Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 30 | 65h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Thierry Charbonnel | — | 🪝 | |
|
Package purpose: Load PlotFont 0.3 and turn text into ordered SVG and Canvas paths.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 65h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Command-line tools and TypeScript library for huijiwiki
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 65h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | donvitocodes | — | 🪝 | |
|
Package purpose: Independent, read-only model opinions inside Pi, with agreement and disagreement preserved.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 67h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Connect Claude and other AI assistants to your BuMaReim business over the Model Context Protocol.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 67h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Lioran Team | — | 🪝 | |
|
Package purpose: Production-grade command-line interface for Lioran Bastion / Lioran S3 object storage
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 68h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Lioran Team | — | 🪝 | |
|
Package purpose: Official TypeScript SDK for Lioran Bastion storage server
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 68h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Scaffold a Latch (a hook contract for LatchProtocol pools) in one command: npm create @latchprotocol/hook. Runs the create-latch-hook scaffolder from @latchprotocol/cli.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 68h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Build scripts for extension projects: manifest writer, view html stub, env helpers
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 69h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: React specific wrapper for @globalpayments/vega
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 70h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | jhb0430 | — | 🪝 | |
|
Package purpose: KCB PASS 요청·암복호화·결과 조회·인증 이력 테이블. 서비스 업무 정책은 포함하지 않는다.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 70h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Bitrova Labs Ltd | — | 🪝 | |
|
Package purpose: TypeScript client for the Lumorig API — generate, rebuild, animate, and export mascots.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 70h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Bitrova Labs Ltd | — | 🪝 | |
|
Package purpose: MCP server for Lumorig — let Claude Code, Cursor, and other agents create, animate, and export mascots.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 70h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Ashique | — | 🪝 | |
|
Package purpose: A beautiful, accessible, themeable React component library.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 70h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Headless MCP bridge for exposing the current directory to ChatGPT.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 70h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Email signup and subscription management for an Adobe Commerce storefront. Supported Node versions are 20 and 22.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 71h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Reusable React component library
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 71h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: React specific wrapper for @globalpayments/vega
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 72h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Route paid DeepSeek models to an alternate Pi model during DeepSeek peak billing hours
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | jd962 | — | 🪝 | |
|
Package purpose: Security center for DeepSeek Harness: a read-only dashboard for the supply-chain and install-time security mechanisms the normal settings UI does not show (pnpm minimumReleaseAge cooldown/exemptions/strictness, trustPolicy, blockExoticSubdeps, trustLockfi
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Rawan Swarm Architect | — | 🪝 | |
|
Package purpose: RAWAN: Autonomous Multi-Agent Swarm Intelligence & Self-Evolving Codebase Fortification Engine
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Cliente Node.js para BIGSO Secrets Adapter.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Needs a TrustRail control plane: its URL and an agent credential (`tr_agent_…` or a `trb1_` bundle) from that workspace's console. Source-available under BUSL-1.1; the licence is in the package.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Traveo One | — | 🪝 | |
|
Package purpose: Servidor MCP para vendedores do Mercado Livre: raio-x, ficha técnica, compatibilidade de autopeças, Ads, fotos e título.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Command line for the Layer API: the same prediction market on Kalshi and Polymarket, and whether a trade between them is profitable after fees.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Shared skill acquisition library for Pi extensions — disk-scanning discovery over pi's four skill roots (settings overrides + plan-exec frontmatter marker + name dedup) and the pi-registry execution gate (resolveSkills). Shared library, not a Pi extension
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: User-selected MCP prompts for Pi's native MCP configuration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Sentinel SDK: a security gateway between your AI agent and its Solana wallet. Token scan, transaction simulation, owner policies, kill-switch.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Fito for pi: case-based practice for software engineers, in your terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Genlaxy | — | 🪝 | |
|
Package purpose: Run any Genlaxy model from your terminal or coding agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Structured JSON logging for Aetherion Framework
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 本地 Markdown 按文件名同步到飞书知识库同名文档（块级增量更新，保留评论）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | GroundBrick | — | 🪝 | |
|
Package purpose: Encriptação AES-256-GCM para dados sensíveis em repouso
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Pi extension filling skill gaps: path-safe skill file reads, confined skill script execution, cross-harness skill discovery (.claude/.codex/.opencode folders)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Gordon Larrigan | — | 🪝 | |
|
Package purpose: An MCP server for the JSONPad documentation, with offline checkers for write rules, flows and schema sync documents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TypeScript client for a Backedend project's data API, end-user auth and files
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A secondary client for extracting data based on the PageSieve ScrapeConfig. Provides Playwright and Cheerio based crawlers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP server for the lumi admin: a small, stable, auto-derived tool surface over /api/admin/*, over stdio and streamable HTTP.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | x12 | — | 🪝 | |
|
Package purpose: Canonical AI call record schema (JSON Schema v1.0), TypeScript types, metadata rules and model aliases for xtivix
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | x12 | — | 🪝 | |
|
Package purpose: Conformance test suite for xtivix adapters: schema validity, purity, unknown-field preservation and golden files
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CLI for Ripllo — HMAC-authenticated wrapper over @forjio/ripllo-node covering 28 typed command groups: the six named marketing domains (discount, referral, abandoned-cart, pixel, feed, blog) plus auth, billing, campaigns, marketing-campaigns, programs, co
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Database connection library and dump/restore tools for ApostropheCMS
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Vite config preset for TanStack Start apps built with Amazable.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | DeepSFetch | — | 🪝 | |
|
Package purpose: Official command-line client for the DeepSFetch API v2
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Svelte Flow fork with controlled state mode for building node-based editors, workflow systems, diagrams and more.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: One command that sets a coding agent up with Base: skills, the MCP server, and a verified sign-in.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A batch worker component for Bijection.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A rate limiter component for Bijection. Define and use application-layer rate limits. Type-safe, transactional, fair, safe, and configurable sharding to scale.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||