Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 25 | 88d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: awslambda addon
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 88d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Consume the Microsoft To Do API (tasks, lists, linked resources).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 88d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Consume the Google Tasks API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 88d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Amazon Comprehend text analysis for Pikku
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 88d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Sends data to AWS Transcribe
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 88d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Consume the Google Cloud Natural Language API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 89d | — | — | — |
🐛 Potential Cross-Ecosystem Worm
Very Risky
|
— | pypi | 0.6.0 | Mathews-Tom | — | 🪝 🐛 | |
|
Package purpose: Engineer the system that engineers software.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 118d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Mesh-owned Tron wallet connector for Universal Wallet Connector — zero third-party Tron runtime deps; signs via the wallet's injected tronWeb, builds/broadcasts via the Tron full-node HTTP API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 137d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: ph-clint plugin: authenticate against the Anthropic API using a Claude.ai Pro/Max subscription (OAuth) instead of an API key.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 147d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Google connectors for AgentForge — Gmail, Drive, Calendar and Sheets as four independent per-service connectors with narrower scope sets, plus a deprecated legacy combo for back-compat.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 167d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Mondart | — | 🌐 | |
|
Package purpose: Google reCAPTCHA module, decorators and guards for NestJS.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 176d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Holo-JS Framework - Google social auth provider
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 176d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Holo-JS Framework - Discord social auth provider
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 176d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Holo-JS Framework - Clerk auth integration contracts
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 193d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | MJH Life Sciences | — | 🌐 | |
|
Package purpose: AI-powered SEO writing assistant for Sanity Studio
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 194d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Alfe | — | 🌐 | |
|
Package purpose: OpenClaw Google Chat plugin — DM polling and auto-reply via connected Google account
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 216d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Discord bot messaging and server management.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 216d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Google Analytics 4 event tracking and reporting.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 230d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Shopify Admin API for products, orders, customers, and inventory.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 260d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Proxies.sx | proxies.sx | 🌐 | |
|
Package purpose: Solana USDC payment verification for x402
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 317d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | AI Network (https://ainetwork.ai) | ainetwork.ai | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 416d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Service to integrate with Google Places API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 446d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | AI Network (https://ainetwork.ai) | ainetwork.ai | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 446d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | AI Network (https://ainetwork.ai) | ainetwork.ai | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 515d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Dynamic Labs, Inc. | — | 🌐 | |
|
Package purpose: A React SDK for implementing wallet web3 authentication and authorization to your website.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 578d | — | — | — |
Very Risky
|
— | pypi | 2.1145.0 | — | — | 🪝 | |
|
Package purpose: Python wrapper for AWS CDK CLI with smart Node.js runtime management
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 606d | — | — | — |
Very Risky
|
— | pypi | 0.30.0rc2 | vLLM-Ascend team | — | 🪝 | |
|
Package purpose: vLLM Ascend backend plugin
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 800d | — | — | — |
Very Risky
|
— | pypi | 0.18.6 | — | — | 🪝 | |
|
Package purpose: Serve Python (or C++) objects across a LAN using something like JSON-RPC
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 1199d | — | — | — |
Very Risky
|
— | pypi | 4.0.1 | — | — | 🪝 | |
|
Package purpose: Model Serving Made Easy
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 1490d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Planet's Lightning Arrester | — | 🪝 | |
|
Package purpose: Parse Brazilian brokerage notes PDFs (Rico, Clear, and Inter holders available)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 1804d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Amazon plugin for 'Telemetry.js' library
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 2472d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Base project for Ex Libris Cloud Apps
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 3593d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Trey Tacon | — | 🪝 | |
|
Package purpose: Installs and starts the AWS XRay daemon
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 27 | 96d | 16 | 0 | ↑0.2/day |
Possible Squatted Stub
|
priceless | pypi | 0.1.0 | Pricing UK Red pricing-uk-red@prima.it | prima.it | ||
|
Package purpose: Priceless integration providing point utility for Primapy
Claimed homepage: https://pypi.org/project/primapy-priceless-point-of-sale-underwriting/
Matched naming pattern: primapy-priceless-point
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 96
Registry downloads: 16/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 101d | 36 | 20 | ↑0.4/day |
Possible Squatted Stub
|
langchain | pypi | 0.1.1 | — hello@baponi.ai | baponi.ai | ||
|
Package purpose: Baponi sandbox provider for LangChain Deep Agents
Claimed homepage: https://pypi.org/project/langchain-baponi/
Matched naming pattern: python-langchain-baponi
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 101
Registry downloads: 36/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 887 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 114d | 9 | 0 | ↑0.1/day |
Possible Squatted Stub
|
llamaindex | pypi | 0.1.0 | — reachout@tealtiger.ai | tealtiger.ai | ||
|
Package purpose: TealTiger governance callback handler for LlamaIndex — deterministic policy enforcement, cost tracking, and audit for RAG pipelines
Claimed homepage: https://pypi.org/project/llamaindex-tealtiger/
Matched naming pattern: python-llamaindex-tealtiger
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 114
Registry downloads: 9/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 7 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 172d | 3 | 4 | ↑0.0/day |
Possible Squatted Stub
|
okx | pypi | 0.1.0 | — marcel@tribulnation.com | tribulnation.com | ||
|
Package purpose: An SDK to connect Okx with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-okx/
Matched naming pattern: python-okx-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 172
Registry downloads: 3/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 96 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 172d | 0 | 4 | ↑0.0/day |
Possible Squatted Stub
|
gemini | pypi | 0.1.0 | — marcel@tribulnation.com | tribulnation.com | ||
|
Package purpose: An SDK to connect Gemini with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-gemini/
Matched naming pattern: python-gemini-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 172
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 102 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 172d | 6 | 4 | ↑0.0/day |
Possible Squatted Stub
|
cryptocom | pypi | 0.1.0 | — marcel@tribulnation.com | tribulnation.com | ||
|
Package purpose: An SDK to connect Cryptocom with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-cryptocom/
Matched naming pattern: python-cryptocom-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 172
Registry downloads: 6/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 108 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 172d | 6 | 4 | ↑0.0/day |
Possible Squatted Stub
|
bitfinex | pypi | 0.1.0 | — marcel@tribulnation.com | tribulnation.com | ||
|
Package purpose: An SDK to connect Bitfinex with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-bitfinex/
Matched naming pattern: python-bitfinex-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 172
Registry downloads: 6/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 106 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 193d | 10 | 2 | ↑0.1/day |
Possible Squatted Stub
|
langchain | pypi | 0.0.1 | — ceo@karonlabs.net | karonlabs.net | ||
|
Package purpose: Karon Web Unblocker — Reserved package. See https://karonlabs.net/api/
Claimed homepage: https://pypi.org/project/karon-langchain/
Matched naming pattern: python-langchain-karon
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 193
Registry downloads: 10/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 82 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 250d | 46 | 14 | ↑0.2/day |
Possible Squatted Stub
|
addon | pypi | 18.0.1.0.0.3 | Binhex, Odoo Community Association (OCA) support@odoo-community.org | odoo-community.org | ||
|
Package purpose: Add Cloudflare Turnstile captcha to login form
Claimed homepage: https://github.com/OCA/website
Matched naming pattern: odoo-addon-website
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 250
Registry downloads: 46/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 602 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 354d | 0 | 16 | ↑0.0/day |
Possible Squatted Stub
|
addon | pypi | 16.0.1.0.0.3 | Coop IT Easy SC, Odoo Community Association (OCA) support@odoo-community.org | odoo-community.org | ||
|
Package purpose: Load new partner data during a POS sale
Claimed homepage: https://github.com/OCA/pos
Matched naming pattern: odoo-addon-pos
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 354
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 16 lines, 716 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 360d | 56 | 22 | ↑0.2/day |
Possible Squatted Stub
|
base | pypi | 18.0.1.0.0.4 | =?utf-8?q?Heligr=C3=A0fics_Fotogrametr=C3=ADa_S=2EL=2E=2C_Odoo_Community_Association_=28OCA=29?= support@odoo-community.org | odoo-community.org | ||
|
Package purpose: Integration between base_fontawesome and web_editor for FontAwesome >= 6.7.2 support.
Claimed homepage: https://github.com/OCA/server-tools
Matched naming pattern: odoo-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 360
Registry downloads: 56/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 22 lines, 948 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 30 | 54h | — | — | — |
Very Risky
|
— | pypi | 0.3.1 | LuminariSoftwares | — | 🪝 | |
|
Package purpose: Is this codebase safe to run, will it work, and is it complete? Deterministic Safe, Works and Complete scores with an A-F grade, from static analysis only, plus a verify loop for AI-assisted changes: baseline, repair plan, before/after diff. The code is never run.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 30 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Venus | — | 🪝 | |
|
Package purpose: Vue-native <DataTable> on TanStack Table and TanStack Virtual: sorting, filtering, pagination, selection, pinning, inline editing, and adaptive row virtualization. The Vue port of @coldsmirk/ledger-mantine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 全局安装 UltraStiching CLI、配置支持的 MCP，并提供通用 Skill 安装资源
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Champion Trade Design System — shadcn/ui components with Tailwind CSS v4
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: This package renders the shared temporary `~/.hostpilot/launcher-caddy/Caddyfile` using `src/templates/Caddyfile.hbs` and Handlebars. The renderer validates all target values before passing them to the template, which is copied into `dist` when building t
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Optional Cursor capture hooks using the canonical Unshadow SDK
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||