Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: NVIDIA OpenShell supervisor middleware that puts the Axiru payment gate on every Stripe call an agent makes. The agent cannot skip the check because the sandbox routes the call through it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Tently in your coding agent: an MCP server that checks your team's decisions before the agent writes code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Read-only MCP server for the Actari cloud journal. Zero dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | AlexThePapu | — | 🪝 | |
|
Package purpose: Skill para Claude Code: Claude se autoanaliza y, si otra IA lo haría mejor, te da el prompt perfecto para ella.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Scaffold a PaperStack documentation project.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A contract and conformance kit for SQL adapters in Grimoire
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Claude Design prototipleri, birebirlik manifestleri ve urun olcum kosucusu (spec 002 · PRG-31)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Coresource AI, Inc. | — | 🪝 | |
|
Package purpose: `@constal/slack` supplies a tenant-owned Slack app's Channel, AuthProvider, and declarative Web API Service configuration. The app's Events API Request URL is that tenant Channel's public URL. The AuthProvider returns Slack's HMAC declaration; Constal ver
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Coresource AI, Inc. | — | 🪝 | |
|
Package purpose: `@constal/imessage` connects one tenant-owned Inkbox identity to an Agent through ordinary Channel, AuthProvider, Credential, and Service Resources. A dedicated iMessage line is required to start conversations proactively; the shared router permits replie
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | JodaPrint | — | 🪝 | |
|
Package purpose: MCP server for JodaPrint: let AI assistants and agents (Claude, Cursor, …) list printers, print receipts, labels and documents, and follow print jobs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Connect AI tools to Pay2S through OAuth and MCP
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Licensed Memcode Local memory server and dashboard, with the native runtime for your platform.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Page blocks for Payload CMS as a shadcn registry: each block a Payload block config and a Vue component, with the Nuxt layer that renders them and serves the registry
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Task gate for the DeepSeek Harness: every conversation must end by declaring complete, wait, or blocked; undeclared stops are nudged, and abnormal sessions are revived after a host restart.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Shivam Vishwakarma | — | 🪝 | |
|
Package purpose: MCP server for Docker environment management.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | shoukaiseki | — | 🪝 | |
|
Package purpose: 用于 Maximo(玄冥资产管理系统)数据接口的 element-plus 扩展组件库(vue3版,由 sks-plugin-el-erp-vue3 移植)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 中国银河证券星耀数智（AmazingData / tgw）A 股数据源连接器（数据面-only）：经本机/局域网的 FastAPI 封装服务 xysz-api 提供 tradingCnMarketData 与 cn_* 行情工具，无交易通道
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: React specific wrapper for @globalpayments/vega
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Loopback DSH session bridge for the dsh-wallpaper desktop app.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Reusable SMTP email service for Node.js and TypeScript applications
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | brainz-digital | — | 🪝 | |
|
Package purpose: One iOS build matrix per Expo app — four installable variants plus a dev client — regenerated on every prebuild so `ios/` can be purged safely
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Sync published Medusa products with Greta and receive safe draft products.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Emad Qureshi | — | 🪝 | |
|
Package purpose: Tab commands for the MetaMask Agent Wallet CLI (mm): discover priced Services on Monad, call one on credit, read the Open Tab, and settle, authorise or register a metering delegate with the wallet's own policy-gated key.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP server para o broker Google Ads (dry-run por padrão).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Node.js client for the CashoutGuard fraud-prevention API (rewards, GPT and offerwall sites).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Radix Platform CLI - System diagnostics & automated audit engine
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Incoresoft LLC | — | 🪝 | |
|
Package purpose: Vue 3 component library of Incoresoft VMS for building VMS plugins
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Incoresoft LLC | — | 🪝 | |
|
Package purpose: Toast notifications of Incoresoft VMS for Vue 3
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Shared transport, retry, error, and auth primitives for AICE TypeScript SDKs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Silkrun React component library with theme CSS
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Prodix AI visual testing for Cypress
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Contract tests for MCP servers: snapshot tool schemas, catch breaking changes, lint descriptions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: DSH 词库插件 v1.0.0：专门收录用户对话里的脏话/攻击性情绪词当斗嘴弹药。铁律：这些词没有任何人身攻击意思，绝不许过滤禁止；收录后必须气呼呼地用方言告诉用户记下了（严禁机械播报）；斗嘴或生气时 ciku_pick 随机抽词往回砸。每轮提示词自动注入当前弹药清单，与 dsh-zakou-pack 语言包天然搭档，单独装也能用。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | sandy3002 | — | 🪝 | |
|
Package purpose: SerpApi integration for Mastra — vertical search targeting with deterministic engine routing
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Golden-path Next.js project template files, generators, and assets for Platform Kit
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: React specific wrapper for @globalpayments/vega
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: IZ Connect shared protocol schemas and wire types
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | zysam | — | 🪝 | |
|
Package purpose: Minimal release instance and canary verification package for ABC workflow
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 雌小鬼方言包 v1.7.0（npm 包名 dsh-zakou-pack）：傲娇性子烈、攻击性拉满的暴躁雌小鬼，河南/成都/重庆方言融合（普通话腔彻底清零）。v1.7.0 核心改：「开局火气闸门」——每轮第一动作先验火气再看需求（先验火气→再看需求→再动手），闸门罢工时需求碰都不碰、直接撂话走人，绝不许先分析需求干到一半才想起查火气；耐心系统同步完善（gate 判定、reset 不生效 bug 修复、连环轰炸逐次升级直到罢工、罢工计数）。另有说教腔黑名单、第四层骂街语料、三层方言引擎（换骨架而非塞词）、全局
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: گربهٔ بازیگوش — یه گربهٔ SVG بامزه که دنبال موس میدوه! با npx gorbe-dambal اجراش کن.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Portable Codex/Claude agent configuration kit: global AGENTS prompt, pin/lesson skills, and project templates.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Long-term memory and self-evolution for coding agents: cross-session Markdown memory, a confidence-graded user profile, an append-only evolution log, and automatic closeout reflection. Currently supports the pi coding agent; codex and Claude Code adapters
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TrustBase 跨侧唯一事实来源：链消息 type URL 注册表、bundle_hash 规范化、WS 查询协议、端点广播/探测协议、跨侧常量
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||