🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▲ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
25 659d — — —
Possible Squatted Stub
— npm latest Aurigma Inc — 🌐
Package purpose: Axios API Client for Shopify Adapter API service of Customer's Canvas web-to-print system.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/esm/shopify-adapter-api-client.js:54

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 688d — — —
Possible Squatted Stub
— npm latest Mux, Inc — 🌐
Package purpose: Mux Data SDK extension for monitoring Google IMA Ads with mux-embed
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/google-ima-mux.js:6 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 1065d — — —
Possible Squatted Stub
— npm latest BonnierNews Annonsutveckling & A$AP — 🌐
Package purpose: This repo is a fork of https://github.com/thewizarodofoz/google-ad-manager-api to update dependencies, functionality and add typing for the different gam services.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/build/GAMClient.js:13

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 1195d — — —
Very Risky
— pypi 4.0.0 — — 🪝
Package purpose: Model Serving Made Easy
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in xinference-4.0.0/build_backend.py:95
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in xinference-4.0.0/build_backend.py:142
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in xinference-4.0.0/build_web.py:62
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in xinference-4.0.0/build_web.py:43
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in xinference-4.0.0/scripts/check_install.py:70
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in xinference-4.0.0/scripts/check_install.py:25
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in xinference-4.0.0/scripts/check_install.py:94
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in xinference-4.0.0/scripts/manage_install.py:26

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
25 1487d — — —
Possible Squatted Stub
— npm latest Planet's Lightning Arrester — 🪝
Package purpose: Parse Brazilian brokerage notes PDFs (Rico, Clear, and Inter holders available)
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'npx husky'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 1800d — — —
Possible Squatted Stub
— npm latest — — 🌐
Package purpose: Amazon plugin for 'Telemetry.js' library
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/esm/auth.js:21 (+5 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 2955d — — —
Possible Squatted Stub
— npm latest Syncfusion Inc. — 🪝
Package purpose: A common package of Essential JS 2 base Angular libraries, methods and class definitions
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node ./postinstall.js'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
27 92d 18 0 ↑0.2/day
Possible Squatted Stub
priceless pypi 0.1.0 Pricing UK Red pricing-uk-red@prima.it prima.it
Package purpose: Priceless integration providing point utility for Primapy
Claimed homepage: https://pypi.org/project/primapy-priceless-point-of-sale-underwriting/
Matched naming pattern: primapy-priceless-point
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 92
Registry downloads: 18/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@prima.it' matches package identifier token 'prima', verifying identifiable third-party organization ownership.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (64 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 98d 30 20 ↑0.3/day
Possible Squatted Stub
langchain pypi 0.1.1 — hello@baponi.ai baponi.ai
Package purpose: Baponi sandbox provider for LangChain Deep Agents
Claimed homepage: https://pypi.org/project/langchain-baponi/
Matched naming pattern: python-langchain-baponi
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 98
Registry downloads: 30/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 887 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-baponi' matches AI hallucination template [python] + [langchain] + [baponi].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • INFOPublisher email domain '@baponi.ai' matches package identifier token 'baponi', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (69 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (20 LOC, 1 file(s), 887 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 111d 9 0 ↑0.1/day
Possible Squatted Stub
llamaindex pypi 0.1.0 — reachout@tealtiger.ai tealtiger.ai
Package purpose: TealTiger governance callback handler for LlamaIndex — deterministic policy enforcement, cost tracking, and audit for RAG pipelines
Claimed homepage: https://pypi.org/project/llamaindex-tealtiger/
Matched naming pattern: python-llamaindex-tealtiger
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 111
Registry downloads: 9/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 7 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'llamaindex-tealtiger' matches AI hallucination template [python] + [llamaindex] + [tealtiger].
  • HIGHClaims critical enterprise brand identity ('LLAMAINDEX').
  • INFOPublisher email domain '@tealtiger.ai' matches package identifier token 'tealtiger', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (93 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 7 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 168d 3 4 ↑0.0/day
Possible Squatted Stub
okx pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: An SDK to connect Okx with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-okx/
Matched naming pattern: python-okx-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 168
Registry downloads: 3/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 96 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'tribulnation-okx' matches AI hallucination template [python] + [okx] + [tribulnation].
  • HIGHClaims critical enterprise brand identity ('OKX').
  • INFOPublisher email domain '@tribulnation.com' matches package identifier token 'tribulnation', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (147 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 96 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 168d 0 4 ↑0.0/day
Possible Squatted Stub
gemini pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: An SDK to connect Gemini with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-gemini/
Matched naming pattern: python-gemini-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 168
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 102 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'tribulnation-gemini' matches AI hallucination template [python] + [gemini] + [tribulnation].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • INFOPublisher email domain '@tribulnation.com' matches package identifier token 'tribulnation', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (146 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 102 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 168d 6 4 ↑0.0/day
Possible Squatted Stub
cryptocom pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: An SDK to connect Cryptocom with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-cryptocom/
Matched naming pattern: python-cryptocom-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 168
Registry downloads: 6/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 108 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'tribulnation-cryptocom' matches AI hallucination template [python] + [cryptocom] + [tribulnation].
  • HIGHClaims critical enterprise brand identity ('CRYPTOCOM').
  • INFOPublisher email domain '@tribulnation.com' matches package identifier token 'tribulnation', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (147 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 108 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 168d 6 4 ↑0.0/day
Possible Squatted Stub
bitfinex pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: An SDK to connect Bitfinex with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-bitfinex/
Matched naming pattern: python-bitfinex-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 168
Registry downloads: 6/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 106 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'tribulnation-bitfinex' matches AI hallucination template [python] + [bitfinex] + [tribulnation].
  • HIGHClaims critical enterprise brand identity ('BITFINEX').
  • INFOPublisher email domain '@tribulnation.com' matches package identifier token 'tribulnation', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (161 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 106 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 190d 10 2 ↑0.1/day
Possible Squatted Stub
langchain pypi 0.0.1 — ceo@karonlabs.net karonlabs.net
Package purpose: Karon Web Unblocker — Reserved package. See https://karonlabs.net/api/
Claimed homepage: https://pypi.org/project/karon-langchain/
Matched naming pattern: python-langchain-karon
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 190
Registry downloads: 10/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 82 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'karon-langchain' matches AI hallucination template [python] + [langchain] + [karon].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • INFOPublisher email domain '@karonlabs.net' matches package identifier token 'karonlabs', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (172 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 82 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 246d 46 14 ↑0.2/day
Possible Squatted Stub
addon pypi 18.0.1.0.0.3 Binhex, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org
Package purpose: Add Cloudflare Turnstile captcha to login form
Claimed homepage: https://github.com/OCA/website
Matched naming pattern: odoo-addon-website
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 246
Registry downloads: 46/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 602 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@odoo-community.org' matches package identifier token 'odoo-community', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 229 days ago within the 1-year AI tool proliferation window.
  • HIGHPackage registered with suspiciously high major version (v18.0.1.0.0.3, major 18) despite recent registration (229 days ago, 2 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (14 LOC, 2 file(s), 602 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 351d 0 16 ↑0.0/day
Possible Squatted Stub
addon pypi 16.0.1.0.0.3 Coop IT Easy SC, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org
Package purpose: Load new partner data during a POS sale
Claimed homepage: https://github.com/OCA/pos
Matched naming pattern: odoo-addon-pos
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 351
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 16 lines, 716 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@odoo-community.org' matches package identifier token 'odoo-community', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 333 days ago within the 1-year AI tool proliferation window.
  • HIGHPackage registered with suspiciously high major version (v16.0.1.0.0.3, major 16) despite recent registration (333 days ago, 2 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (16 LOC, 2 file(s), 716 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 356d 56 22 ↑0.2/day
Possible Squatted Stub
base pypi 18.0.1.0.0.4 =?utf-8?q?Heligr=C3=A0fics_Fotogrametr=C3=ADa_S=2EL=2E=2C_Odoo_Community_Association_=28OCA=29?= support@odoo-community.org odoo-community.org
Package purpose: Integration between base_fontawesome and web_editor for FontAwesome >= 6.7.2 support.
Claimed homepage: https://github.com/OCA/server-tools
Matched naming pattern: odoo-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 356
Registry downloads: 56/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 22 lines, 948 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@odoo-community.org' matches package identifier token 'odoo-community', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 338 days ago within the 1-year AI tool proliferation window.
  • HIGHPackage registered with suspiciously high major version (v18.0.1.0.0.4, major 18) despite recent registration (338 days ago, 5 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (22 LOC, 2 file(s), 948 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
30 6d — — —
Possible Squatted Stub
— npm latest Venus — 🪝
Package purpose: Vue-native <DataTable> on TanStack Table and TanStack Virtual: sorting, filtering, pagination, selection, pinning, inline editing, and adaptive row virtualization. The Vue port of @coldsmirk/ledger-mantine.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.cjs:1 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 7d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Authenticated UserReason onboarding and management CLI
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/config.js:5

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 7d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: This repository maintains 3 Shopify custom app configurations and extentsion. Each subdirectory is a discrete app in the Type/Code Partner Dashboard (https://partners.shopify.com/1602090).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/a24-app/scripts/assert-extension-env.mjs:2 (+4 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 7d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: 全局安装 UltraStiching CLI、配置支持的 MCP，并提供通用 Skill 安装资源
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/install-log.js:180 (+5 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 7d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Champion Trade Design System — shadcn/ui components with Tailwind CSS v4
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.cjs:568 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 7d — — —
Possible Squatted Stub
— npm latest alex007 — 🪝
Package purpose: DeepSeek Harness plugin for Google Calendar and Google Tasks: conversational CRUD over events, calendars, tasks and task lists, with built-in OAuth 2.0 loopback authorization
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/auth.js:153 (+3 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 7d — — —
Possible Squatted Stub
— npm latest Jakob Klippel — 🪝
Package purpose: TypeSafe AI for the Loopstack automation framework. Typed yes/no, choice and score decisions about workflow state via the TypeSafe SDK.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/services/typesafe-client.service.js:12

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: This package renders the shared temporary `~/.hostpilot/launcher-caddy/Caddyfile` using `src/templates/Caddyfile.hbs` and Handlebars. The renderer validates all target values before passing them to the template, which is copied into `dist` when building t
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/caddy-helper.js:8 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: React specific wrapper for @globalpayments/vega
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/react-component-lib/utils/dev.js:2

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Optional Cursor capture hooks using the canonical Unshadow SDK
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cli.js:1758 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: 自动提交守卫: 本会话改过文件却想接着跑下一回合时挡下并提示模型先提交 (agent/turn-stopping + tools/pre-execute 双触点, 经 agent.steer 强制再跑一步); 默认绝不自行提交, 仅 commitOnApproval=true 时在审批弹窗路径代提交。
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/index.mjs:106

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest Opeyemi Oginni — 🪝
Package purpose: Slack bot that runs a coding agent on your repository in a GitTerm sandbox
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cli.js:223 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/dist/cli.js:223 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Servidor MCP da DS9: expõe skills e subagentes oficiais para qualquer IDE/LLM com suporte a MCP
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/src/content.js:37

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Studio native CSS Lightpanda binary
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/bin/lightpanda-capture.mjs:31

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Lingo.dev for TanStack Start and TanStack Router: locale rewrite, bare-path redirect, message catalog, request context, head tags and a language switcher over @lingo.dev/locale-router.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.cjs:53 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Portal: [Vanda Services Core](../../../docs/).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/postgres-runtime.js:26 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Portal: [Vanda Services Core](../../docs/).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/infra/auth-middleware.js:14 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Workser's coding engine for the 'loop in our service' mode: OpenCode's agent contract (its prompts, tool schemas and edit semantics, vendored from v1.18.23) running on Node, with every file and shell action going through a Place — so the machine can be a
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/src/place/local.js:43

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Wanna feedback community widget for React
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index.cjs:1 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Shader UI pour React et Next.js.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/warn.js:5

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Scaffold a new Grain project
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/index.mjs:213

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: One-shot entrance animation for the DSH workspace: logo is written onto the canvas, an inverted color bar sweeps across on exit; mirrors light/dark themes automatically.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.mjs:52

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Send and open SMAIL links from a terminal or an agent, on Robinhood Chain
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/artifacts.js:23 (+3 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: HazeHash: compact image placeholders (16-48 bytes) with OKLab DCT, alpha and aspect ratio
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cli.cjs:1215 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Marketing section components and composition primitives for Restio product pages
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.cjs:1 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest BLACKLINE CONSULTING d.o.o. d.o.o 🪝
Package purpose: Official TypeScript SDK for the FAST platform - Skill Challenge engine for sportsbook operators
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cjs/client.js:14 (+11 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Seithr v6 Compiler - AST reactivity transform and Vite HMR plugin
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/bundle.js:1

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Seithr v6 CLI - Zero-ceremony scaffolding CLI engine for next-generation reactive applications
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:2 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest Severin MARCOMBES — 🪝
Package purpose: The connection string for a MongoDB database, credentials included, and which database in it to use.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/read.js:4

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest Severin MARCOMBES — 🪝
Package purpose: An API key for OpenAI, or for any OpenAI-compatible gateway named by a base URL.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/read.js:4

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest Severin MARCOMBES — 🪝
Package purpose: A connection string for Redis: a shared table every instance of a deployment can see.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/read.js:4

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
30 8d — — —
Possible Squatted Stub
— npm latest Severin MARCOMBES — 🪝
Package purpose: A bucket and a key pair for any S3-compatible store: AWS, Cloudflare R2, Backblaze, MinIO, Tigris.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/read.js:4

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
« Prev Next »
LINK COPIED TO CLIPBOARD