Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 25 | 28d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: macOS Intel native payload for Fabr Client
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 28d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 28d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Stencil Component Starter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 29d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Tierney Cyren | — | 🪝 | |
|
Package purpose: A personal card for Richard Hess (@eswat42)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 29d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Binance market connector plugin for dsh-trading: public market data over REST+WS implementing the @dshtrading/api contracts
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 29d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Thin alias for @junction41/dispatcher. `npm install -g j41-dispatcher` installs the current CLI (not frozen 2.0.0).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 30d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Prebuilt `duhem` binary for linux-x64.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: NextClaw Discord channel extension process.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Centralized service to override motors on humanoids and other places
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Utility functions for grabbing the Roblox API from the web
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Binder that will automatically bind to each player's humanoid
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Determines if parts are touching or not
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Binds the given class to each player in the game
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A set of observable collections, such as sets, maps, sorted lists, and more.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Bottom sheet and floating window components for React Native, with configurable presentation and native-driver animations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Voltro UG | — | 🌐 | |
|
Package purpose: Deep Datadog integration — agentless metrics push (unified Metrics-API → /api/v2/series) + opt-in log forwarding (dd.trace_id-correlated → /api/v2/logs) + traces (framework OTel spans → Datadog Agent OTLP) + the dd-trace continuous profiler, all correlate
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 32d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Securiti.ai | securiti.ai | 🪝 | |
|
Package purpose: A React Native Library for managing user consent preferences and compliance with privacy regulations. Integrates with Securiti's Consent Management Platform.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: KaneAI CLI — assurance-agent binary for Linux x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: KaneAI CLI — assurance-agent binary for Linux ARM64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: KaneAI CLI — assurance-agent binary for macOS x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: KaneAI CLI — assurance-agent binary for macOS ARM64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: KaneAI CLI — v16-runner binary for Linux x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Jason Karns | — | 🪝 | |
|
Package purpose: A nodenv plugin providing node-build definitions for Node.js prereleases.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Trust Payments | — | 🪝 | |
|
Package purpose: TypeScript Payment Card
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Zowe | — | 🪝 | |
|
Package purpose: Credential management facilities for Imperative, Zowe CLI, and extenders.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Robin Paul | — | 🪝 | |
|
Package purpose: Rust-based utilities for proteinpaint
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | IBM Corp | — | 🪝 | |
|
Package purpose: Be sure to review the [chat documentation](https://chat.carbondesignsystem.com/tag/latest/docs/documents/Overview.html).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: AI Chat Components
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 34d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Astrale Shell SDK — parent/child/kernel communication
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 34d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 34d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Alexey Litovchenko | — | 🪝 | |
|
Package purpose: Preset of configuration files and dependencies for linting web applications (designed for Vue.js with TypeScript)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 44d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: External BYOK provider for Anthropic in cmd.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 49d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 69d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Colby Gilbert | — | 🌐 | |
|
Package purpose: microsoft-teams tools for FrogBot.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 69d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Colby Gilbert | — | 🌐 | |
|
Package purpose: Discord tools for FrogBot.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 70d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Supabase realtime adapter for @tsworldtech/flux
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 104d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Mesh-owned Tron wallet connector for Universal Wallet Connector — zero third-party Tron runtime deps; signs via the wallet's injected tronWeb, builds/broadcasts via the Tron full-node HTTP API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 112d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: React + Vite + TypeScript widgets for the public reviews API from `panel`. Widget interface text is available in English, Ukrainian, and Russian. English remains the default unless a language option is explicitly configured.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 147d | — | — | — |
Very Risky
|
— | pypi | 11382.0.0 | — | — | 🪝 | |
|
Package purpose: llama.cpp server binary built from source
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 25 | 159d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Synap memory integration for Anthropic's Claude Agent SDK (TypeScript)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 162d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | DeepPulse | — | 🪝 | |
|
Package purpose: Legacy name of sprag-cli (Sprag) - same tool, kept publishing so existing installs stay current. Prefer: npm i -g sprag-cli
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 162d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Holo-JS Framework - Google social auth provider
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 162d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Holo-JS Framework - Discord social auth provider
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 162d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Holo-JS Framework - Clerk auth integration contracts
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 169d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Anthropic | — | 🪝 | |
|
Package purpose: Claude Code restored for Node.js runtime.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 175d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 229d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | vDoIT Technologies Ltd, Sector 66, Gurugram, Haryana 122011, India | — | 🌐 | |
|
Package purpose: Vault SDK — File storage client for uploading, managing, and organizing files in your vault
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 403d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🌐 | |
|
Package purpose: Service to integrate with Google Places API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 501d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Dynamic Labs, Inc. | — | 🌐 | |
|
Package purpose: A React SDK for implementing wallet web3 authentication and authorization to your website.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 25 | 564d | — | — | — |
Very Risky
|
— | pypi | 2.1144.0 | — | — | 🪝 | |
|
Package purpose: Python wrapper for AWS CDK CLI with smart Node.js runtime management
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||