Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 590 | 44d | 1,177 | 101,402 | ↑26.8/day |
🚨 Possible Stealer
Very Risky
|
cordon | pypi | 0.6.0 | — oluwatosin.amokeodo@gmail.com | gmail.com | 🪝 ⚡ | |
|
Package purpose: Language-agnostic software supply-chain security scanner. Detects malicious packages, suspicious install-time behaviour, secrets and dependency risk across any ecosystem.
Claimed homepage: https://pypi.org/project/cordon-scanner/
Matched naming pattern: python-cordon-scanner
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 44
Registry downloads: 1177/month, 40/week (ACTIVE_COMMUNITY_USE)
Codebase size: 101402 lines, 5.2 MB across 241 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 360 | 41d | 129 | 1,509 | ↑3.1/day |
Very Risky
|
vpspilot | pypi | 1.0.0 | Technology Innovision Team | — | 🪝 | |
|
Package purpose: VPSPilot: The Autonomous Next-Gen VPS Command Center & Online Management Dashboard
Claimed homepage: https://pypi.org/project/vpspilot/
Matched naming pattern: python-vpspilot-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 41
Registry downloads: 129/month, 3/week (MODERATE_USAGE)
Codebase size: 1509 lines, 61.6 kB across 12 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 355 | 28d | 1,181 | 24,027 | ↑42.2/day |
Very Risky
|
lazaret | pypi | 0.1.8 | — | — | 🪝 🗄️ | |
|
Package purpose: Static security, supply-chain and quality analysis for Python, JavaScript and SQL
Claimed homepage: https://pypi.org/project/lazaret/
Matched naming pattern: python-lazaret-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 28
Registry downloads: 1181/month, 38/week (ACTIVE_COMMUNITY_USE)
Codebase size: 24027 lines, 1.4 MB across 41 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 315 | 135d | 0 | 3,903 | ↑0.0/day |
Very Risky
|
azure | pypi | 1.0.0 | Cisco Systems Inc. c8kv-cloud-dev@cisco.com | cisco.com | 🪝 | |
|
Package purpose: Utilities for c8kv on Azure
Claimed homepage: https://github4-chn.cisco.com/csr1000v-azure/c8kv_azure_utils
Matched naming pattern: c8kv-azure-utils
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 135
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 3903 lines, 193.4 kB across 24 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 305 | 29d | 240 | 39,345 | ↑8.3/day |
Very Risky
|
antinel | pypi | 0.55.0 | — geguang@gmail.com | gmail.com | 🪝 | |
|
Package purpose: Local-first audit chain and ledger for AI coding agents: every action recorded, every record verifiable.
Claimed homepage: https://pypi.org/project/antinel/
Matched naming pattern: python-antinel-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 29
Registry downloads: 240/month, 46/week (MODERATE_USAGE)
Codebase size: 39345 lines, 2.9 MB across 65 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 275 | 27d | 136 | 49,598 | ↑5.0/day |
Very Risky
|
hyper | pypi | 0.53.0 | Alex Mextner | — | 🪝 🗄️ | |
|
Package purpose: rig — the dev-environment umbrella driver: set up a repo from a committed rig.yaml by applying agent-tools content (skills, hooks, CI gates, MCP).
Claimed homepage: https://pypi.org/project/hyper-rig/
Matched naming pattern: python-hyper-rig
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 27
Registry downloads: 136/month, 2/week (MODERATE_USAGE)
Codebase size: 49598 lines, 3.1 MB across 137 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 260 | 24d | 406 | 40,095 | ↑16.9/day |
Very Risky
|
pymizan | pypi | 3.1.2 | MIZAN Contributors | — | 🪝 | |
|
Package purpose: Agentic Personal AI - Quranic Cognitive Architecture for human-like reasoning
Claimed homepage: https://pypi.org/project/pymizan/
Matched naming pattern: python-pymizan-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 24
Registry downloads: 406/month, 12/week (MODERATE_USAGE)
Codebase size: 40095 lines, 1.8 MB across 162 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 260 | 31d | 753 | 19,685 | ↑24.3/day |
Very Risky
|
bug | pypi | 6.0.2 | AwareXone | — | 🪝 | |
|
Package purpose: AI-powered bug bounty hunting — recon to report, in your terminal.
Claimed homepage: https://pypi.org/project/agentic-bug-hunter/
Matched naming pattern: agentic-bug-hunter
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 31
Registry downloads: 753/month, 240/week (MODERATE_USAGE)
Codebase size: 19685 lines, 955.5 kB across 69 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 260 | 135d | 0 | 102,049 | ↑0.0/day |
Very Risky
|
tether | pypi | 0.12.0 | FastCrest | — | 🪝 | |
|
Package purpose: FastCrest Tether — edge-to-cloud robotics + edge AI deploy CLI. Optimize, deploy, verify any VLA across Jetson, RTX, Apple Silicon, AMD. Standalone or wired to FastCrest Cloud.
Claimed homepage: https://pypi.org/project/fastcrest-tether/
Matched naming pattern: python-tether-fastcrest
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 135
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 102049 lines, 4.9 MB across 498 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 260 | 172d | 26 | 4,285 | ↑0.2/day |
Very Risky
|
claude | pypi | 0.2.0 | claude-oneclick contributors | — | 🪝 | |
|
Package purpose: VPN-style one-click toggle to route Claude Code (CLI + VSCode) to custom model endpoints (DeepSeek, NVIDIA NIMs, OpenRouter, Ollama, ...).
Claimed homepage: https://pypi.org/project/claude-oneclick/
Matched naming pattern: python-claude-oneclick
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 172
Registry downloads: 26/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4285 lines, 194.9 kB across 20 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 255 | 25d | 64 | 51,742 | ↑2.6/day |
Very Risky
|
aegisctl | pypi | 0.1.0 | — | — | 🪝 🗄️ | |
|
Package purpose: Agent management for your terminal: agents on your own Claude Code, Codex (ChatGPT), Antigravity (Gemini), OpenCode, Hermes or a local model, with no API keys.
Claimed homepage: https://pypi.org/project/aegisctl/
Matched naming pattern: python-aegisctl-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 25
Registry downloads: 64/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 51742 lines, 2.9 MB across 214 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 255 | 127d | 23 | 311 | ↑0.2/day |
🚨 Possible Stealer
Very Risky
|
vllm | pypi | 1.0.2 | — aravindhvignesh58@gmail.com | gmail.com | 🪝 📡 | |
|
Package purpose: The official library for vLLM client network and preflight validation engine.
Claimed homepage: https://pypi.org/project/open-vllm/
Matched naming pattern: python-vllm-open
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 127
Registry downloads: 23/month, 15/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 311 lines, 17.1 kB across 7 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 255 | 157d | 278 | 17,648 | ↑1.8/day |
Very Risky
|
claude | pypi | 0.3.45 | — be2jay67@gmail.com | gmail.com | 🪝 🗄️ | |
|
Package purpose: Personal AI project management hub — North Star milestone tracking, live Claude sessions, CTX context alignment.
Claimed homepage: https://pypi.org/project/claude-ns-hub/
Matched naming pattern: claude-claude-hub
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 157
Registry downloads: 278/month, 25/week (MODERATE_USAGE)
Codebase size: 17648 lines, 1.3 MB across 10 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 255 | 184d | 23 | 19,232 | ↑0.1/day |
Very Risky
|
talisman | pypi | 1.1.0 | MR MARCUS TAYK | — | 🪝 | |
|
Package purpose: TALISMAN — Threat Analysis, Lateral Intelligence & Security Management for Advanced Networks
Claimed homepage: https://pypi.org/project/talisman-recon/
Matched naming pattern: python-talisman-recon
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 184
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 23/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 19232 lines, 865.0 kB across 129 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 255 | 242d | 714 | 37,296 | ↑3.0/day |
Very Risky
|
phantom | pypi | 0.9.218 | Usta0x001 r_gadouri@estin.dz | estin.dz | 🪝 | |
|
Package purpose: Autonomous Offensive Security Intelligence - AI-powered penetration testing
Claimed homepage: https://pypi.org/project/phantom-agent/
Matched naming pattern: python-phantom-agent
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 242
Registry downloads: 714/month, 20/week (MODERATE_USAGE)
Codebase size: 37296 lines, 1.7 MB across 151 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 245 | 140d | 10 | 4,212 | ↑0.1/day |
Very Risky
|
aws | pypi | 0.1.2 | — | — | 🪝 | |
|
Package purpose: Multi AWS tool for managing operations across multiple AWS accounts via SSO
Claimed homepage: https://pypi.org/project/multi-aws-tool/
Matched naming pattern: multi-aws-tool
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 140
Registry downloads: 10/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4212 lines, 217.4 kB across 21 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 245 | 3010d | 23 | 10,276 | ↑0.0/day |
Very Risky
|
azure | pypi | 0.0.5 | Christopher Reder creder@cisco.com | cisco.com | 🪝 | |
|
Package purpose: A library to install Azure Waagent on CSR
Claimed homepage: https://github4-chn.cisco.com/csr1000v-azure/csr_azure_agent
Matched naming pattern: csr-azure-agent
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3010
Registry downloads: 23/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10276 lines, 519.2 kB across 75 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 240 | 23d | 99 | 31,126 | ↑4.3/day |
Very Risky
|
manager | pypi | 0.9.0rc1 | Unified Cache Team | — | 🪝 ⚡ 📦 | |
|
Package purpose: Persist and reuse KV Cache to speedup your LLM.
Claimed homepage: https://pypi.org/project/uc-manager-cann910-a5/
Matched naming pattern: uc-manager-cann910
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 23
Registry downloads: 99/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 31126 lines, 1.5 MB across 295 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 240 | 23d | 99 | 31,126 | ↑4.3/day |
Very Risky
|
manager | pypi | 0.9.0rc1 | Unified Cache Team | — | 🪝 ⚡ 📦 | |
|
Package purpose: Persist and reuse KV Cache to speedup your LLM.
Claimed homepage: https://pypi.org/project/uc-manager-cann901-a5/
Matched naming pattern: uc-manager-cann901
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 23
Registry downloads: 99/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 31126 lines, 1.5 MB across 295 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 235 | 41d | 2,819 | 4,041 | ↑68.8/day |
Very Risky
|
notbefore | pypi | 0.16.1 | docdailey | — | 🪝 | |
|
Package purpose: NotBefore: verify an hourly commit-then-reveal seed from the public qrng-beacon-log and derive labeled seeds, shuffles and splits from it — with a pinned, vendored verifier.
Claimed homepage: https://pypi.org/project/notbefore/
Matched naming pattern: python-notbefore-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 41
Registry downloads: 2819/month, 142/week (ACTIVE_COMMUNITY_USE)
Codebase size: 4041 lines, 352.1 kB across 34 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 225 | 17d | 0 | 21,908 | ↑0.0/day |
Very Risky
|
forexsmartbot | pypi | 3.2.0 | — contact@voxhash.dev | voxhash.dev | 🪝 | |
|
Package purpose: Professional forex trading bot with advanced risk management and strategy plugins
Claimed homepage: https://pypi.org/project/forexsmartbot/
Matched naming pattern: python-forexsmartbot-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 17
Registry downloads: 0/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21908 lines, 1.2 MB across 123 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 225 | 521d | 0 | 41,485 | ↑0.0/day |
Very Risky
|
llama | pypi | 0.94.0 | Shamit Verma oss@shamit.in | shamit.in | 🪝 | |
|
Package purpose: A Python package for Llama CPP.
Claimed homepage: https://github.com/shamitv/llama_cpp
Matched naming pattern: llama-llama-pydist
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 521
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 41485 lines, 2.3 MB across 155 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 220 | 16d | 0 | 21,033 | ↑0.0/day |
Very Risky
|
myra | pypi | 0.1.5 | — support@codeninjavik.in | codeninjavik.in | 🪝 | |
|
Package purpose: MYRA AI Assistant for Linux — same desktop UI, Gemini Live voice, 148+ languages and Linux system control.
Claimed homepage: https://pypi.org/project/myra-linux/
Matched naming pattern: python-myra-linux
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 16
Registry downloads: 0/month, 53/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21033 lines, 1.2 MB across 61 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 220 | 235d | 49 | 52 | ↑0.2/day |
Very Risky
|
copilot | pypi | 0.1.12 | — khaerul@example.com | example.com | 🪝 ⚡ | |
|
Package purpose: GitHub Copilot agents for AI-assisted software development
Claimed homepage: https://pypi.org/project/swe-copilot-agents/
Matched naming pattern: swe-copilot-agents
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 235
Registry downloads: 49/month, 17/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 52 lines, 1.8 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 215 | 454d | 7,131 | 128,928 | ↑15.7/day |
Very Risky
|
claude | pypi | 6.5.83 | Claude MPM Team bob@matsuoka.com | matsuoka.com | 🪝 | |
|
Package purpose: Claude Code workflow and agent management framework - Multi-agent orchestration, skills system, MCP integration, session management, and semantic code search for AI-powered development
Claimed homepage: https://pypi.org/project/claude-mpm/
Matched naming pattern: python-claude-mpm
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 454
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7131/month, 1299/week (ACTIVE_COMMUNITY_USE)
Codebase size: 128928 lines, 6.3 MB across 1043 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 205 | 31d | 9,772 | 28,496 | ↑315.2/day |
Very Risky
|
pydeno | pypi | 0.13.2 | — xin@imfing.com | imfing.com | 🪝 | |
|
Package purpose: Modern embedded JavaScript runtime for Python powered by V8 and Rust.
Claimed homepage: https://pypi.org/project/pydeno/
Matched naming pattern: python-pydeno-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 31
Registry downloads: 9772/month, 2818/week (ACTIVE_COMMUNITY_USE)
Codebase size: 28496 lines, 1.4 MB across 65 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 205 | 47d | 1,575 | 62,812 | ↑33.5/day |
Very Risky
|
auto | pypi | 0.1.10 | Ashish Yadav | — | 🪝 | |
|
Package purpose: Auto-Use: an AI agent that operates your computer, shell, browser and iPhone
Claimed homepage: https://pypi.org/project/auto-use/
Matched naming pattern: python-auto-use
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 47
Registry downloads: 1575/month, 32/week (ACTIVE_COMMUNITY_USE)
Codebase size: 62812 lines, 3.9 MB across 252 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 205 | 50d | 1,389 | 3,148 | ↑27.8/day |
Very Risky
|
pyrecrawl | pypi | 0.8.1 | Alexander Jay | — | 🪝 | |
|
Package purpose: Web browsing superpowers for AI agents: one MCP tool to scrape, extract, crawl, map, and search any site — self-hosted, no API keys, with a smart auto-fallback ladder.
Claimed homepage: https://pypi.org/project/pyrecrawl/
Matched naming pattern: python-pyrecrawl-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 50
Registry downloads: 1389/month, 76/week (ACTIVE_COMMUNITY_USE)
Codebase size: 3148 lines, 151.3 kB across 10 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 205 | 218d | 9 | 126,693 | ↑0.0/day |
Very Risky
|
vllm | pypi | 0.17.2.post1 | vLLM Team | — | 🪝 | |
|
Package purpose: A high-throughput and memory-efficient inference and serving engine for LLMs
Claimed homepage: https://pypi.org/project/vllm-hust/
Matched naming pattern: python-vllm-hust
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 218
Code-only verdict: SUSPICIOUS (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 126693 lines, 5.7 MB across 1606 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 200 | 19d | 119 | 20,121 | ↑6.3/day |
Very Risky
|
flowocr | pypi | 0.1.0 | caca2331 | — | 🪝 | |
|
Package purpose: 从视频里抽全部屏幕文字、带起止时间、按区域聚类，导出 SRT / ASS
Claimed homepage: https://pypi.org/project/flowocr/
Matched naming pattern: python-flowocr-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 19
Registry downloads: 119/month, 16/week (MODERATE_USAGE)
Codebase size: 20121 lines, 1.4 MB across 82 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 190 | 380d | 10 | 124,889 | ↑0.0/day |
Very Risky
|
vllm | pypi | 1.0.0 | vLLM Team | — | 🪝 | |
|
Package purpose: A high-throughput and memory-efficient inference and serving engine for LLMs
Claimed homepage: https://pypi.org/project/vllm-fixed/
Matched naming pattern: python-vllm-fixed
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 380
Code-only verdict: SUSPICIOUS (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 124889 lines, 6.2 MB across 788 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 190 | 864d | 21 | 27 | ↑0.0/day |
🚨 Possible Stealer
Very Risky
|
aws | pypi | 0.0.2 | Ash Bond | — | 🪝 📡 | |
|
Package purpose: Package to handle your cloud infrastructure
Claimed homepage: https://pypi.org/project/aws-ansible-sdk/
Matched naming pattern: aws-aws-sdk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 864
Registry downloads: 21/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 27 lines, 909 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 190 | 1707d | 11 | 176 | ↑0.0/day |
Very Risky
|
pypi | 8.0.1.0.0.99.dev5 | Akretion | — | 🪝 ⚡ | ||
|
Package purpose: Export your product in google shopping
Claimed homepage: https://www.akretion.com
Matched naming pattern: odoo8-google-shopinvader
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1707
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 176 lines, 7.7 kB across 8 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 190 | 1707d | 7 | 56 | ↑0.0/day |
Very Risky
|
stripe | pypi | 8.0.1.0.0.99.dev6 | Akretion | — | 🪝 ⚡ | |
|
Package purpose: Shopinvader Stripe Payment Gateway
Claimed homepage: https://akretion.com
Matched naming pattern: odoo8-stripe-shopinvader
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1707
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 56 lines, 2.3 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 190 | 3482d | 20 | 31 | ↑0.0/day |
Very Risky
|
pypi | 9.0.1.0.0 | ABF OSIELL, Odoo Community Association (OCA) support@odoo-community.org | odoo-community.org | 🪝 ⚡ | ||
|
Package purpose: Add support for Google Tag Manager
Claimed homepage: https://pypi.org/project/odoo9-addon-website-google-tag-manager/
Matched naming pattern: odoo9-google-website
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3482
Registry downloads: 20/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 31 lines, 1.4 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 185 | 19d | 288 | 5,864 | ↑15.2/day |
Very Risky
|
test | pypi | 1.0.4 | Qmpass | — | 🪝 | |
|
Package purpose: Run your Qmpass automated tests on your own machines, securely connected to your Jira projects.
Claimed homepage: https://pypi.org/project/qmpass-test-agent/
Matched naming pattern: qmpass-test-agent
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 19
Code-only verdict: SUSPICIOUS (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 288/month, 30/week (MODERATE_USAGE)
Codebase size: 5864 lines, 255.7 kB across 45 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 185 | 26d | 215 | 2,388 | ↑8.3/day |
Very Risky
|
sentinel | pypi | 0.5.0 | — theabsolutesmartest@gmail.com | gmail.com | 🪝 | |
|
Package purpose: tiny folder watchdog that spots ransomware-ish behavior
Claimed homepage: https://pypi.org/project/sentinel-watch/
Matched naming pattern: python-sentinel-watch
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 26
Registry downloads: 215/month, 6/week (MODERATE_USAGE)
Codebase size: 2388 lines, 89.6 kB across 21 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 185 | 44d | 660 | 8,019 | ↑15.0/day |
Very Risky
|
auth | pypi | 0.0.6 | xhluca | — | 🪝 | |
|
Package purpose: Switch Claude subscriptions and API-provider keys from Claude Code
Claimed homepage: https://pypi.org/project/claude-auth-manager/
Matched naming pattern: claude-auth-manager
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 44
Registry downloads: 660/month, 31/week (MODERATE_USAGE)
Codebase size: 8019 lines, 340.6 kB across 33 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 185 | 146d | 22 | 81 | ↑0.2/day |
Very Risky
|
langchain | pypi | 0.1.0 | — | — | 🪝 | |
|
Package purpose: LangChain integration for Nomad headless browser engine — 700× cheaper than Chrome
Claimed homepage: https://pypi.org/project/langchain-nomad/
Matched naming pattern: python-langchain-nomad
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 146
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 22/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 81 lines, 3.7 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 185 | 166d | 9,315 | 45,590 | ↑56.1/day |
Very Risky
|
cpp | pypi | 11434.0.0 | — vladlearns@gmail.com | gmail.com | 🪝 | |
|
Package purpose: llama.cpp server binary built from source
Claimed homepage: https://pypi.org/project/llama-cpp-bin/
Matched naming pattern: llama-cpp-bin
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 166
Registry downloads: 9315/month, 641/week (ACTIVE_COMMUNITY_USE)
Codebase size: 45590 lines, 2.5 MB across 160 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 185 | 666d | 594 | 18,376 | ↑0.9/day |
Very Risky
|
llama | pypi | 0.1.4 | — staneyffer@gmail.com | gmail.com | 🪝 | |
|
Package purpose: Add your description here
Claimed homepage: https://pypi.org/project/llama-cpp-server-py-core/
Matched naming pattern: llama-llama-server
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 666
Registry downloads: 594/month, 62/week (MODERATE_USAGE)
Codebase size: 18376 lines, 1.0 MB across 44 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 180 | 10d | 0 | 18,675 | ↑0.0/day |
Very Risky
|
vortfoil | pypi | 2.0.0 | Sang-Hyun Rhie, Gyuwon Kim, Suhyeong Lim, Jeongsu Lee | — | 🪝 | |
|
Package purpose: A vortex-panel-informed neural operator for steady airfoil flow: surface pressure, lift, moment and the stagnation point from a predicted vortex sheet, drag and a lift correction from a parallel boundary-layer state
Claimed homepage: https://pypi.org/project/vortfoil/
Matched naming pattern: python-vortfoil-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 10
Registry downloads: 0/month, 142/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 18675 lines, 1.2 MB across 83 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 180 | 15d | 0 | 842 | ↑0.0/day |
Very Risky
|
task | pypi | 2026.10.9.1 | Ophix Project | — | 🪝 | |
|
Package purpose: Crontab Tier 2 client for ophix-tasks — applies task schedules to /etc/cron.d
Claimed homepage: https://pypi.org/project/ophix-task-crontab/
Matched naming pattern: ophix-task-crontab
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 15
Registry downloads: 0/month, 20/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 842 lines, 40.1 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 180 | 15d | 0 | 19,678 | ↑0.0/day |
Very Risky
|
sentinelseo | pypi | 1.0.0 | — me@iliassami.com | iliassami.com | 🪝 | |
|
Package purpose: Scrawly: free, open-source technical SEO and GEO crawler and site audit tool (a free alternative to paid desktop SEO crawlers), with safe, reversible WordPress fixes.
Claimed homepage: https://pypi.org/project/sentinelseo/
Matched naming pattern: python-sentinelseo-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 15
Registry downloads: 0/month, 51/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 19678 lines, 893.5 kB across 111 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 175 | 36d | 2,815 | 12,233 | ↑78.2/day |
Very Risky
|
reprollm | pypi | 0.6.1 | ReproLLM maintainers | — | 🪝 | |
|
Package purpose: A reproducibility linter, experiment recorder, lockfile system, and drift detector for LLM research.
Claimed homepage: https://pypi.org/project/reprollm/
Matched naming pattern: python-reprollm-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 36
Registry downloads: 2815/month, 96/week (ACTIVE_COMMUNITY_USE)
Codebase size: 12233 lines, 513.0 kB across 122 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 175 | 47d | 8,140 | 43,304 | ↑173.2/day |
Very Risky
|
aisef | pypi | 2.0.0 | — | — | 🪝 | |
|
Package purpose: AISEF — AI Software Engineering Framework: input is docs/requirements.md, output is gate-verified code with SHA-bound evidence
Claimed homepage: https://pypi.org/project/aisef/
Matched naming pattern: python-aisef-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 47
Registry downloads: 8140/month, 68/week (ACTIVE_COMMUNITY_USE)
Codebase size: 43304 lines, 2.6 MB across 193 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 170 | 21d | 189 | 345 | ↑9.0/day |
Very Risky
|
data | pypi | 0.8.0 | — support@safenai.io | safenai.io | 🪝 | |
|
Package purpose: Generative inpaint transformation (LaMa) and the associated tool-model plugin for kcai data-sampling
Claimed homepage: https://pypi.org/project/kcai-data-sampling-lama/
Matched naming pattern: kcai-data-sampling
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 21
Registry downloads: 189/month, 15/week (MODERATE_USAGE)
Codebase size: 345 lines, 16.8 kB across 11 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 170 | 23d | 739 | 965 | ↑32.1/day |
Very Risky
|
abstract | pypi | 0.1.5 | — partners@abstractendeavors.com | abstractendeavors.com | 🪝 | |
|
Package purpose: Secure Files: share local files and folders through abstractendeavors.com (or your own server) without uploading them. Includes the desktop agent, the shared tar/resume core and the server relay.
Claimed homepage: https://pypi.org/project/abstract-securefiles/
Matched naming pattern: python-abstract-securefiles
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 23
Registry downloads: 739/month, 23/week (MODERATE_USAGE)
Codebase size: 965 lines, 45.6 kB across 11 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 170 | 27d | 662 | 2,636 | ↑24.5/day |
Very Risky
|
backup | pypi | 3.3.0 | — gene_wood@public.cementhorizon.com | public.cementhorizon.com | 🪝 | |
|
Package purpose: Runs a scheduled Duplicacy backup and reports progress to healthchecks.io.
Claimed homepage: https://pypi.org/project/duplicacy-backup-runner/
Matched naming pattern: duplicacy-backup-runner
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 27
Registry downloads: 662/month, 17/week (MODERATE_USAGE)
Codebase size: 2636 lines, 110.8 kB across 3 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 170 | 29d | 801 | 6,866 | ↑27.6/day |
Very Risky
|
poppy | pypi | 0.5.1 | dbmrq | — | 🪝 | |
|
Package purpose: Turn coding-agent session history into reviewed skills, memories, and rules.
Claimed homepage: https://pypi.org/project/poppy-ai/
Matched naming pattern: python-poppy-ai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 29
Registry downloads: 801/month, 32/week (MODERATE_USAGE)
Codebase size: 6866 lines, 295.5 kB across 27 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||