Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 25 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Hans Zeller | — | 🪝 | |
|
Package purpose: The minimaz/mz CLI binary — a published distribution of @minimaz/cli's commands.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Sebastian Hildebrandt | — | 🪝 | |
|
Package purpose: SMC reader for macOS on Apple Silicon: temperatures, frequencies, power and fans
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: System One decision gateway CLI + server — von/laya local ONNX backends, jev on OpenRouter Decisions. One wire protocol: noul/choice/score questions in, typed answers out.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 10d | — | — | — |
Very Risky
|
— | pypi | 0.5.1 | dbmrq | — | 🪝 | |
|
Package purpose: Turn coding-agent session history into reviewed skills, memories, and rules.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | jhotadhari | — | 🪝 | |
|
Package purpose: Weather GRIB overlay extension for react-native-mapsforge-vtm. Renders gridded weather data (wind, temperature, pressure, etc.) as colored overlays on offline vector maps. Android only.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | MuxYang | — | 🌐 | |
|
Package purpose: Monitor Sentry crash and ANR events and send grouped reports to Koishi channels.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: HAWKV2 — AI-powered development tool. Community fork of opencode (MCP auto-reconnect, hot reload, eval pipeline, memory consolidation, unified prompt); installs the HAWKV2 CLI as `hawk` alongside the official opencode.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Max Brunsfeld | — | 🪝 | |
|
Package purpose: Bash grammar for tree-sitter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Anthropic Messages model binding for Castle agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Chat Completions model binding for Castle agents, including OpenRouter.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Gemini API model binding for Castle agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A 6MB coding agent. Run a fleet on your laptop.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | DTMosken | — | 🌐 | |
|
Package purpose: Cortico 的 DeepSeek Responses API 模型供应商扩展。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 12d | — | — | — |
Very Risky
|
— | pypi | 0.2.2 | — | — | 🪝 | |
|
Package purpose: Find fellow GitHub geeks who match your CV and repos and are likely to follow back. Suggests only — you always follow manually.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 15d | — | — | — |
Very Risky
|
— | pypi | 0.1.8 | arsalanriaz | — | 🪝 | |
|
Package purpose: Zero-shot drug repurposing via TxGNN on PrimeKG and OptimusKG
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Microsoft Corporation | — | 🪝 | |
|
Package purpose: Playwright package that automatically installs WebKit
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Microsoft Corporation | — | 🪝 | |
|
Package purpose: Playwright package that automatically installs Firefox
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Microsoft Corporation | — | 🪝 | |
|
Package purpose: A high-level API to automate WebKit
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Microsoft Corporation | — | 🪝 | |
|
Package purpose: Playwright package that automatically installs Chromium
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Microsoft Corporation | — | 🪝 | |
|
Package purpose: A high-level API to automate Chromium
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Agentgates | — | 🪝 | |
|
Package purpose: Wallet operations for AI agents and humans
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Pugi CLI - terminal-native software execution system
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | johan@frost.se johan@frost.se | frost.se | 🌐 | |
|
Package purpose: Flink plugin to work with s3
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | imaginario27 | — | 🪝 | |
|
Package purpose: A modular Design System and UI component library built for Vue and Nuxt. It provides a scalable architecture for building consistent interfaces, theme management, and reusable components powered by Tailwind CSS and TypeScript.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Linux x64 native payload for Fabr Client
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Ollama model provider extension for ECP
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | maki maki | — | 🪝 | |
|
Package purpose: Code Shell — meta package. Installs @cjhyy/code-shell-core and @cjhyy/code-shell-tui.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Artem Maltsev | — | 🪝 | |
|
Package purpose: SQLite adapter for @atscript/db with swappable driver support.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A simple ui library for React
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 17d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | imaginario27 | — | 🪝 | |
|
Package purpose: Utility package containing helper functions and reusable logic used across the Air UI ecosystem. Designed for Vue and Nuxt applications with TypeScript support.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 17d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Rob Sweet | — | 🪝 | |
|
Package purpose: MCP server for Apple Notes - create, search, update, and manage notes via Claude and other AI assistants
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 17d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Presentational tiles for Tile storefront apps — props in, callbacks out. Zero runtime dependencies; every native module is a peer pinned by the host, so a kit release is always an OTA and never a store release.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 17d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Colby Gilbert | — | 🌐 | |
|
Package purpose: airtable tools for FrogBot.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 17d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: node
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 18d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Fireworks AI provider extension for pi - Access Kimi, MiniMax, GLM, DeepSeek, and GPT-OSS models through the Fireworks AI API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 18d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: This package contains the Cosmos integration for the Dynamic SDK.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 18d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | vtempest | — | 🪝 | |
|
Package purpose: Generate production-ready MCP servers from any OpenAPI specification using the highly-used and convenient [mcp-use](https://mcp-use.com) framework
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 20d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 20d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | nokhodian | — | 🪝 | |
|
Package purpose: Open-source CLI extension for Claude Code, OpenCode, Antigravity, Kimi Code, and Codex. Adds an MCP server with a codebase knowledge graph, persistent memory, multi-agent coordination, and reusable slash commands. Apache 2.0 licensed. See https://github.c
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 21d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Microsoft Corporation | — | 🪝 | |
|
Package purpose: A high-level API to automate Firefox
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 21d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Deprecated compatibility shim for Engram installs. Re-exports @remnic/plugin-openclaw and forwards engram-access to @remnic/core.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 22d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Mailgun production email transport for OwlMeans — implements `MailerService` via the Mailgun HTTP API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 23d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: KaneAI CLI — v16-runner binary for macOS x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 23d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Sci-fi terminal widgets that show only real data.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 24d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Rob Sweet | — | 🪝 | |
|
Package purpose: MCP server for Apple Mail - read, search, send, and manage emails via Claude and other AI assistants
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 24d | — | — | — |
Very Risky
|
— | pypi | 1.3.0 | Steffen Probst | — | 🪝 | |
|
Package purpose: Installer protocol + helpers for self-installing Python CLI/GUI tools (desktop shortcuts, bash aliases, cron entries), plus reusable tkinter and curses installer screens
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 24d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Simon Boissonneault-Robert | — | 🪝 | |
|
Package purpose: High level functionality that builds upon the other packages in the Tezos Typescript Library Suite.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 24d | — | — | — |
Very Risky
|
— | pypi | 0.4.1 | — | — | 🪝 | |
|
Package purpose: Language-agnostic software supply-chain security scanner. Detects malicious packages, suspicious install-time behaviour, secrets and dependency risk across any ecosystem.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Shane Friedman | — | 🪝 | |
|
Package purpose: A library and CLI for automatically aligning audiobooks and EPUBs to produce Media Overlays
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||