🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
140 3481d 18 308 ↑0.0/day
Very Risky
base pypi 10.0.2.0.0 Daniel Reis, LasLabs, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: External Database Sources
Claimed homepage: https://github.com/OCA/server-tools
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3481
Registry downloads: 18/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 308 lines, 12.9 kB across 5 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 3452 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_external_dbsource-10.0.2.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo',));ie = os.path.exists(os.path.joi'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_external_dbsource-10.0.2.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo',));ie = os.path.exists(os.path.joi'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_external_dbsource-10.0.2.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo', 'addons'));ie = os.path.exists(os'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_external_dbsource-10.0.2.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo', 'addons'));ie = os.path.exists(os'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_external_dbsource-10.0.2.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo',));ie = os.path.exists(os.path.joi'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_external_dbsource-10.0.2.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo',));ie = os.path.exists(os.path.joi'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_external_dbsource-10.0.2.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo', 'addons'));ie = os.path.exists(os'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_external_dbsource-10.0.2.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo', 'addons'));ie = os.path.exists(os'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
137 20d 7,919 17,190 ↑395.9/day
Very Risky
juanpiecedev npm latest JuanPiece — 🪝 🗄️
Package purpose: jpcode — el CLI de código de JuanPiece: pinta de Claude Code, modelos gratis y tu propia API key, con gateway local.
Claimed homepage: https://github.com/SoyJuanPiece/jpcode-cli#readme
Matched naming pattern: node-juanpiecedev-jpcode
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 20
Code-only verdict: SUSPICIOUS (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7919/month, 1979/week (ACTIVE_COMMUNITY_USE)
Codebase size: 17190 lines, 20.6 MB across 1037 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (13 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.mjs'
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/engine/chunks/acpAgent-UCU7OI47.js:71 (+26 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/engine/chunks/acpAgent-UCU7OI47.js:52 (+112 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/engine/chunks/anthropicContentGenerator-KXWARK3M.js:3 (+6 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/engine/chunks/chunk-2J5T4I5M.js:3 (+18 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/engine/chunks/chunk-2UOMCYQG.js:10 (+15 more occurrence(s) elsewhere)
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.mjs'
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/engine/chunks/acpAgent-UCU7OI47.js:71 (+26 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/engine/chunks/acpAgent-UCU7OI47.js:52 (+112 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/engine/chunks/anthropicContentGenerator-KXWARK3M.js:3 (+6 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/engine/chunks/chunk-2J5T4I5M.js:3 (+18 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/engine/chunks/chunk-2UOMCYQG.js:10 (+15 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/engine/chunks/chunk-2UOMCYQG.js:10 (+5 more occurrence(s) elsewhere)
  • ANTI_ANALYSIS_EVASION: 'CI/CD & Sandbox Environment Detection' found in package/engine/chunks/chunk-3YWXKSOI.js:3 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
137 86d 7,607 8,955 ↑88.5/day
🐛 Potential Cross-Ecosystem Worm Very Risky
polyrouter npm latest — — 🪝 🐛 🗄️
Package purpose: Local AI gateway and OpenAI-compatible API router for AI coding tools and 40+ providers
Matched naming pattern: node-polyrouter-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 86
Registry downloads: 7607/month, 1901/week (ACTIVE_COMMUNITY_USE)
Codebase size: 8955 lines, 17.3 MB across 871 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (84 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node hooks/postinstall.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/app/.next-cli-build/server/chunks/1199.js:1 (+58 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/app/.next-cli-build/static/chunks/1321-3c7da73fa903f7f1.js:1 (+93 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/app/.next-cli-build/server/chunks/1517.js:1 (+10 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/app/.next-cli-build/server/chunks/2680.js:20 (+9 more occurrence(s) elsewhere)
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node hooks/postinstall.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/app/.next-cli-build/server/chunks/1199.js:1 (+58 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/app/.next-cli-build/static/chunks/1321-3c7da73fa903f7f1.js:1 (+93 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/app/.next-cli-build/server/chunks/1517.js:1 (+10 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/app/.next-cli-build/server/chunks/2680.js:20 (+9 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/app/.next-cli-build/server/chunks/3084.js:1 (+5 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'Browser Vaults & Password Databases' found in package/app/.next-cli-build/server/chunks/3127.js:14

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
135 61d 20 203 ↑0.3/day
Very Risky
careerstudiomax pypi 1.0.0 CloudooAI Solution api@careerstudiomax.com careerstudiomax.com 🪝
Package purpose: Official Python SDK for CAMP — Career AI Model Platform, 7 career-native model families
Claimed homepage: https://camp.careerstudiomax.com
Matched naming pattern: python-careerstudiomax-camp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 61
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 20/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 203 lines, 9.2 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPublisher email domain '@careerstudiomax.com' matches package identifier token 'careerstudiomax', verifying identifiable third-party organization ownership.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (52 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in careerstudiomax_camp-1.0.0/setup.py:7
Static code signals:
  • OBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in careerstudiomax_camp-1.0.0/setup.py:7

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
135 71d 65 4,346 ↑0.9/day
Very Risky
hookdeck pypi 1.0.1 — support@hookdeck.com hookdeck.com 🪝
Package purpose: Hookdeck event gateway plugin for Hermes Agent — verified, queued, retryable webhook triggers
Claimed homepage: https://pypi.org/project/hermes-hookdeck/
Matched naming pattern: python-hookdeck-hermes
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 71
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 65/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4346 lines, 218.6 kB across 18 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPublisher email domain '@hookdeck.com' matches package identifier token 'hookdeck', verifying identifiable third-party organization ownership.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (60 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in hermes_hookdeck-1.0.1/_build/hermes_build.py:53
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in hermes_hookdeck-1.0.1/hookdeck/adapter.py:1305
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in hermes_hookdeck-1.0.1/hookdeck/cli.py:58
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in hermes_hookdeck-1.0.1/hookdeck/cli.py:496
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in hermes_hookdeck-1.0.1/hookdeck/cli.py:81
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in hermes_hookdeck-1.0.1/_build/hermes_build.py:53
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in hermes_hookdeck-1.0.1/hookdeck/adapter.py:1305
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in hermes_hookdeck-1.0.1/hookdeck/cli.py:58
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in hermes_hookdeck-1.0.1/hookdeck/cli.py:496
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in hermes_hookdeck-1.0.1/hookdeck/cli.py:81
  • EXFILTRATION_DESTINATION_DETECTED: 'OAST / Callback Service' found in hermes_hookdeck-1.0.1/hookdeck/constants.py:163
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in hermes_hookdeck-1.0.1/hookdeck/constants.py:49
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in hermes_hookdeck-1.0.1/hookdeck/ledger.py:56

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
135 80d 190 7,333 ↑2.4/day
🐛 Potential Cross-Ecosystem Worm Very Risky
9routerchi npm 0.5.69 chinene123 — 🪝 🐛 🗄️
Package purpose: 9RouterChi CLI - Start and manage the customized 9Router server
Claimed homepage: https://github.com/chinene123/9router#readme
Matched naming pattern: node-9routerchi-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 80
Registry downloads: 190/month, 47/week (MODERATE_USAGE)
Codebase size: 7333 lines, 10.4 MB across 703 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (67 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node hooks/postinstall.js'
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/app/.next-cli-build/server/chunks/1260.js:1 (+48 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/app/.next-cli-build/static/chunks/1321-08a266fa188e0427.js:1 (+74 more occurrence(s) elsewhere)
  • HIGHSUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/app/.next-cli-build/server/chunks/318.js:9 (+4 more occurrence(s) elsewhere)
  • HIGHCREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/app/.next-cli-build/server/chunks/3193.js:1 (+3 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/app/.next-cli-build/server/chunks/3558.js:1 (+3 more occurrence(s) elsewhere)
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node hooks/postinstall.js'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/app/.next-cli-build/server/chunks/1260.js:1 (+48 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/app/.next-cli-build/static/chunks/1321-08a266fa188e0427.js:1 (+74 more occurrence(s) elsewhere)
  • SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/app/.next-cli-build/server/chunks/318.js:9 (+4 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/app/.next-cli-build/server/chunks/3193.js:1 (+3 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/app/.next-cli-build/server/chunks/3558.js:1 (+3 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'process.binding/mainModule' found in package/app/.next-cli-build/static/chunks/3794-1b03b52e3112452e.js:1 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/app/.next-cli-build/server/chunks/4049.js:1 (+6 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
135 101d 540 2,297 ↑5.3/day
Very Risky
readmagic npm latest Frandy — 🪝 🌐 📡 🗄️
Package purpose: workMate
Claimed homepage: https://github.com/readmagic/workMate#readme
Matched naming pattern: node-readmagic-workmate
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 101
Registry downloads: 540/month, 135/week (MODERATE_USAGE)
Codebase size: 2297 lines, 7.8 MB across 363 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (83 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.cjs'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/postinstall.cjs:27
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.cjs:137 (+2 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/postinstall.cjs:164 (+10 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.cjs:46 (+84 more occurrence(s) elsewhere)
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.cjs'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/postinstall.cjs:27
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.cjs:137 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/postinstall.cjs:164 (+10 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.cjs:46 (+84 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in package/dist/chunks/config-BSXLgwpD.js:1 (+5 more occurrence(s) elsewhere)
  • ANTI_ANALYSIS_EVASION: 'CI/CD & Sandbox Environment Detection' found in package/dist/chunks/dist-CXlEpGqr.js:20 (+5 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/dist/chunks/dist-es-BSRN-2nA.js:1 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
135 197d 7 225 ↑0.0/day
Very Risky
langchain pypi 0.1.0 Jared jared@viatoris.ai viatoris.ai 🪝
Package purpose: LangChain callback handler for Viatoris — emit a signed Viatoris receipt for every LangChain tool call
Claimed homepage: https://viatoris.ai
Matched naming pattern: python-langchain-viatoris
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 197
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 225 lines, 8.3 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'viatoris-langchain' matches AI hallucination template [python] + [langchain] + [viatoris].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • INFOPublisher email domain '@viatoris.ai' matches package identifier token 'viatoris', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (172 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in viatoris_langchain-0.1.0/setup.py:9
Static code signals:
  • OBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in viatoris_langchain-0.1.0/setup.py:9

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
130 24d 343 9,141 ↑14.3/day
Very Risky
repocanary npm latest Chris Zemmel chris@zyric.de zyric.de 🪝 🗄️
Package purpose: Checks a GitHub repository for the known signatures of fake-job-interview malware, without ever running its code.
Claimed homepage: https://repocanary.com
Matched naming pattern: node-repocanary-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 24
Registry downloads: 343/month, 85/week (MODERATE_USAGE)
Codebase size: 9141 lines, 494.7 kB across 18 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (22 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/ai.js:373 (+5 more occurrence(s) elsewhere)
  • HIGHCREDENTIAL_PATH_HARVESTING: 'AWS Credentials (~/.aws/credentials)' found in package/src/code.js:622 (+1 more occurrence(s) elsewhere)
  • HIGHCREDENTIAL_PATH_HARVESTING: 'Kube / Docker Credentials' found in package/src/code.js:672
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/src/code.js:275
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/code.js:809 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/code.js:590
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/ai.js:373 (+5 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'AWS Credentials (~/.aws/credentials)' found in package/src/code.js:622 (+1 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'Kube / Docker Credentials' found in package/src/code.js:672
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/src/code.js:275
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/code.js:809 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/code.js:590
  • SOURCE_CODE_DYNAMIC_CODE_LOADER: execution primitive combined with decode/network/obfuscation call in package/src/code.js
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in package/src/ecosystems.js:704

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
130 109d 3,478 42,071 ↑31.9/day
Very Risky
durindoor npm latest — — 🪝 🗄️
Package purpose: DurinDoor CLI - Start and manage DurinDoor server
Matched naming pattern: node-durindoor-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 109
Code-only verdict: SUSPICIOUS (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 3478/month, 869/week (ACTIVE_COMMUNITY_USE)
Codebase size: 42071 lines, 15.8 MB across 1908 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (101 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node hooks/postinstall.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/app/open-sse/handlers/imageProviders/_base.js:24 (+67 more occurrence(s) elsewhere)
  • HIGHCREDENTIAL_PATH_HARVESTING: 'AWS Credentials (~/.aws/credentials)' found in package/app/.next-cli-build/server/chunks/12741.js:4 (+5 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/app/.next-cli-build/server/chunks/1331.js:1 (+112 more occurrence(s) elsewhere)
  • HIGHSUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/app/.next-cli-build/server/chunks/15846.js:45 (+8 more occurrence(s) elsewhere)
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node hooks/postinstall.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/app/open-sse/handlers/imageProviders/_base.js:24 (+67 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'AWS Credentials (~/.aws/credentials)' found in package/app/.next-cli-build/server/chunks/12741.js:4 (+5 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/app/.next-cli-build/server/chunks/1331.js:1 (+112 more occurrence(s) elsewhere)
  • SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/app/.next-cli-build/server/chunks/15846.js:45 (+8 more occurrence(s) elsewhere)
  • ANTI_ANALYSIS_EVASION: 'CI/CD & Sandbox Environment Detection' found in package/app/.next-cli-build/server/chunks/15846.js:1 (+4 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/app/.next-cli-build/server/chunks/15962.js:1 (+21 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
130 159d 3,824 7,087 ↑24.1/day
🐛 Potential Cross-Ecosystem Worm Very Risky
ltgiang npm latest — — 🪝 🐛 🗄️
Package purpose: 9Router CLI - Start and manage 9Router server
Matched naming pattern: node-ltgiang-9router
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 159
Registry downloads: 3824/month, 956/week (ACTIVE_COMMUNITY_USE)
Codebase size: 7087 lines, 12.4 MB across 712 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (142 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node hooks/postinstall.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/app/.next-cli-build/server/chunks/119.js:1 (+48 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/app/.next-cli-build/static/chunks/1321-8cfbada10a6cc174.js:1 (+72 more occurrence(s) elsewhere)
  • HIGHSUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/app/.next-cli-build/server/chunks/1435.js:1 (+4 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/app/.next-cli-build/server/chunks/1665.js:1 (+5 more occurrence(s) elsewhere)
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node hooks/postinstall.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/app/.next-cli-build/server/chunks/119.js:1 (+48 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/app/.next-cli-build/static/chunks/1321-8cfbada10a6cc174.js:1 (+72 more occurrence(s) elsewhere)
  • SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/app/.next-cli-build/server/chunks/1435.js:1 (+4 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/app/.next-cli-build/server/chunks/1665.js:1 (+5 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/app/.next-cli-build/server/chunks/1751.js:1 (+3 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/app/.next-cli-build/server/chunks/1961.js:39 (+9 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
130 215d 40 3,391 ↑0.2/day
Very Risky
ledger pypi 4.3.0 — — 🪝
Package purpose: Verifiable agent receipts with knowledge graph trust scoring
Claimed homepage: https://pypi.org/project/nexus-ledger/
Matched naming pattern: python-ledger-nexus
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 215
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 40/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 3391 lines, 152.9 kB across 17 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'nexus-ledger' matches AI hallucination template [python] + [ledger] + [nexus].
  • HIGHClaims critical enterprise brand identity ('LEDGER').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 201 days ago within the 1-year AI tool proliferation window.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in nexus_ledger-4.3.0/nexus_ledger/erc8004.py:14
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in nexus_ledger-4.3.0/nexus_ledger/eth_anchor.py:84
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in nexus_ledger-4.3.0/nexus_ledger/proof_anchor.py:54
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in nexus_ledger-4.3.0/nexus_ledger/relay_manager.py:13
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in nexus_ledger-4.3.0/nexus_ledger/erc8004.py:14
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in nexus_ledger-4.3.0/nexus_ledger/eth_anchor.py:84
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in nexus_ledger-4.3.0/nexus_ledger/proof_anchor.py:54
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in nexus_ledger-4.3.0/nexus_ledger/relay_manager.py:13
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in nexus_ledger-4.3.0/nexus_ledger/relay_manager.py:13

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
130 576d 20 115 ↑0.0/day
Very Risky
openai pypi 1.0.0 Raj Aryan raj@klopudstac.com klopudstac.com 🪝 📡
Package purpose: A Python wrapper for OpenAI-like API with custom access key management
Claimed homepage: https://github.com/mr-rsr/ks_openai
Matched naming pattern: python-openai-ks
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 576
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 20/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 115 lines, 4.1 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'ks-openai' matches AI hallucination template [python] + [openai] + [ks].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'raj@klopudstac.com' is not affiliated with official vendor domain.
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in ks_openai-1.0.0/ks_openai/api.py:57
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ks_openai-1.0.0/ks_openai/api.py:53
Static code signals:
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in ks_openai-1.0.0/ks_openai/api.py:57
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ks_openai-1.0.0/ks_openai/api.py:53

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
130 3481d 176 273 ↑0.1/day
Very Risky
base pypi 10.0.4.1.1 Akretion, Sodexis, Camptocamp, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: This module provide an abstract model to manage customizable exceptions to be applied on different models (sale order, invoice, ...)
Claimed homepage: http://www.akretion.com
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3481
Registry downloads: 176/month, 55/week (MODERATE_USAGE)
Codebase size: 273 lines, 13.7 kB across 8 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3467 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_exception-10.0.4.1.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_exception-10.0.4.1.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_exception-10.0.4.1.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_exception-10.0.4.1.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_exception-10.0.4.1.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_exception-10.0.4.1.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • HIGHSYNTAX_ERROR_IN_odoo/addons/base_exception/models/base_exception.py: multiple exception types must be parenthesized (<unknown>, line 168)
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_exception-10.0.4.1.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_exception-10.0.4.1.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_exception-10.0.4.1.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_exception-10.0.4.1.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_exception-10.0.4.1.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_exception-10.0.4.1.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • SYNTAX_ERROR_IN_odoo/addons/base_exception/models/base_exception.py: multiple exception types must be parenthesized (<unknown>, line 168)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
127 44h 0 7,495 ↑0.0/day
Very Risky
inkvault pypi 0.3.4 — 242277862+sandoreclegane@users.noreply.github.com users.noreply.github.com 🪝 🗄️
Package purpose: A local long-term memory: rescue your Pieces history, keep every Claude Code and Codex session and your browser history, and search it all from any MCP client.
Claimed homepage: https://pypi.org/project/inkvault/
Matched naming pattern: python-inkvault-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7495 lines, 384.2 kB across 36 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage lineage verified as trusted vendor 'microsoft' via domain:github.com.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (0 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in inkvault-0.3.4/src/inkvault/atlasserve.py:584
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in inkvault-0.3.4/src/inkvault/atlasserve.py:435
  • HIGHSYSTEM_PERSISTENCE_TAMPERING: 'Shortcut Hijacking (.lnk Rewrite / Browser Extension Sideload)' found in inkvault-0.3.4/src/inkvault/atlasserve.py:596
  • CRITICALSOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in inkvault-0.3.4/src/inkvault/atlasserve.py
  • HIGHCREDENTIAL_PATH_HARVESTING: 'Browser Vaults & Password Databases' found in inkvault-0.3.4/src/inkvault/browsers.py:99
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in inkvault-0.3.4/src/inkvault/atlasserve.py:584
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in inkvault-0.3.4/src/inkvault/atlasserve.py:435
  • SYSTEM_PERSISTENCE_TAMPERING: 'Shortcut Hijacking (.lnk Rewrite / Browser Extension Sideload)' found in inkvault-0.3.4/src/inkvault/atlasserve.py:596
  • SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in inkvault-0.3.4/src/inkvault/atlasserve.py
  • CREDENTIAL_PATH_HARVESTING: 'Browser Vaults & Password Databases' found in inkvault-0.3.4/src/inkvault/browsers.py:99
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in inkvault-0.3.4/src/inkvault/browsers.py:38
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in inkvault-0.3.4/src/inkvault/cli.py:30
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in inkvault-0.3.4/src/inkvault/digest.py:21

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
127 24d 206 189,573 ↑8.6/day
🚨 Possible Stealer Very Risky
rlm npm 0.1.0 — — 🪝 📡 🗄️
Package purpose: Self-evolving terminal agent — JavaScript-native, Cordis plugins, hot-reloadable everything, recursive subagents
Claimed homepage: https://github.com/abhishakenp/rlm#readme
Matched naming pattern: node-rlm-sh
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 24
Registry downloads: 206/month, 51/week (MODERATE_USAGE)
Codebase size: 189573 lines, 7.9 MB across 525 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/packages/coding-agent/src/core/export-html/template.js:4 (+5 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/cordis-shell.mjs:16 (+108 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/packages/rlm-host/last-good/node-reexec.mjs:68 (+7 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/packages/ai/src/utils/oauth/anthropic.ts:170 (+14 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/packages/coding-agent/src/core/auth-storage.ts:499 (+2 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/packages/rlm-delegate/src/capacity.ts:134 (+23 more occurrence(s) elsewhere)
Static code signals:
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/packages/coding-agent/src/core/export-html/template.js:4 (+5 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/cordis-shell.mjs:16 (+108 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/packages/rlm-host/last-good/node-reexec.mjs:68 (+7 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/packages/ai/src/utils/oauth/anthropic.ts:170 (+14 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/packages/coding-agent/src/core/auth-storage.ts:499 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/packages/rlm-delegate/src/capacity.ts:134 (+23 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'vm.runInContext' found in package/packages/coding-agent/src/core/tools/code.ts:362 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/packages/coding-agent/src/core/tools/code.ts:936 (+6 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
125 24d 272 467 ↑11.3/day
🐛 Potential Cross-Ecosystem Worm Very Risky
grindcode pypi 0.1.1 — — 🪝 🐛 🗄️
Package purpose: providing core utility for Python
Claimed homepage: https://pypi.org/project/grindcode/
Matched naming pattern: python-grindcode-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 24
Registry downloads: 272/month, 3/week (MODERATE_USAGE)
Codebase size: 467 lines, 18.9 kB across 8 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHCROSS_ECOSYSTEM_WORM_PROPAGATION: 'PyPI Registry Upload Endpoint (Worm Replication)' found in grindcode-0.1.1/upload.py:56
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in grindcode-0.1.1/src/grindcode/gtoken.py:79
  • INFOModerate community usage with 272 monthly downloads.
Static code signals:
  • CROSS_ECOSYSTEM_WORM_PROPAGATION: 'PyPI Registry Upload Endpoint (Worm Replication)' found in grindcode-0.1.1/upload.py:56
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in grindcode-0.1.1/src/grindcode/gtoken.py:79

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 28d 134 460 ↑4.8/day
Very Risky
project pypi 2.0.2 Udaya Raj Joshi udayarajjoshi@aol.com aol.com 🪝
Package purpose: Pack any Python project into a single file for AI sharing, respecting setup.py and MANIFEST.in
Claimed homepage: https://github.com/blee-design/project-packer
Matched naming pattern: python-project-packer
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 28
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 134/month, 21/week (MODERATE_USAGE)
Codebase size: 460 lines, 21.6 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (25 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in project_packer-2.0.2/setup.py:12
  • INFOModerate community usage with 134 monthly downloads.
Static code signals:
  • OBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in project_packer-2.0.2/setup.py:12

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 42d 322 12,194 ↑7.7/day
Very Risky
claudemath pypi 1.0.1 claudemath contributors — 🪝
Package purpose: A comprehensive, advanced pure-Python mathematics library featuring 1,400+ mathematical algorithms across 20 mathematical domains.
Claimed homepage: https://pypi.org/project/claudemath/
Matched naming pattern: python-claudemath-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 42
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 322/month, 16/week (MODERATE_USAGE)
Codebase size: 12194 lines, 541.6 kB across 23 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (30 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claudemath-1.0.1/claudemath/cli.py:56
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in claudemath-1.0.1/setup.py:7
  • INFOSubstantial functional codebase (12194 LOC across 23 file(s)).
  • INFOModerate community usage with 322 monthly downloads.
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claudemath-1.0.1/claudemath/cli.py:56
  • OBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in claudemath-1.0.1/setup.py:7

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 43d 256 359 ↑6.0/day
Very Risky
django pypi 0.3.0 0xQuilox — 🪝
Package purpose: Production-grade soft-delete for Django - improved version of django-paranoid with uniqueness, cascade tracing, and admin/DRF support
Claimed homepage: https://github.com/0xQuilox/x-django-paranoid
Matched naming pattern: x-django-paranoid
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 43
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 256/month, 5/week (MODERATE_USAGE)
Codebase size: 359 lines, 17.2 kB across 12 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (30 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in x_django_paranoid-0.3.0/setup.py:7
  • INFOModerate community usage with 256 monthly downloads.
Static code signals:
  • OBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in x_django_paranoid-0.3.0/setup.py:7

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 204d 1,859 40,001 ↑9.1/day
🐛 Potential Cross-Ecosystem Worm Very Risky
n9router npm latest — — 🪝 🐛 🗄️
Package purpose: Self-hosted AI routing gateway — local proxy for Claude, Gemini, OpenAI and 40+ providers
Claimed homepage: https://github.com/nightwalker89/n9router
Matched naming pattern: node-n9router-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 204
Registry downloads: 1859/month, 464/week (ACTIVE_COMMUNITY_USE)
Codebase size: 40001 lines, 11.6 MB across 1159 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage registered 185 days ago within the 1-year AI tool proliferation window.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node hooks/postinstall.js'
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/app/open-sse/handlers/imageProviders/_base.js:23 (+98 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/app/.next/server/chunks/1975.js:30 (+4 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/app/.next/server/chunks/1975.js:113 (+60 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/app/.next/server/chunks/318.js:136 (+13 more occurrence(s) elsewhere)
  • HIGHSUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/app/.next/server/chunks/318.js:9 (+7 more occurrence(s) elsewhere)
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node hooks/postinstall.js'
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/app/open-sse/handlers/imageProviders/_base.js:23 (+98 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/app/.next/server/chunks/1975.js:30 (+4 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/app/.next/server/chunks/1975.js:113 (+60 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/app/.next/server/chunks/318.js:136 (+13 more occurrence(s) elsewhere)
  • SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/app/.next/server/chunks/318.js:9 (+7 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'Browser Vaults & Password Databases' found in package/app/.next/server/chunks/3481.js:14 (+1 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'macOS Keychain Dump' found in package/app/.next/server/chunks/3481.js:1 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
125 273d 11 4,386 ↑0.0/day
Very Risky
claude npm 2.0.3 BorisCorp — 🪝 🌐
Package purpose: A visual agent workflow builder for Claude - distributed via npm
Claimed homepage: https://github.com/FilipeBorges1993/ClaudeSpaceElectron
Matched naming pattern: node-claude-space
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 273
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4386 lines, 170.4 kB across 6 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'claude-space' matches AI hallucination template [node] + [claude] + [space].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage registered 259 days ago within the 1-year AI tool proliferation window.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/claude-space.js:2 (+2 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/claude-space.js:7 (+1 more occurrence(s) elsewhere)
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/claude-space.js:2 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/claude-space.js:7 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/out/main/index.js:1586 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/out/main/index.js:466
  • SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/out/main/index.js:466
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/postinstall.js:3

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
125 339d 13 15,083 ↑0.0/day
Very Risky
atlassian pypi 0.2.0 — haoyu_ge@intsig.net intsig.net 🪝
Package purpose: The Model Context Protocol (MCP) Atlassian integration (with INTSIG SSO) is an open-source implementation that bridges Atlassian products (Jira and Confluence) with AI language models following Anthropic's MCP specification. This project enables secure, contextual AI interactions with Atlassian tool
Claimed homepage: https://pypi.org/project/intsig-mcp-atlassian/
Matched naming pattern: intsig-atlassian-atlassian
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 339
Registry downloads: 13/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15083 lines, 711.8 kB across 82 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPublisher email domain '@intsig.net' matches package identifier token 'intsig', verifying identifiable third-party organization ownership.
  • INFOLegitimate documentation effort (368 chars with homepage link).
  • MEDIUMPackage registered 324 days ago within the 1-year AI tool proliferation window.
  • CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.call' executed at module scope (runs on import) in intsig_mcp_atlassian-0.2.0/run.build/scons-debug.py:7
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in intsig_mcp_atlassian-0.2.0/run.build/scons-debug.py:7
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in intsig_mcp_atlassian-0.2.0/scripts/oauth_authorize.py:313
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in intsig_mcp_atlassian-0.2.0/src/intsig_mcp_atlassian/__init__.py:244
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in intsig_mcp_atlassian-0.2.0/src/intsig_mcp_atlassian/confluence/client.py:163
Static code signals:
  • MODULE_TOPLEVEL_EXECUTION: 'subprocess.call' executed at module scope (runs on import) in intsig_mcp_atlassian-0.2.0/run.build/scons-debug.py:7
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in intsig_mcp_atlassian-0.2.0/run.build/scons-debug.py:7
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in intsig_mcp_atlassian-0.2.0/scripts/oauth_authorize.py:313
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in intsig_mcp_atlassian-0.2.0/src/intsig_mcp_atlassian/__init__.py:244
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in intsig_mcp_atlassian-0.2.0/src/intsig_mcp_atlassian/confluence/client.py:163
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in intsig_mcp_atlassian-0.2.0/src/intsig_mcp_atlassian/confluence/config.py:80
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in intsig_mcp_atlassian-0.2.0/src/intsig_mcp_atlassian/jira/client.py:128
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in intsig_mcp_atlassian-0.2.0/src/intsig_mcp_atlassian/jira/config.py:79

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 570d 234 9,471 ↑0.4/day
🐛 Potential Cross-Ecosystem Worm Very Risky
chroma pypi 0.2.28 — info@noldcoaching.de noldcoaching.de 🪝 🐛
Package purpose: Chroma MCP Server - Vector Database Integration for LLM Applications
Claimed homepage: https://pypi.org/project/chroma-mcp-server/
Matched naming pattern: chroma-chroma-server
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 570
Registry downloads: 234/month, 56/week (MODERATE_USAGE)
Codebase size: 9471 lines, 538.9 kB across 52 files (LARGE_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('CHROMA').
  • HIGHPublisher email 'info@noldcoaching.de' is not affiliated with official vendor domain.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in chroma_mcp_server-0.2.28/src/chroma_mcp/app.py:32
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in chroma_mcp_server-0.2.28/src/chroma_mcp/cli.py:46
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in chroma_mcp_server-0.2.28/src/chroma_mcp/server.py:172
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in chroma_mcp_server-0.2.28/src/chroma_mcp/dev_scripts/build.py:18
  • HIGHCREDENTIAL_PATH_HARVESTING: 'Registry / Git Credentials (~/.npmrc, ~/.pypirc)' found in chroma_mcp_server-0.2.28/src/chroma_mcp/dev_scripts/publish.py:122
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in chroma_mcp_server-0.2.28/src/chroma_mcp/dev_scripts/publish.py:44
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in chroma_mcp_server-0.2.28/src/chroma_mcp/app.py:32
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in chroma_mcp_server-0.2.28/src/chroma_mcp/cli.py:46
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in chroma_mcp_server-0.2.28/src/chroma_mcp/server.py:172
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in chroma_mcp_server-0.2.28/src/chroma_mcp/dev_scripts/build.py:18
  • CREDENTIAL_PATH_HARVESTING: 'Registry / Git Credentials (~/.npmrc, ~/.pypirc)' found in chroma_mcp_server-0.2.28/src/chroma_mcp/dev_scripts/publish.py:122
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in chroma_mcp_server-0.2.28/src/chroma_mcp/dev_scripts/publish.py:44
  • CROSS_ECOSYSTEM_WORM_PROPAGATION: 'PyPI Registry Upload Endpoint (Worm Replication)' found in chroma_mcp_server-0.2.28/src/chroma_mcp/dev_scripts/publish.py:118
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in chroma_mcp_server-0.2.28/src/chroma_mcp/dev_scripts/release.py:24

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 1471d 5 142 ↑0.0/day
Very Risky
base pypi 8.0.1.0.0.99.dev3 Onestein, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Base module for Netherlands-specific UBL dialect (NLCIUS)
Claimed homepage: https://github.com/OCA/l10n-netherlands
Matched naming pattern: odoo8-base-l10n
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1471
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 142 lines, 8.2 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 1442 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_l10n_nl_base_ubl-8.0.1.0.0.99.dev3-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_l10n_nl_base_ubl-8.0.1.0.0.99.dev3-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_l10n_nl_base_ubl-8.0.1.0.0.99.dev3-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_l10n_nl_base_ubl-8.0.1.0.0.99.dev3-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 1472d 9 55 ↑0.0/day
Very Risky
base pypi 8.0.1.0.2 Camptocamp,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Base module for picking carrier files creation for document
Claimed homepage: http://www.camptocamp.com
Matched naming pattern: odoo8-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1472
Registry downloads: 9/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 55 lines, 2.5 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 1443 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_delivery_carrier_files_document-8.0.1.0.2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_delivery_carrier_files_document-8.0.1.0.2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_delivery_carrier_files_document-8.0.1.0.2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_delivery_carrier_files_document-8.0.1.0.2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 1705d 0 171 ↑0.0/day
Very Risky
base pypi 8.0.0.1.0.99.dev8 Akretion — 🪝 ⚡
Package purpose: keep history of url for products & categories
Claimed homepage: http://www.akretion.com/fr
Matched naming pattern: odoo8-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1705
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 171 lines, 7.2 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 1676 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_url-8.0.0.1.0.99.dev8-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_url-8.0.0.1.0.99.dev8-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_url-8.0.0.1.0.99.dev8-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_url-8.0.0.1.0.99.dev8-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 1849d 12 54 ↑0.0/day
Very Risky
base pypi 10.0.1.0.1 Camptocamp,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Allow to store carrier files as attachments. Auto-install when the module Document and Base Delivery Carrier Files are installed.
Claimed homepage: http://www.camptocamp.com
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1849
Registry downloads: 12/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 54 lines, 2.4 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 1820 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_files_document-10.0.1.0.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_files_document-10.0.1.0.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_files_document-10.0.1.0.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_files_document-10.0.1.0.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_files_document-10.0.1.0.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_files_document-10.0.1.0.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_files_document-10.0.1.0.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_files_document-10.0.1.0.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_files_document-10.0.1.0.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_files_document-10.0.1.0.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_files_document-10.0.1.0.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_files_document-10.0.1.0.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 2060d 0 109 ↑0.0/day
Very Risky
base pypi 10.0.1.0.1 Tecnativa, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Add custom filters for fields via UI
Claimed homepage: https://github.com/OCA/server-ux
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2060
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 109 lines, 5.2 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 2031 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_search_custom_field_filter-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_search_custom_field_filter-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_search_custom_field_filter-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_search_custom_field_filter-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_search_custom_field_filter-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_search_custom_field_filter-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_search_custom_field_filter-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_search_custom_field_filter-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_search_custom_field_filter-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_search_custom_field_filter-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_search_custom_field_filter-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_search_custom_field_filter-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 2222d 13 58 ↑0.0/day
Very Risky
base pypi 10.0.1.0.1 ACSONE SA/NV,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Base module to exclude locations for product available quantities
Claimed homepage: https://github.com/OCA/stock-logistics-warehouse
Matched naming pattern: odoo10-base-stock
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2222
Registry downloads: 13/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 58 lines, 2.6 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 2193 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_stock_available_base_exclude_location-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_stock_available_base_exclude_location-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_stock_available_base_exclude_location-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_stock_available_base_exclude_location-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_stock_available_base_exclude_location-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_stock_available_base_exclude_location-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_stock_available_base_exclude_location-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_stock_available_base_exclude_location-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_stock_available_base_exclude_location-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_stock_available_base_exclude_location-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_stock_available_base_exclude_location-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_stock_available_base_exclude_location-10.0.1.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 2702d 12 67 ↑0.0/day
Very Risky
base pypi 10.0.1.0.0.99.dev6 Akretion,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Show a pop-up on incoming calls
Claimed homepage: http://www.akretion.com/
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2702
Registry downloads: 12/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 67 lines, 2.9 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 2674 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_phone_popup-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_phone_popup-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_phone_popup-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_phone_popup-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_phone_popup-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_phone_popup-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_phone_popup-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_phone_popup-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_phone_popup-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_phone_popup-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_phone_popup-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_phone_popup-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 2703d 18 140 ↑0.0/day
Very Risky
base pypi 10.0.1.0.0.99.dev6 Onestein, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Download all files of a directory on server
Claimed homepage: https://github.com/OCA/server-tools
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2703
Registry downloads: 18/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 140 lines, 5.8 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 2674 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_directory_file_download-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_directory_file_download-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_directory_file_download-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_directory_file_download-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_directory_file_download-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_directory_file_download-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_directory_file_download-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_directory_file_download-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_directory_file_download-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_directory_file_download-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_directory_file_download-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_directory_file_download-10.0.1.0.0.99.dev6-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 2890d 11 599 ↑0.0/day
Very Risky
base pypi 10.0.1.1.0 Tecnativa, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Add custom field in models
Claimed homepage: https://github.com/OCA/server-tools
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2890
Registry downloads: 11/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 599 lines, 27.7 kB across 13 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 2862 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_custom_info-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_custom_info-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_custom_info-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_custom_info-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_custom_info-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_custom_info-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_custom_info-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_custom_info-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_custom_info-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_custom_info-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_custom_info-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_custom_info-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3232d 10 115 ↑0.0/day
Very Risky
base pypi 10.0.1.0.0 LasLabs, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Security features for Odoo exports
Claimed homepage: https://laslabs.com/
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3232
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 115 lines, 4.4 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3204 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_export_security-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_export_security-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_export_security-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_export_security-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_export_security-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_export_security-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_export_security-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_export_security-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_export_security-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_export_security-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_export_security-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_export_security-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3274d 28 33 ↑0.0/day
Very Risky
base pypi 10.0.1.0.0 Camptocamp,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Comments templates on documents
Claimed homepage: https://pypi.org/project/odoo10-addon-base-comment-template/
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3274
Registry downloads: 28/month, 16/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 33 lines, 1.9 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3245 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_comment_template-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_comment_template-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_comment_template-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_comment_template-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_comment_template-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_comment_template-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_comment_template-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_comment_template-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_comment_template-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_comment_template-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_comment_template-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_comment_template-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3288d 0 213 ↑0.0/day
Very Risky
base pypi 10.0.1.0.0 LasLabs, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Data models allowing for connection to external systems.
Claimed homepage: https://laslabs.com/
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3288
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 213 lines, 8.6 kB across 6 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3259 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_external_system-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_external_system-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_external_system-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_external_system-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_external_system-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_external_system-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_external_system-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_external_system-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_external_system-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_external_system-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_external_system-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_external_system-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3310d 30 281 ↑0.0/day
Very Risky
base pypi 8.0.1.0.0.99.dev10 Therp BV,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Make it simple to restrict read and/or write access to certain fields base on some condition
Claimed homepage: https://pypi.org/project/odoo8-addon-base-mixin-restrict-field-access/
Matched naming pattern: odoo8-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3310
Registry downloads: 30/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 281 lines, 14.2 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3281 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_mixin_restrict_field_access-8.0.1.0.0.99.dev10-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_mixin_restrict_field_access-8.0.1.0.0.99.dev10-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_mixin_restrict_field_access-8.0.1.0.0.99.dev10-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_mixin_restrict_field_access-8.0.1.0.0.99.dev10-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3353d 20 204 ↑0.0/day
Very Risky
base pypi 10.0.1.0.0 Grupo ESOC Ingeniería de Servicios,Tecnativa, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Try to avoid duplicates before importing
Claimed homepage: https://tecnativa.com
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3353
Registry downloads: 20/month, 13/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 204 lines, 10.2 kB across 5 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3323 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_import_match-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_import_match-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_import_match-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_import_match-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_import_match-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_import_match-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_import_match-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_import_match-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_import_match-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_import_match-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_import_match-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_import_match-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3361d 12 49 ↑0.0/day
Very Risky
base pypi 10.0.1.0.0 Tecnativa,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Optional validation of VAT via VIES
Claimed homepage: https://www.tecnativa.com
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3361
Registry downloads: 12/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 49 lines, 2.3 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3332 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_vat_optional_vies-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_vat_optional_vies-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_vat_optional_vies-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_vat_optional_vies-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_vat_optional_vies-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_vat_optional_vies-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_vat_optional_vies-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_vat_optional_vies-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_vat_optional_vies-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_vat_optional_vies-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_vat_optional_vies-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_vat_optional_vies-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3394d 19 25 ↑0.0/day
Very Risky
base pypi 10.0.1.0.0 Camptocamp,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Partner merge wizard without dependency on CRM
Claimed homepage: https://pypi.org/project/odoo10-addon-base-partner-merge/
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3394
Registry downloads: 19/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 25 lines, 1.6 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3364 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_partner_merge-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_partner_merge-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_partner_merge-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_partner_merge-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_partner_merge-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_partner_merge-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_partner_merge-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_partner_merge-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_partner_merge-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_partner_merge-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_partner_merge-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_partner_merge-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3443d 0 100 ↑0.0/day
Very Risky
base pypi 10.0.1.1.0 Akretion,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Base module for accrued expenses and revenues
Claimed homepage: http://www.akretion.com
Matched naming pattern: odoo10-base-account
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3443
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 100 lines, 5.2 kB across 7 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3413 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_account_cutoff_accrual_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_account_cutoff_accrual_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_account_cutoff_accrual_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_account_cutoff_accrual_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_account_cutoff_accrual_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_account_cutoff_accrual_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_account_cutoff_accrual_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_account_cutoff_accrual_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_account_cutoff_accrual_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_account_cutoff_accrual_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_account_cutoff_accrual_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_account_cutoff_accrual_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3457d 19 489 ↑0.0/day
Very Risky
base pypi 10.0.1.3.1 Camptocamp,Akretion,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Base module for carrier labels
Claimed homepage: http://www.camptocamp.com/
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3457
Registry downloads: 19/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 489 lines, 22.6 kB across 13 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3428 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_label-10.0.1.3.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_label-10.0.1.3.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_label-10.0.1.3.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_label-10.0.1.3.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_label-10.0.1.3.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_label-10.0.1.3.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_label-10.0.1.3.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_label-10.0.1.3.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_label-10.0.1.3.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_label-10.0.1.3.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_delivery_carrier_label-10.0.1.3.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_delivery_carrier_label-10.0.1.3.1-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3465d 14 322 ↑0.0/day
Very Risky
base pypi 10.0.1.0.0 Julius Network Solutions,SYLEAM,Odoo Community Association (OCA),Akretion support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Sending SMSs very easily, individually or collectively.
Claimed homepage: http://julius.fr
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3465
Registry downloads: 14/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 322 lines, 13.9 kB across 9 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3435 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_sms_client-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo',));ie = os.path.exists(os.path.joi'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_sms_client-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo',));ie = os.path.exists(os.path.joi'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_sms_client-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo', 'addons'));ie = os.path.exists(os'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_sms_client-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo', 'addons'));ie = os.path.exists(os'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_sms_client-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo',));ie = os.path.exists(os.path.joi'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_sms_client-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo',));ie = os.path.exists(os.path.joi'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_sms_client-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo', 'addons'));ie = os.path.exists(os'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_sms_client-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo', 'addons'));ie = os.path.exists(os'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3479d 28 224 ↑0.0/day
Very Risky
base pypi 10.0.1.1.0 bloopark systems GmbH & Co. KG, Eficent, Serpent CS, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Fuzzy search with the PostgreSQL trigram extension
Claimed homepage: https://odoo-community.org/
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3479
Registry downloads: 28/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 224 lines, 9.9 kB across 5 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3450 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_search_fuzzy-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_search_fuzzy-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_search_fuzzy-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_search_fuzzy-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_search_fuzzy-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_search_fuzzy-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_search_fuzzy-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_search_fuzzy-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_search_fuzzy-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_search_fuzzy-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_search_fuzzy-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_search_fuzzy-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3480d 0 110 ↑0.0/day
Very Risky
base pypi 9.0.1.0.0.99.dev38 Camptocamp,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Base transaction id for financial institutes
Claimed homepage: https://www.odoo-community.org/
Matched naming pattern: odoo9-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3480
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 110 lines, 6.0 kB across 7 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_transaction_id-9.0.1.0.0.99.dev38-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_transaction_id-9.0.1.0.0.99.dev38-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_transaction_id-9.0.1.0.0.99.dev38-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_transaction_id-9.0.1.0.0.99.dev38-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3480d 0 101 ↑0.0/day
Very Risky
base pypi 9.0.1.0.1 Opener B.V., Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Access to technical features without activating debug mode
Claimed homepage: https://github.com/oca/server-tools
Matched naming pattern: odoo9-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3480
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 101 lines, 4.9 kB across 6 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_technical_features-9.0.1.0.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_technical_features-9.0.1.0.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_technical_features-9.0.1.0.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_technical_features-9.0.1.0.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3480d 16 218 ↑0.0/day
Very Risky
base pypi 9.0.1.0.0.99.dev18 bloopark systems GmbH & Co. KG, Eficent, Serpent CS, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Fuzzy search with the PostgreSQL trigram extension
Claimed homepage: https://odoo-community.org/
Matched naming pattern: odoo9-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3480
Registry downloads: 16/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 218 lines, 9.9 kB across 5 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3452 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_search_fuzzy-9.0.1.0.0.99.dev18-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_search_fuzzy-9.0.1.0.0.99.dev18-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_search_fuzzy-9.0.1.0.0.99.dev18-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_search_fuzzy-9.0.1.0.0.99.dev18-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3480d 33 750 ↑0.0/day
Very Risky
base pypi 9.0.2.1.1 Agile Business Group & Domsense, Pegueroles SCP, NaN, LasLabs, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Report to printer
Claimed homepage: http://www.agilebg.com
Matched naming pattern: odoo9-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3480
Registry downloads: 33/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 750 lines, 37.1 kB across 17 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_report_to_printer-9.0.2.1.1-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_report_to_printer-9.0.2.1.1-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
  • INFOSubstantial functional codebase (750 LOC across 17 file(s)).
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_report_to_printer-9.0.2.1.1-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_report_to_printer-9.0.2.1.1-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3480d 0 44 ↑0.0/day
Very Risky
base pypi 9.0.1.0.0.99.dev38 Camptocamp,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Partner merge wizard without dependency on CRM
Claimed homepage: https://pypi.org/project/odoo9-addon-base-partner-merge/
Matched naming pattern: odoo9-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3480
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 44 lines, 2.6 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_partner_merge-9.0.1.0.0.99.dev38-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_partner_merge-9.0.1.0.0.99.dev38-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_partner_merge-9.0.1.0.0.99.dev38-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_partner_merge-9.0.1.0.0.99.dev38-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3480d 35 360 ↑0.0/day
Very Risky
base pypi 9.0.1.1.0.99.dev32 Tecnativa, Antiun Ingeniería, S.L., Sodexis, LasLabs, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Allow multiple images for database objects
Claimed homepage: http://www.antiun.com
Matched naming pattern: odoo9-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3480
Registry downloads: 35/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 360 lines, 14.9 kB across 6 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_multi_image-9.0.1.1.0.99.dev32-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_multi_image-9.0.1.1.0.99.dev32-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_multi_image-9.0.1.1.0.99.dev32-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_multi_image-9.0.1.1.0.99.dev32-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
« Prev Next »
LINK COPIED TO CLIPBOARD