Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▲ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 25 | 198d | — | — | — |
🚨 Possible Stealer
Very Risky
|
— | pypi | 0.6.23 | AgentAuditKit Contributors | — | 🪝 | |
|
Package purpose: Security scanner for MCP-connected AI agent pipelines
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 218d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Discord bot messaging and server management.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 218d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Google Analytics 4 event tracking and reporting.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 233d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Shopify Admin API for products, orders, customers, and inventory.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 262d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Proxies.sx | proxies.sx | 🌐 | |
|
Package purpose: Solana USDC payment verification for x402
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 319d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | AI Network (https://ainetwork.ai) | ainetwork.ai | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 419d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Service to integrate with Google Places API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 448d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | AI Network (https://ainetwork.ai) | ainetwork.ai | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 448d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | AI Network (https://ainetwork.ai) | ainetwork.ai | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 517d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Dynamic Labs, Inc. | — | 🌐 | |
|
Package purpose: A React SDK for implementing wallet web3 authentication and authorization to your website.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 580d | — | — | — |
Very Risky
|
— | pypi | 2.1146.0 | — | — | 🪝 | |
|
Package purpose: Python wrapper for AWS CDK CLI with smart Node.js runtime management
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 608d | — | — | — |
Very Risky
|
— | pypi | 0.30.0rc2 | vLLM-Ascend team | — | 🪝 | |
|
Package purpose: vLLM Ascend backend plugin
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 665d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Aurigma Inc | — | 🌐 | |
|
Package purpose: Axios API Client for Shopify Adapter API service of Customer's Canvas web-to-print system.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 1201d | — | — | — |
Very Risky
|
— | pypi | 4.0.1 | — | — | 🪝 | |
|
Package purpose: Model Serving Made Easy
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 1493d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Planet's Lightning Arrester | — | 🪝 | |
|
Package purpose: Parse Brazilian brokerage notes PDFs (Rico, Clear, and Inter holders available)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 1806d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Amazon plugin for 'Telemetry.js' library
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 2474d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Base project for Ex Libris Cloud Apps
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 2961d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Syncfusion Inc. | — | 🪝 | |
|
Package purpose: A common package of Essential JS 2 base Angular libraries, methods and class definitions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 3596d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Trey Tacon | — | 🪝 | |
|
Package purpose: Installs and starts the AWS XRay daemon
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 27 | 98d | 16 | 0 | ↑0.2/day |
Possible Squatted Stub
|
priceless | pypi | 0.1.0 | Pricing UK Red pricing-uk-red@prima.it | prima.it | ||
|
Package purpose: Priceless integration providing point utility for Primapy
Claimed homepage: https://pypi.org/project/primapy-priceless-point-of-sale-underwriting/
Matched naming pattern: primapy-priceless-point
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 98
Registry downloads: 16/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 104d | 36 | 20 | ↑0.3/day |
Possible Squatted Stub
|
langchain | pypi | 0.1.1 | — hello@baponi.ai | baponi.ai | ||
|
Package purpose: Baponi sandbox provider for LangChain Deep Agents
Claimed homepage: https://pypi.org/project/langchain-baponi/
Matched naming pattern: python-langchain-baponi
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 36/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 887 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 116d | 9 | 0 | ↑0.1/day |
Possible Squatted Stub
|
llamaindex | pypi | 0.1.0 | — reachout@tealtiger.ai | tealtiger.ai | ||
|
Package purpose: TealTiger governance callback handler for LlamaIndex — deterministic policy enforcement, cost tracking, and audit for RAG pipelines
Claimed homepage: https://pypi.org/project/llamaindex-tealtiger/
Matched naming pattern: python-llamaindex-tealtiger
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 116
Registry downloads: 9/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 7 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 174d | 3 | 4 | ↑0.0/day |
Possible Squatted Stub
|
okx | pypi | 0.1.0 | — marcel@tribulnation.com | tribulnation.com | ||
|
Package purpose: An SDK to connect Okx with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-okx/
Matched naming pattern: python-okx-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 174
Registry downloads: 3/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 96 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 174d | 0 | 4 | ↑0.0/day |
Possible Squatted Stub
|
gemini | pypi | 0.1.0 | — marcel@tribulnation.com | tribulnation.com | ||
|
Package purpose: An SDK to connect Gemini with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-gemini/
Matched naming pattern: python-gemini-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 174
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 102 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 174d | 6 | 4 | ↑0.0/day |
Possible Squatted Stub
|
cryptocom | pypi | 0.1.0 | — marcel@tribulnation.com | tribulnation.com | ||
|
Package purpose: An SDK to connect Cryptocom with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-cryptocom/
Matched naming pattern: python-cryptocom-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 174
Registry downloads: 6/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 108 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 174d | 6 | 4 | ↑0.0/day |
Possible Squatted Stub
|
bitfinex | pypi | 0.1.0 | — marcel@tribulnation.com | tribulnation.com | ||
|
Package purpose: An SDK to connect Bitfinex with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-bitfinex/
Matched naming pattern: python-bitfinex-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 174
Registry downloads: 6/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 106 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 196d | 10 | 2 | ↑0.1/day |
Possible Squatted Stub
|
langchain | pypi | 0.0.1 | — ceo@karonlabs.net | karonlabs.net | ||
|
Package purpose: Karon Web Unblocker — Reserved package. See https://karonlabs.net/api/
Claimed homepage: https://pypi.org/project/karon-langchain/
Matched naming pattern: python-langchain-karon
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 196
Registry downloads: 10/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 82 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 252d | 46 | 14 | ↑0.2/day |
Possible Squatted Stub
|
addon | pypi | 18.0.1.0.0.3 | Binhex, Odoo Community Association (OCA) support@odoo-community.org | odoo-community.org | ||
|
Package purpose: Add Cloudflare Turnstile captcha to login form
Claimed homepage: https://github.com/OCA/website
Matched naming pattern: odoo-addon-website
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 252
Registry downloads: 46/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 602 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 357d | 0 | 16 | ↑0.0/day |
Possible Squatted Stub
|
addon | pypi | 16.0.1.0.0.3 | Coop IT Easy SC, Odoo Community Association (OCA) support@odoo-community.org | odoo-community.org | ||
|
Package purpose: Load new partner data during a POS sale
Claimed homepage: https://github.com/OCA/pos
Matched naming pattern: odoo-addon-pos
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 357
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 16 lines, 716 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 27 | 362d | 56 | 22 | ↑0.2/day |
Possible Squatted Stub
|
base | pypi | 18.0.1.0.0.4 | =?utf-8?q?Heligr=C3=A0fics_Fotogrametr=C3=ADa_S=2EL=2E=2C_Odoo_Community_Association_=28OCA=29?= support@odoo-community.org | odoo-community.org | ||
|
Package purpose: Integration between base_fontawesome and web_editor for FontAwesome >= 6.7.2 support.
Claimed homepage: https://github.com/OCA/server-tools
Matched naming pattern: odoo-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 362
Registry downloads: 56/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 22 lines, 948 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 30 | 5d | — | — | — |
Very Risky
|
— | pypi | 0.3.1 | LuminariSoftwares | — | 🪝 | |
|
Package purpose: Is this codebase safe to run, will it work, and is it complete? Deterministic Safe, Works and Complete scores with an A-F grade, from static analysis only, plus a verify loop for AI-assisted changes: baseline, repair plan, before/after diff. The code is never run.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 30 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Venus | — | 🪝 | |
|
Package purpose: Vue-native <DataTable> on TanStack Table and TanStack Virtual: sorting, filtering, pagination, selection, pinning, inline editing, and adaptive row virtualization. The Vue port of @coldsmirk/ledger-mantine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Authenticated UserReason onboarding and management CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 全局安装 UltraStiching CLI、配置支持的 MCP，并提供通用 Skill 安装资源
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Champion Trade Design System — shadcn/ui components with Tailwind CSS v4
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: This package renders the shared temporary `~/.hostpilot/launcher-caddy/Caddyfile` using `src/templates/Caddyfile.hbs` and Handlebars. The renderer validates all target values before passing them to the template, which is copied into `dist` when building t
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Optional Cursor capture hooks using the canonical Unshadow SDK
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Opeyemi Oginni | — | 🪝 | |
|
Package purpose: Slack bot that runs a coding agent on your repository in a GitTerm sandbox
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Servidor MCP da DS9: expõe skills e subagentes oficiais para qualquer IDE/LLM com suporte a MCP
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Studio native CSS Lightpanda binary
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Workser's coding engine for the 'loop in our service' mode: OpenCode's agent contract (its prompts, tool schemas and edit semantics, vendored from v1.18.23) running on Node, with every file and shell action going through a Place — so the machine can be a
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Scaffold a new Grain project
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | BLACKLINE CONSULTING d.o.o. | d.o.o | 🪝 | |
|
Package purpose: Official TypeScript SDK for the FAST platform - Skill Challenge engine for sportsbook operators
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Seithr v6 Compiler - AST reactivity transform and Vite HMR plugin
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Seithr v6 CLI - Zero-ceremony scaffolding CLI engine for next-generation reactive applications
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Severin MARCOMBES | — | 🪝 | |
|
Package purpose: The connection string for a MongoDB database, credentials included, and which database in it to use.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Severin MARCOMBES | — | 🪝 | |
|
Package purpose: An API key for OpenAI, or for any OpenAI-compatible gateway named by a base URL.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Severin MARCOMBES | — | 🪝 | |
|
Package purpose: A connection string for Redis: a shared table every instance of a deployment can see.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Severin MARCOMBES | — | 🪝 | |
|
Package purpose: A bucket and a key pair for any S3-compatible store: AWS, Cloudflare R2, Backblaze, MinIO, Tigris.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Severin MARCOMBES | — | 🪝 | |
|
Package purpose: A Supabase project's URL, its service-role key and the Postgres connection string behind it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||