🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Growing Packages Fastest-adopted since publish Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
27 100d 9 0 ↑0.1/day
Possible Squatted Stub
llamaindex pypi 0.1.0 — reachout@tealtiger.ai tealtiger.ai
Package purpose: TealTiger governance callback handler for LlamaIndex — deterministic policy enforcement, cost tracking, and audit for RAG pipelines
Claimed homepage: https://pypi.org/project/llamaindex-tealtiger/
Matched naming pattern: python-llamaindex-tealtiger
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 100
Registry downloads: 9/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 7 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'llamaindex-tealtiger' matches AI hallucination template [python] + [llamaindex] + [tealtiger].
  • HIGHClaims critical enterprise brand identity ('LLAMAINDEX').
  • INFOPublisher email domain '@tealtiger.ai' matches package identifier token 'tealtiger', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (93 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 7 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 158d 3 4 ↑0.0/day
Possible Squatted Stub
okx pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: An SDK to connect Okx with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-okx/
Matched naming pattern: python-okx-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 158
Registry downloads: 3/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 96 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'tribulnation-okx' matches AI hallucination template [python] + [okx] + [tribulnation].
  • HIGHClaims critical enterprise brand identity ('OKX').
  • INFOPublisher email domain '@tribulnation.com' matches package identifier token 'tribulnation', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (147 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 96 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 158d 0 4 ↑0.0/day
Possible Squatted Stub
gemini pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: An SDK to connect Gemini with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-gemini/
Matched naming pattern: python-gemini-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 158
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 102 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'tribulnation-gemini' matches AI hallucination template [python] + [gemini] + [tribulnation].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • INFOPublisher email domain '@tribulnation.com' matches package identifier token 'tribulnation', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (146 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 102 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 158d 6 4 ↑0.0/day
Possible Squatted Stub
cryptocom pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: An SDK to connect Cryptocom with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-cryptocom/
Matched naming pattern: python-cryptocom-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 158
Registry downloads: 6/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 108 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'tribulnation-cryptocom' matches AI hallucination template [python] + [cryptocom] + [tribulnation].
  • HIGHClaims critical enterprise brand identity ('CRYPTOCOM').
  • INFOPublisher email domain '@tribulnation.com' matches package identifier token 'tribulnation', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (147 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 108 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 158d 6 4 ↑0.0/day
Possible Squatted Stub
bitfinex pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: An SDK to connect Bitfinex with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-bitfinex/
Matched naming pattern: python-bitfinex-tribulnation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 158
Registry downloads: 6/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 106 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'tribulnation-bitfinex' matches AI hallucination template [python] + [bitfinex] + [tribulnation].
  • HIGHClaims critical enterprise brand identity ('BITFINEX').
  • INFOPublisher email domain '@tribulnation.com' matches package identifier token 'tribulnation', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (132 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 106 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 179d 19 13 ↑0.1/day
Possible Squatted Stub
anthropic pypi 1.0.2 — support@truthlocks.com truthlocks.com
Package purpose: Truthlocks MAIP wrapper for Anthropic — auto-generate cryptographic receipts for every Claude API call
Claimed homepage: https://pypi.org/project/truthlocks-anthropic/
Matched naming pattern: python-anthropic-truthlocks
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 179
Registry downloads: 19/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 13 lines, 509 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'truthlocks-anthropic' matches AI hallucination template [python] + [anthropic] + [truthlocks].
  • HIGHClaims critical enterprise brand identity ('ANTHROPIC').
  • INFOPublisher email domain '@truthlocks.com' matches package identifier token 'truthlocks', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (169 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (13 LOC, 1 file(s), 509 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 179d 17 12 ↑0.1/day
Possible Squatted Stub
openai pypi 1.0.2 — support@truthlocks.com truthlocks.com
Package purpose: Truthlocks MAIP wrapper for OpenAI — auto-generate cryptographic receipts for every API call
Claimed homepage: https://pypi.org/project/truthlocks-openai/
Matched naming pattern: python-openai-truthlocks
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 179
Registry downloads: 17/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 12 lines, 454 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'truthlocks-openai' matches AI hallucination template [python] + [openai] + [truthlocks].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • INFOPublisher email domain '@truthlocks.com' matches package identifier token 'truthlocks', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (175 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (12 LOC, 1 file(s), 454 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 179d 17 8 ↑0.1/day
Possible Squatted Stub
crewai pypi 1.0.2 — support@truthlocks.com truthlocks.com
Package purpose: Truthlocks MAIP integration for CrewAI — auto-generate cryptographic receipts for every crew task and agent action
Claimed homepage: https://pypi.org/project/truthlocks-crewai/
Matched naming pattern: python-crewai-truthlocks
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 179
Registry downloads: 17/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 8 lines, 337 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'truthlocks-crewai' matches AI hallucination template [python] + [crewai] + [truthlocks].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • INFOPublisher email domain '@truthlocks.com' matches package identifier token 'truthlocks', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (175 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 337 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 179d 15 8 ↑0.1/day
Possible Squatted Stub
llamaindex pypi 1.0.2 — support@truthlocks.com truthlocks.com
Package purpose: Truthlocks MAIP integration for LlamaIndex — auto-generate cryptographic receipts for every query and retrieval
Claimed homepage: https://pypi.org/project/truthlocks-llamaindex/
Matched naming pattern: python-llamaindex-truthlocks
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 179
Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 8 lines, 382 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'truthlocks-llamaindex' matches AI hallucination template [python] + [llamaindex] + [truthlocks].
  • HIGHClaims critical enterprise brand identity ('LLAMAINDEX').
  • INFOPublisher email domain '@truthlocks.com' matches package identifier token 'truthlocks', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (175 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 382 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 179d 17 13 ↑0.1/day
Possible Squatted Stub
langchain pypi 1.0.2 — support@truthlocks.com truthlocks.com
Package purpose: Truthlocks MAIP integration for LangChain — auto-generate cryptographic receipts for every chain and agent action
Claimed homepage: https://pypi.org/project/truthlocks-langchain/
Matched naming pattern: python-langchain-truthlocks
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 179
Registry downloads: 17/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 13 lines, 465 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'truthlocks-langchain' matches AI hallucination template [python] + [langchain] + [truthlocks].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • INFOPublisher email domain '@truthlocks.com' matches package identifier token 'truthlocks', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (176 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (13 LOC, 1 file(s), 465 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 179d 10 2 ↑0.1/day
Possible Squatted Stub
langchain pypi 0.0.1 — ceo@karonlabs.net karonlabs.net
Package purpose: Karon Web Unblocker — Reserved package. See https://karonlabs.net/api/
Claimed homepage: https://pypi.org/project/karon-langchain/
Matched naming pattern: python-langchain-karon
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 179
Registry downloads: 10/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 82 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'karon-langchain' matches AI hallucination template [python] + [langchain] + [karon].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • INFOPublisher email domain '@karonlabs.net' matches package identifier token 'karonlabs', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (172 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 82 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 236d 46 14 ↑0.2/day
Possible Squatted Stub
addon pypi 18.0.1.0.0.3 Binhex, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org
Package purpose: Add Cloudflare Turnstile captcha to login form
Claimed homepage: https://github.com/OCA/website
Matched naming pattern: odoo-addon-website
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 236
Registry downloads: 46/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 602 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@odoo-community.org' matches package identifier token 'odoo-community', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 229 days ago within the 1-year AI tool proliferation window.
  • HIGHPackage registered with suspiciously high major version (v18.0.1.0.0.3, major 18) despite recent registration (229 days ago, 2 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (14 LOC, 2 file(s), 602 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 340d 0 16 ↑0.0/day
Possible Squatted Stub
addon pypi 16.0.1.0.0.3 Coop IT Easy SC, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org
Package purpose: Load new partner data during a POS sale
Claimed homepage: https://github.com/OCA/pos
Matched naming pattern: odoo-addon-pos
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 340
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 16 lines, 716 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@odoo-community.org' matches package identifier token 'odoo-community', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 333 days ago within the 1-year AI tool proliferation window.
  • HIGHPackage registered with suspiciously high major version (v16.0.1.0.0.3, major 16) despite recent registration (333 days ago, 2 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (16 LOC, 2 file(s), 716 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
27 346d 56 22 ↑0.2/day
Possible Squatted Stub
base pypi 18.0.1.0.0.4 =?utf-8?q?Heligr=C3=A0fics_Fotogrametr=C3=ADa_S=2EL=2E=2C_Odoo_Community_Association_=28OCA=29?= support@odoo-community.org odoo-community.org
Package purpose: Integration between base_fontawesome and web_editor for FontAwesome >= 6.7.2 support.
Claimed homepage: https://github.com/OCA/server-tools
Matched naming pattern: odoo-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 346
Registry downloads: 56/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 22 lines, 948 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@odoo-community.org' matches package identifier token 'odoo-community', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 338 days ago within the 1-year AI tool proliferation window.
  • HIGHPackage registered with suspiciously high major version (v18.0.1.0.0.4, major 18) despite recent registration (338 days ago, 5 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (22 LOC, 2 file(s), 948 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
25 1h — — —
Very Risky
— pypi 0.1.0 caca2331 — 🪝
Package purpose: 从视频里抽全部屏幕文字、带起止时间、按区域聚类，导出 SRT / ASS
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in flowocr-0.1.0/src/flowocr/analyze/build_tracks.py:2845
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in flowocr-0.1.0/src/flowocr/analyze/slot_pairs.py:180
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in flowocr-0.1.0/src/flowocr/extract/childproc.py:46
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in flowocr-0.1.0/src/flowocr/extract/childproc.py:49
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in flowocr-0.1.0/src/flowocr/extract/decode_proc.py:296
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in flowocr-0.1.0/src/flowocr/extract/decode_shards.py:111
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in flowocr-0.1.0/src/flowocr/extract/ffcheck.py:31
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in flowocr-0.1.0/src/flowocr/extract/framesource.py:232

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
25 9h — — —
Possible Squatted Stub
— npm latest — — 🌐
Package purpose: LangChain.js LLM cost tracking with provider-reported usage, scheduled pricing refresh, local memory or Redis storage.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/pricing/service.js:11 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 28h — — —
Possible Squatted Stub
— npm latest ultimate-websocket-dev — 🪝
Package purpose: Ultra-fast WebSocket client built for Discord gateway workloads. Raw TLS, hand-rolled frame codec, native payload filtering, zlib-stream and ETF support. Zero dependencies.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node -e "console.log('ultimate-websocket v' + require('./package.json').version + ' installed'); try { require('node-net-pool'); console.log('node-net-pool: ok'); } catch { console.log('node-net-pool: missing'); }"'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 29h — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Live terminal heads-up display for coding-agent usage, limits and cost
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node preinstall.cjs'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 33h — — —
Possible Squatted Stub
— npm latest prentece — 🪝
Package purpose: Astrix binary for Windows x64
Static code signals:
  • BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bin/astrix.exe' in npm tarball

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 45h — — —
Possible Squatted Stub
— npm latest Tovonirina Andrianarivelo — 🪝
Package purpose: Claude Skill for XtendM3 API development - Interactive with Claude capabilities
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 47h — — —
Possible Squatted Stub
— npm latest — — 🌐
Package purpose: Bitbucket API Integration for Ferrox-Node
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:15 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 51h — — —
Possible Squatted Stub
— npm latest Kieran Rosenberg — 🪝
Package purpose: Tree-sitter grammar for Rake, a vector-first SIMD language
Static code signals:
  • LIFECYCLE_SCRIPT: 'install' -> 'node-gyp rebuild'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 59h — — —
Possible Squatted Stub
— npm latest — — 🌐
Package purpose: Moteur de comptabilité en partie double : écritures équilibrées et immuables, numérotation sans trou, clôture, lettrage, rapprochement bancaire, états SYSCOHADA, plans OHADA (SYSCOHADA, SYSCEBNL) et TVA RDC.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/import-odoo.js:156

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 68h — — —
Possible Squatted Stub
— npm latest — — 🌐
Package purpose: In-process, dev-only S3 emulator backed by the FS storage adapter.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:339

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 70h — — —
Possible Squatted Stub
— npm latest — — 🌐
Package purpose: Google Apps Script friendly Gemini API client.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/GeminiApiClient.js:24

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 3d — — —
Possible Squatted Stub
— npm latest — — 🌐
Package purpose: SafeZone unblocked arcade portal
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/script.js:80

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 3d — — —
Possible Squatted Stub
— npm latest x12 — 🌐
Package purpose: xtivix adapter for Cloudflare AI Gateway logs (push and pull)
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:168

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 4d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Gives a [Mercury](https://github.com/lucabro81/mercury-fw) agent read-only access to Bitbucket pull requests (listing them, reading one), through the `bitbucket` CLI. The pinned binary downloads when the package installs.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'bun run scripts/install-bitbucket-cli.ts'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 4d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Gives a [Mercury](https://github.com/lucabro81/mercury-fw) agent Jira, through the `jira` CLI: searching with JQL, reading an issue and its transitions, finding people and projects, creating issues, moving and assigning them, commenting (mentions included
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'bun run scripts/install-jira-cli.ts'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 4d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Lets a [Mercury](https://github.com/lucabro81/mercury-fw) agent look up users in an Atlassian organization, through the `atlassian-admin` CLI (read-only). The pinned binary downloads when the package installs.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'bun run scripts/install-atlassian-admin-cli.ts'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 4d — — —
Very Risky
— pypi 1.0.7 — — 🪝
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in beautifytext-1.0.7/beautifyText/_compat.py:126
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in beautifytext-1.0.7/beautifyText/_compat.py:31
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in beautifytext-1.0.7/beautifyText/_compat.py:206
  • SOURCE_CODE_ENV_VARS_ACCESS: Call to os.environ.get() in beautifytext-1.0.7/setup.py:7
  • SOURCE_CODE_ENV_VARS_ACCESS: Access to os.environ in beautifytext-1.0.7/setup.py:7
  • SOURCE_CODE_ENV_VARS_ACCESS: Access to os.environ in beautifytext-1.0.7/setup.py:10
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in beautifytext-1.0.7/setup.py:7
  • INSTALL_TIME_EXECUTION: 'Python setup.py Custom Install Hook' found in beautifytext-1.0.7/setup.py:20

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
25 4d — — —
Possible Squatted Stub
— npm latest — — 🌐
Package purpose: react-native-fetch-blob for HarmonyOS
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/commonjs/Fetch.js:56 (+23 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 4d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Git worktree CLI and Pi skill for isolated coding tasks.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/install.mjs'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 4d — — —
Possible Squatted Stub
— npm latest — — 🌐
Package purpose: Управление Telegram-рассылками для AdonisJS 7 и PostgreSQL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/src/bot_api_transport.js:160

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 5d — — —
Possible Squatted Stub
— npm latest — — 🌐
Package purpose: Convenience wrapper for the Supabase Management API
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:76 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 5d — — —
Very Risky
— pypi 3.1.2 MIZAN Contributors — 🪝
Package purpose: Agentic Personal AI - Quranic Cognitive Architecture for human-like reasoning
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pymizan-3.1.2/backend/doctor.py:469
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in pymizan-3.1.2/backend/providers.py:27
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in pymizan-3.1.2/backend/agents/base.py:2417
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pymizan-3.1.2/backend/agents/base.py:1188
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in pymizan-3.1.2/backend/agents/base.py:105
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in pymizan-3.1.2/backend/agents/specialized.py:653
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in pymizan-3.1.2/backend/api/main.py:1668
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in pymizan-3.1.2/backend/api/main.py:107

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
25 5d — — —
Possible Squatted Stub
— npm latest Slid Phi Labs — 🪝
Package purpose: Residual-governed tool gate for agentic systems (Slid Phi Labs commercial product). Public package is a stub only.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node src/postinstall.js'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 5d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Send simulator notifications and inspect app receipt, interactions and device tokens.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'echo "Run pnpm build to compile this package"'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 6d — — —
Possible Squatted Stub
— npm latest wangxiang0605 — 🌐
Package purpose: Pi extension: Shows the DeepSeek account balance in the status bar (refreshed every 5 minutes and after each turn) and tracks token usage and cost per task. / Pi 扩展：在状态栏显示 DeepSeek 账户余额（每 5 分钟及每轮对话后刷新），并统计一次任务消耗的 token 与费用。
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/extensions/deepseek-balance.ts:144

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 6d — — —
Possible Squatted Stub
— npm latest — — 🌐
Package purpose: Shared bounded equirectangular panorama loader for Workshop and NextVR. Uses the host Three.js r117 renderer and camera. No input handlers, business requests, server transforms, or animation loop are created by the package.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/index.js:1 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 6d — — —
Possible Squatted Stub
— npm latest — — 🌐
Package purpose: Cloudflare runtime for the UniDocs Operator: Agent session Durable Object and operator CAS storage
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/session.js:27

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 6d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Manage your todos through Notion: keeps a local SQLite mirror of your Notion task databases for fast reads, time tracking, and agent-driven task management
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'uv sync'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 6d — — —
Possible Squatted Stub
— npm latest M. Reifschneider — 🪝
Package purpose: Strict CSS grammar for tree-sitter
Static code signals:
  • LIFECYCLE_SCRIPT: 'install' -> 'node-gyp-build'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 6d — — —
Possible Squatted Stub
— npm latest M. Reifschneider — 🪝
Package purpose: Tree-sitter grammar for ASP.NET Web Forms markup
Static code signals:
  • LIFECYCLE_SCRIPT: 'install' -> 'node-gyp-build'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 7d — — —
Possible Squatted Stub
— npm latest — — 🌐
Package purpose: Floating DeepSeek API balance badge for the DeepSeek Harness Web UI, backed by the harness's own DEEPSEEK_API_KEY credential
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/client.js:152 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 7d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: 失敗したコマンドの原因と対処法を日本語で表示する CLI（オフライン・AI なし）
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 8d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: SendHoney platform CLI for authenticated API, CRUD, release, and ThunderCompute operations.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 8d — — —
Possible Squatted Stub
— npm latest stream — 🌐
Package purpose: Cloudflare Workers AI 这一家在 Stream 里的知识。宿主不认识 Cloudflare，只认识「`transcribe` 梯子上有个转写成员」。
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:18

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 9d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: Mouse tracking for OS X
Static code signals:
  • LIFECYCLE_SCRIPT: 'install' -> 'node-gyp rebuild'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 9d — — —
🐛 Potential Cross-Ecosystem Worm Very Risky
— pypi 0.1.0a19 MemTether Contributors — 🪝 🐛
Package purpose: Cross-client memory hub for AI agents — one physical memory, many clients
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in memtether-0.1.0a19/api_server.py:11
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in memtether-0.1.0a19/approve.py:43
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in memtether-0.1.0a19/astra_dialogue.py:33
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in memtether-0.1.0a19/astra_memory_closure.py:20
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in memtether-0.1.0a19/attach_hubguard.py:166
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in memtether-0.1.0a19/attach_hubguard.py:133
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in memtether-0.1.0a19/bench_longmemeval.py:426
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in memtether-0.1.0a19/clients/base.py:38

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
« Prev Next »
LINK COPIED TO CLIPBOARD