装资源
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Champion Trade Design System — shadcn/ui components with Tailwind CSS v4
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | alex007 | — | 🪝 | |
|
Package purpose: DeepSeek Harness plugin for Google Calendar and Google Tasks: conversational CRUD over events, calendars, tasks and task lists, with built-in OAuth 2.0 loopback authorization
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Jakob Klippel | — | 🪝 | |
|
Package purpose: TypeSafe AI for the Loopstack automation framework. Typed yes/no, choice and score decisions about workflow state via the TypeSafe SDK.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: This package renders the shared temporary `~/.hostpilot/launcher-caddy/Caddyfile` using `src/templates/Caddyfile.hbs` and Handlebars. The renderer validates all target values before passing them to the template, which is copied into `dist` when building t
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||