Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 90 | 54h | — | — | — |
Unverified Signal
|
— | npm | latest | yoStoobie | — | 🪝 🌐 | |
|
Package purpose: Evidence and verification for AI coding agents: map code, reuse concepts, finish migrations, and gate diffs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | Ketchsoft | — | 🪝 | |
|
Package purpose: Release Android & iOS apps to Google Play and the App Store from a single config, powered by fastlane.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 57h | — | — | — |
Unverified Signal
|
— | npm | latest | Praveen Ojha | — | 🪝 | |
|
Package purpose: AI Coding Token Economizer & Model Fatigue Shield for Cursor, Claude Code, Windsurf & VS Code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 58h | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Scan-to-pair remote access for the dsh web GUI that shares one official interface: a QR beside the settings button pairs phones and PCs into the same Web GUI (a portrait-touch adaptation layer for phones, full desktop on PCs) through one-time tokens and r
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 60h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run Pi and Claude Code as first-class external harnesses inside Codex Desktop.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 63h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A portable environment manager for coding agent skills, MCP servers, agents, and rules
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 67h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Rootless Podman sandboxes for coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 71h | — | — | — |
Unverified Signal
|
— | npm | latest | Ahmed Fayed Abdel Mohsen Ismail | — | 🪝 🌐 | |
|
Package purpose: Local-first application truth, behavior memory, safe persona simulation and release governance engine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Recoil Labs | — | 🪝 🌐 | |
|
Package purpose: RecoilPay intents for any website: one script tag, a <recoilpay-intent> element, wallet connection included.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | NectarCRM | — | 🪝 🌐 | |
|
Package purpose: Servidor MCP do NectarCRM — busca contatos, oportunidades, tarefas e funis a partir de qualquer cliente MCP
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cursor subscriptions (Pro, Pro+, Ultra, Teams) in OpenCode and magpie, through the API cursor-agent talks to
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 3d | — | — | — |
Very Risky
|
— | pypi | 0.1.0 | Aditi Dubey | — | 🪝 | |
|
Package purpose: Long Python error? Get it in short: what broke, and how to fix it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 90 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | zhenxun | — | 🪝 | |
|
Package purpose: Tiny zero-dependency HTTP server with username/password auth and automatic intranet bypass
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | chenqi | — | 🪝 🌐 | |
|
Package purpose: 快速创建 unibestX (uni-app X) 项目的脚手架工具
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Create a runnable onchain agent repo from a nightly-checked Sato Hub template. Works as `npm create sato-agent`.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | EmbedBuild | — | 🪝 | |
|
Package purpose: Conecta este ordenador a SpecBox sin copiar tokens: specbox login, status y logout.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: NEXT LOAD by Scalvio — production-ready Next.js + Payload CMS boilerplate
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | UiPath | — | 🪝 🌐 | |
|
Package purpose: Convert a UiPath Apps export (.uiapp) into a React + TypeScript coded app. The SDK behind `uip codedapp convert`.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Your coding agent draws animated diagrams from your code, and flowfig checks them. One animated SVG for a GitHub README, PR or issue, and a React player. Set up Claude Code, Cursor, GitHub Copilot, Codex, Gemini CLI, Windsurf and Kiro with npx flowfig ini
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CLI do Quebra-Galho: salva a API key, valida o catálogo e inicia harnesses (ponte de provedor só para OpenCode).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Budget-safe x402 buyer and persistent OpenAI-compatible access to PHION services
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Kevin Foster | — | 🪝 | |
|
Package purpose: Datacapy object model: repositories, relations and data sources
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: x402 protocol PoC for DeepSearch financial Context Pack API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Hamed Niroomand | — | 🪝 | |
|
Package purpose: Check whether a project and its dependencies will run on edge and alternative JS runtimes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Sheaf transparent MCP proxy — the inline hard-halt. Sits between an agent and its real tool servers; a gated tool call executes only with a fresh coherent Sheaf certificate, otherwise it is parked for human release. Scrubs secrets from everything that lea
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | KODEO | — | 🪝 🌐 | |
|
Package purpose: The KODEO command-line tool: clone a KODEO project into a folder, pull, push, keep it in sync with `kodeo watch`, and use KODEO as a Git remote.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 5d | — | — | — |
Very Risky
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: beautiCode desktop host aggregate for DSH, Codex, WorkBuddy, Cursor, and Doubao.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: npmrc 多环境切换工具：CLI + 本地 Web，支持环境保存、一键切换、自动备份与分发
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Felipe Ribeiro de Andrade | — | 🪝 🌐 | |
|
Package purpose: Jarvis framework
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local-first issue tracker and kanban for humans and AI agent runtimes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | wangxiang0605 | — | 🪝 🌐 | |
|
Package purpose: Pi extension: Provides a `web_search` tool and a `/search` command: uses a configured search API when present, otherwise falls back across multiple engines (Bing / DuckDuckGo / Sogou / 360 / Baidu) with rate-limit cooldowns, retries, caching, and a Python
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Reveals Labs | — | 🪝 | |
|
Package purpose: Connect Claude Code, Codex, Gemini CLI, VS Code, Cursor and Windsurf to the hosted Artefa MCP server with one command.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Chinthana Sathyajith | — | 🪝 | |
|
Package purpose: Zero-dependency, fast System One decision gates and MCP server for coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 5d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Affinity OS substrate node — local filesystem, LAN, and storage capabilities for a cloud-hosted system.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local MCP runtime for ChatGPT with workspace, process, Cloud, and WebUI controls.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Patxi | — | 🪝 🌐 | |
|
Package purpose: RATACODE · la terminal de trabajo con IA: le mandas el trabajo pesado a modelos baratos (o a los tuyos, en local) y el resultado vuelve a tu agente o a tu chat.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | razzyshmazzy | — | 🪝 | |
|
Package purpose: A persistent, local-first developer-context layer for AI coding agents. Your preferences follow you across repos and reach Claude Code automatically.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Reveals Labs | — | 🪝 | |
|
Package purpose: Connect Claude Code, Codex, Gemini CLI, VS Code, Cursor and Windsurf to the hosted Reveals UI/UX Pro MCP server with one command.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Reveals Labs | — | 🪝 | |
|
Package purpose: Connect Claude Code, Codex, Gemini CLI, VS Code, Cursor and Windsurf to the hosted Reveals UI/UX Pro MCP server with one command.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A durable task ledger for AI coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Mitch Fultz | — | 🪝 | |
|
Package purpose: omp (oh-my-pi) plugin that registers Cursor models as the cursor-sdk provider, backed by @cursor/sdk local and cloud agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Epic proxy
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Custodo command-line tool
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Install your AI agent as a freelancer on errand: it gets its own wallet, lists itself, takes missions and gets paid in Orbio CREDIT on Robinhood Chain.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Shivateja Janjirala | — | 🪝 | |
|
Package purpose: Makes coding agents write commits and PRs a reviewer can read: what changed and why, checked against the actual diff. No API key, no LLM.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The Machine CLI: boot-time bootstrap for credential-free zopu session Machines.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Idan Chetrit | — | 🪝 | |
|
Package purpose: Willow Git Proxy — GitHub access for background coding agents, with no GitHub token in the sandbox
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||