Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 30 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Longzai Intelligence Schedule Markdown core - TS 任务注册表真源/外部命令 runner/launchd 装配/台账仓渲染与滚动保留
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Longzai Intelligence Music Video core - 音乐项目数据仓只读引擎（发现/MIDI→音符时间轴/音频时长探测/staging 投放/verify 体检/props 构建）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Longzai Intelligence Music Video CLI - 音乐视频合成命令行工具（project/render/studio/template/config 命令族）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: LLM Agent Relay Protocol: lets Claude Code and Codex sessions message each other without knowing each other's harness API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | REBORN LABS | — | 🪝 | |
|
Package purpose: 클로드가 코드를 쓰기 전에 명세부터 적게 하는 스킬을 클로드 코드 스킬 폴더에 놓고, 파일이 실제로 늘었는지 다시 셉니다. 순서는 GitHub spec-kit(MIT)과 같은 명세 → 계획 → 조각 → 코드이고, 단계마다 사람이 확인하기 전에는 다음으로 가지 않습니다. spec-kit 본체가 같은 폴더에 깔려 있으면 그쪽 /speckit-* 스킬로 넘깁니다.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Install a purchased Claude Code skill pack in one command.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 基于 [TDesign React](https://tdesign.tencent.com/react/overview) 二次封装的 React 业务组件库，包含一些常用工具和Css样式。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | ress.js team | ress.js | 🪝 | |
|
Package purpose: La CLI de ress.js: dev, build, start e info sobre la misma construcción de la aplicación que expone como API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Longzai Intelligence Decision 配置
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | REBORN LABS | — | 🪝 | |
|
Package purpose: 클로드가 당신에 대해 적어 둔 것을 꺼내 보는 프롬프트 네 개를 클로드 코드 스킬 폴더에 놓고, 파일이 실제로 늘었는지 다시 셉니다. 답의 재료는 이 컴퓨터의 자동 메모리와 CLAUDE.md 뿐이라, 적어 둔 게 없으면 「없다」고 말하게 해 두었습니다. claude.ai 에서 쓰려면 같은 프롬프트를 한 줄 명령으로 꺼내 붙여 넣습니다.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | @plime-kitajima @plime-kitajima | — | 🪝 | |
|
Package purpose: PLIME command-line client
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A lean, performant TypeScript CLI for spec-driven workflows, with MCP support.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Pablo Gallego | — | 🪝 | |
|
Package purpose: Deprecated: use the moodlia-sync CLI. MCP coordinator for Moodle course synchronization.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Official client for the Orbitwrite API — compose, schedule and publish social posts from your own code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CLI that uploads files to a Manta datastore, where supported types are ingested into its knowledge graph
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Aditya Patwa | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Connect Pi session activity and attention to Muntin.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: SearchApi tools for the AI SDK: Google web, news, scholar, shopping, maps, flights and hotels as agent tools.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP server for CollHub: documents, projects, comments, workflows and data sources as tools for Claude Code, Claude Desktop, Cursor, VS Code and Codex
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: High-level HakoDB JavaScript/TypeScript client for Node.js and Bun
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Multiconsult's design system for React: a [Mantine](https://mantine.dev) theme and a set of components built on it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Universal entitlements, usage meters, and feature gates for CodeSwayam apps
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Houdu Technology | — | 🪝 | |
|
Package purpose: 厚笃科技 CLI 工具 - 命令行操作与 AI Agent 集成
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The Ligantic CLI - authenticate, manage Spaces and Resources, work with Records, and invoke and inspect Flows.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Typed JavaScript client for the TokTik Developer API (REST + realtime LIVE events)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | sidleo | — | 🪝 | |
|
Package purpose: Codex plugin for the llm-wiki knowledge base: bundled skill, 14 wiki_* MCP tools, and session-time APPEND_SYSTEM_PROMPT.md rule injection. Self-contained and shared with DSH / Pi / MCP / Skill forms.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | metamol0627 | — | 🪝 | |
|
Package purpose: How many downloads would your package get if nobody used it? Tells you that number (the floor: mirrors, CI caches, security scanners) and whether your actual count stands out from it. — 利用者ゼロでも付く DL は何件か。自分のパッケージはそれを超えているか。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Voltro UG | — | 🪝 | |
|
Package purpose: PostgreSQL dialect adapter for Voltro's cross-dialect DataStore (LISTEN/NOTIFY reactivity, logical-replication CDC).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Deskree Technologies Inc. | — | 🪝 | |
|
Package purpose: Pub/Sub trigger for Blok workflows — supports NATS (Core + JetStream), Redis Streams, Kafka, GCP Pub/Sub, AWS SNS+SQS, and Azure Service Bus.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 17d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Vinay M | — | 🪝 | |
|
Package purpose: Integrate with OpenAI easily on a Spreadsheet
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 18d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Semantic code search for OpenAI Codex via Milvus (MCP server)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 19d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Pulumi provider for PgBeam — manage projects, databases, replicas, domains, and cache rules as infrastructure
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 21d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Foggy Java data analysis engine integration for DeepSeek Harness
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 21d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Redis queue client implementation for Axiom Lattice framework
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 21d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 24d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Webiny Ltd. | — | 🪝 | |
|
Package purpose: Security plugins for Cognito
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 24d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Webiny Ltd. | — | 🪝 | |
|
Package purpose: Wrapper for AWS SDK
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 24d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A declarative MongoDB utility package built on the official MongoDB Node.js driver
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 26d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: React wrappers for Ripple Component Library
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 29d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 【模板】交易所连接器插件脚手架：Bybit（bybit）v2 插件骨架 —— 市场数据服务 + 交易服务 + 三态闸门 + BYOK 凭证 ref。生成器：node scripts/new-connector.mjs --slug <exchange>
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 30d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: SCAYLE OpenTelemetry module for Inertia based storefront applications
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Base infrastructure for building Matilda Code channel adapters. Provides the abstract base class, access control, session routing, and the ACP bridge that communicates with the agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Voltro UG | — | 🪝 | |
|
Package purpose: Supabase Auth (GoTrue)-backed AuthStrategy for the Voltro framework. Verifies Supabase-issued JWTs via the project's JWKS endpoint. Conforms to @voltro/protocol AuthStrategy so it composes with other IdP plugins.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Voltro UG | — | 🪝 | |
|
Package purpose: First-party AnalyticsSink that stores events in the main DataStore (works on every SQL dialect: postgres / mysql / mariadb / mssql / sqlite). Lite version — ceiling ~10M events/day before queries get slow.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Pure MongoDB adapter: AI-agent Mongoose models and repositories on a caller-supplied connection
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 43d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | MemorySync | — | 🪝 | |
|
Package purpose: MemorySync integration for LangChain.js and LangGraph.js: chat message history, memory tools, recall context, and a LangGraph store.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||