🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Growing Packages Fastest-adopted since publish Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
25 592d — — —
Very Risky
— pypi 0.27.1rc1 vLLM-Ascend team — 🪝
Package purpose: vLLM Ascend backend plugin
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in vllm_ascend-0.27.1rc1/.agents/skills/vllm-ascend-release/scripts/fetch_commits.py:853
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_ascend-0.27.1rc1/.agents/skills/vllm-ascend-release/scripts/fetch_commits.py:21
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in vllm_ascend-0.27.1rc1/.agents/skills/vllm-ascend-release/scripts/fetch_commits.py:21
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in vllm_ascend-0.27.1rc1/.agents/skills/vllm-ascend-release/scripts/scan_nightly_status.py:61
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in vllm_ascend-0.27.1rc1/.agents/skills/vllm-ascend-release/scripts/scan_release_bugs.py:49
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in vllm_ascend-0.27.1rc1/.agents/skills/vllm-ascend-release/scripts/scan_test_coverage.py:115
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in vllm_ascend-0.27.1rc1/.agents/skills/vllm-ascend-release/scripts/update_checklist_section.py:24
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in vllm_ascend-0.27.1rc1/collect_env.py:90

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
25 1291d — — —
Possible Squatted Stub
— npm latest — — 🌐
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.cjs:162 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 1459d — — —
Possible Squatted Stub
— npm latest — — 🌐
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.cjs:456 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 1462d — — —
Possible Squatted Stub
— npm latest — — 🌐
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/ccip-RE54DQE3.js:1999

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 1476d — — —
Possible Squatted Stub
— npm latest Planet's Lightning Arrester — 🪝
Package purpose: Parse Brazilian brokerage notes PDFs (Rico, Clear, and Inter holders available)
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'npx husky'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 2719d — — —
Very Risky
— pypi 4.28.0 Bioinformatics Laboratory, FRI UL — 🪝
Package purpose: Base Widget for Orange Canvas
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in orange_widget_base-4.28.0/orangewidget/utils/webview.py:47
  • SOURCE_CODE_ENV_VARS_ACCESS: Call to os.environ.get() in orange_widget_base-4.28.0/setup.py:99
  • SOURCE_CODE_ENV_VARS_ACCESS: Access to os.environ in orange_widget_base-4.28.0/setup.py:99
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in orange_widget_base-4.28.0/setup.py:106
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in orange_widget_base-4.28.0/setup.py:99
  • INSTALL_TIME_EXECUTION: 'Python setup.py Custom Install Hook' found in orange_widget_base-4.28.0/setup.py:74
  • SUPPLY_CHAIN_EXECUTION_HOOK: 'PyPI Custom Install Class Override' found in orange_widget_base-4.28.0/setup.py:74

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
25 2945d — — —
Possible Squatted Stub
— npm latest Syncfusion Inc. — 🪝
Package purpose: A common package of Essential JS 2 base Angular libraries, methods and class definitions
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node ./postinstall.js'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
25 3579d — — —
Possible Squatted Stub
— npm latest Trey Tacon — 🪝
Package purpose: Installs and starts the AWS XRay daemon
Static code signals:
  • LIFECYCLE_SCRIPT: 'install' -> 'install-files source'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
22 194d 8 22 ↑0.0/day
Possible Squatted Stub
base pypi 1.0.0 Slash Mark info@slashmark.in slashmark.in
Package purpose: Base CLI tool
Claimed homepage: https://slashmark.in
Matched naming pattern: python-base-slashmark
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 194
Registry downloads: 8/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 22 lines, 574 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@slashmark.in' matches package identifier token 'slashmark', verifying identifiable third-party organization ownership.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 186 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (22 LOC, 1 file(s), 574 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 198d 0 12 ↑0.0/day
Possible Squatted Stub
perplexity pypi 0.1.0 Jacob Stewart jacob@swarmauri.com swarmauri.com
Package purpose: Swarmauri Perplexity LLM adapters from swarmauri_standard.
Claimed homepage: https://pypi.org/project/swarmauri_llm_perplexity/
Matched naming pattern: swarmauri-perplexity-perplexity
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 198
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 12 lines, 446 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'swarmauri-llm-perplexity' matches AI hallucination template [swarmauri] + [perplexity] + [perplexity].
  • HIGHClaims critical enterprise brand identity ('PERPLEXITY').
  • INFOPublisher email domain '@swarmauri.com' matches package identifier token 'swarmauri', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 187 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (12 LOC, 2 file(s), 446 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 198d 67 15 ↑0.3/day
Possible Squatted Stub
mistral pypi 0.1.0 Jacob Stewart jacob@swarmauri.com swarmauri.com
Package purpose: Swarmauri Mistral LLM adapters from swarmauri_standard.
Claimed homepage: https://pypi.org/project/swarmauri_llm_mistral/
Matched naming pattern: swarmauri-mistral-mistral
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 198
Registry downloads: 67/month, 13/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 594 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'swarmauri-llm-mistral' matches AI hallucination template [swarmauri] + [mistral] + [mistral].
  • HIGHClaims critical enterprise brand identity ('MISTRAL').
  • INFOPublisher email domain '@swarmauri.com' matches package identifier token 'swarmauri', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 187 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (15 LOC, 3 file(s), 594 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 198d 57 21 ↑0.3/day
Possible Squatted Stub
groq pypi 0.1.0 Jacob Stewart jacob@swarmauri.com swarmauri.com
Package purpose: Swarmauri Groq LLM adapters from swarmauri_standard.
Claimed homepage: https://pypi.org/project/swarmauri_llm_groq/
Matched naming pattern: swarmauri-groq-groq
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 198
Registry downloads: 57/month, 14/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 857 Bytes across 5 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'swarmauri-llm-groq' matches AI hallucination template [swarmauri] + [groq] + [groq].
  • HIGHClaims critical enterprise brand identity ('GROQ').
  • INFOPublisher email domain '@swarmauri.com' matches package identifier token 'swarmauri', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 187 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 5 file(s), 857 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 198d 0 15 ↑0.0/day
Possible Squatted Stub
gemini pypi 0.1.0 Jacob Stewart jacob@swarmauri.com swarmauri.com
Package purpose: Swarmauri Gemini LLM adapters from swarmauri_standard.
Claimed homepage: https://pypi.org/project/swarmauri_llm_gemini/
Matched naming pattern: swarmauri-gemini-gemini
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 198
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 599 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'swarmauri-llm-gemini' matches AI hallucination template [swarmauri] + [gemini] + [gemini].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • INFOPublisher email domain '@swarmauri.com' matches package identifier token 'swarmauri', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 187 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (15 LOC, 3 file(s), 599 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 198d 52 15 ↑0.3/day
Possible Squatted Stub
cohere pypi 0.1.0 Jacob Stewart jacob@swarmauri.com swarmauri.com
Package purpose: Swarmauri Cohere LLM adapters from swarmauri_standard.
Claimed homepage: https://pypi.org/project/swarmauri_llm_cohere/
Matched naming pattern: swarmauri-cohere-cohere
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 198
Registry downloads: 52/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 581 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'swarmauri-llm-cohere' matches AI hallucination template [swarmauri] + [cohere] + [cohere].
  • HIGHClaims critical enterprise brand identity ('COHERE').
  • INFOPublisher email domain '@swarmauri.com' matches package identifier token 'swarmauri', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 183 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (15 LOC, 3 file(s), 581 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 198d 45 15 ↑0.2/day
Possible Squatted Stub
anthropic pypi 0.1.0 Jacob Stewart jacob@swarmauri.com swarmauri.com
Package purpose: Swarmauri Anthropic LLM adapters from swarmauri_standard.
Claimed homepage: https://pypi.org/project/swarmauri_llm_anthropic/
Matched naming pattern: swarmauri-anthropic-anthropic
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 198
Registry downloads: 45/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 620 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'swarmauri-llm-anthropic' matches AI hallucination template [swarmauri] + [anthropic] + [anthropic].
  • HIGHClaims critical enterprise brand identity ('ANTHROPIC').
  • INFOPublisher email domain '@swarmauri.com' matches package identifier token 'swarmauri', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 183 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (15 LOC, 3 file(s), 620 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 221d 9 0 ↑0.0/day
Possible Squatted Stub
crewai pypi 1.1.0 — contact@piqrypt.com piqrypt.com
Package purpose: PiQrypt cryptographic audit trail bridge for CrewAI
Claimed homepage: https://pypi.org/project/piqrypt-crewai-integration/
Matched naming pattern: piqrypt-crewai-integration
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 221
Registry downloads: 9/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 11 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'piqrypt-crewai-integration' matches AI hallucination template [piqrypt] + [crewai] + [integration].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • INFOPublisher email domain '@piqrypt.com' matches package identifier token 'piqrypt', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 217 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 11 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 221d 10 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 1.1.0 — contact@piqrypt.com piqrypt.com
Package purpose: PiQrypt Verifiable AI Agent Memory bridge for LangChain
Claimed homepage: https://pypi.org/project/piqrypt-langchain-integration/
Matched naming pattern: piqrypt-langchain-integration
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 221
Registry downloads: 10/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 12 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'piqrypt-langchain-integration' matches AI hallucination template [piqrypt] + [langchain] + [integration].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • INFOPublisher email domain '@piqrypt.com' matches package identifier token 'piqrypt', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 217 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 12 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 324d 7 7 ↑0.0/day
Possible Squatted Stub
gcp pypi 0.0.1 — dev@zephyr-ai.io zephyr-ai.io
Package purpose: Placeholder distribution reserving the Zephyr AI GCP integration name.
Claimed homepage: https://pypi.org/project/zephyr-ai-gcp/
Matched naming pattern: zephyr-gcp-gcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 324
Registry downloads: 7/month, 14/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 254 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'zephyr-ai-gcp' matches AI hallucination template [zephyr] + [gcp] + [gcp].
  • HIGHClaims critical enterprise brand identity ('GCP').
  • INFOPublisher email domain '@zephyr-ai.io' matches package identifier token 'zephyr-ai', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 319 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 254 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
22 324d 8 7 ↑0.0/day
Possible Squatted Stub
aws pypi 0.0.1 — dev@zephyr-ai.io zephyr-ai.io
Package purpose: Placeholder distribution reserving the Zephyr AI AWS integration name.
Claimed homepage: https://pypi.org/project/zephyr-ai-aws/
Matched naming pattern: zephyr-aws-aws
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 324
Registry downloads: 8/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 254 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'zephyr-ai-aws' matches AI hallucination template [zephyr] + [aws] + [aws].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • INFOPublisher email domain '@zephyr-ai.io' matches package identifier token 'zephyr-ai', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 319 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 254 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 84d 10 6 ↑0.1/day
Possible Squatted Stub
shadolog pypi 0.0.1 — eng@shadolog.com shadolog.com
Package purpose: Tamper-evident, independently signed receipts for AI agent actions. Placeholder - full release imminent.
Claimed homepage: https://pypi.org/project/shadolog/
Matched naming pattern: python-shadolog-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 84
Registry downloads: 10/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 6 lines, 372 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@shadolog.com' matches package identifier token 'shadolog', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (67 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (6 LOC, 1 file(s), 372 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 107d 9 7 ↑0.1/day
Possible Squatted Stub
translation pypi 0.1.dev0 — pyansys.core@ansys.com ansys.com
Package purpose: Placeholder package. Contact pyansys.core@ansys.com for private package access.
Claimed homepage: https://pypi.org/project/ansys-translation-utilities/
Matched naming pattern: ansys-translation-utilities
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 107
Registry downloads: 9/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 205 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@ansys.com' matches package identifier token 'ansys', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (97 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 205 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 116d 6 20 ↑0.1/day
Possible Squatted Stub
llama pypi 0.1.0 tempguru-co megan@tempguru.co tempguru.co
Package purpose: LlamaIndex tools for TempGuru event staffing: city coverage, W-2 rate ranges, booking lead times, and state labor compliance for 345+ US/CA cities, plus opt-in quote submission. No API key required.
Claimed homepage: https://pypi.org/project/llama-index-tools-tempguru/
Matched naming pattern: llama-llama-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 116
Registry downloads: 6/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 901 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • INFOPublisher email domain '@tempguru.co' matches package identifier token 'tempguru', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (108 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (20 LOC, 2 file(s), 901 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 116d 12 7 ↑0.1/day
Possible Squatted Stub
valgroup pypi 0.0.1 — luan.marques@valgroupco.com valgroupco.com
Package purpose: Placeholder package to reserve the valgroup-lib-core name on public PyPI and prevent dependency confusion attacks.
Claimed homepage: https://pypi.org/project/valgroup-lib-core/
Matched naming pattern: valgroup-valgroup-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 116
Registry downloads: 12/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 274 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@valgroupco.com' matches package identifier token 'valgroupco', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (105 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 274 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 158d 7 4 ↑0.0/day
Possible Squatted Stub
tribulnation pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: An SDK to connect Blockchaincom with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-blockchaincom/
Matched naming pattern: python-tribulnation-blockchaincom
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 158
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 116 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@tribulnation.com' matches package identifier token 'tribulnation', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (147 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 116 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 158d 6 4 ↑0.0/day
Possible Squatted Stub
tribulnation pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: An SDK to connect Apex with the Tribulnation ecosystem.
Claimed homepage: https://pypi.org/project/tribulnation-apex/
Matched naming pattern: python-tribulnation-apex
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 158
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 98 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@tribulnation.com' matches package identifier token 'tribulnation', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (147 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 98 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 166d 2 2 ↑0.0/day
Possible Squatted Stub
coder pypi 0.0.1 — admin@scalix.world scalix.world
Package purpose: Scalix World platform package. See https://scalix.world
Claimed homepage: https://pypi.org/project/scalix-coder/
Matched naming pattern: python-coder-scalix
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 166
Registry downloads: 2/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 91 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@scalix.world' matches package identifier token 'scalix', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (158 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 91 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 337d 4 12 ↑0.0/day
Possible Squatted Stub
cuda pypi 0.0.1 — kitmaker@nvidia.com nvidia.com
Package purpose: DEPRECATED: Use nvidia-cuda-culibos instead
Claimed homepage: https://pypi.org/project/nvidia-cuda-culibos-cu13/
Matched naming pattern: nvidia-cuda-culibos
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 337
Registry downloads: 4/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 12 lines, 458 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@nvidia.com' matches package identifier token 'nvidia', verifying identifiable third-party organization ownership.
  • MEDIUMPackage registered 328 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (12 LOC, 2 file(s), 458 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 538d 14 18 ↑0.0/day
Possible Squatted Stub
claude pypi 0.1.0 orange support@orange.ai orange.ai
Package purpose: Multi-tool MCP integration for Claude
Claimed homepage: https://pypi.org/project/orange-claude-tools/
Matched naming pattern: orange-claude-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 538
Registry downloads: 14/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 18 lines, 547 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'orange-claude-tools' matches AI hallucination template [orange] + [claude] + [tools].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • INFOPublisher email domain '@orange.ai' matches package identifier token 'orange', verifying identifiable third-party organization ownership.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (18 LOC, 1 file(s), 547 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 668d 0 13 ↑0.0/day
Possible Squatted Stub
base pypi 19.0.1.0.0.2 Escodoo,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org
Package purpose: Provides general settings for the Repair App
Claimed homepage: https://github.com/OCA/repair
Matched naming pattern: odoo-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 668
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 13 lines, 536 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@odoo-community.org' matches package identifier token 'odoo-community', verifying identifiable third-party organization ownership.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (13 LOC, 2 file(s), 536 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
20 1194d 0 21 ↑0.0/day
Possible Squatted Stub
test pypi 16.0.1.0.1.4 Camptocamp, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org
Package purpose: Unittests for Base Binary URL Import module
Claimed homepage: https://github.com/OCA/server-ux
Matched naming pattern: odoo-test-test
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1194
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 799 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • INFOPublisher email domain '@odoo-community.org' matches package identifier token 'odoo-community', verifying identifiable third-party organization ownership.
  • INFOEstablished pre-AI legacy package registered 1183 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 3 file(s), 799 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
15 5h — — —
Possible Squatted Stub
— npm latest — —
Package purpose: Optional better-sqlite3 cache driver for gesetz on runtimes without node:sqlite
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 6h — — —
Possible Squatted Stub
— npm latest — —
Package purpose: Index an Obsidian vault and rewrite its syntax for mdsvex.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 8h — — —
Possible Squatted Stub
— npm latest Colin McDonnell —
Package purpose: Reserved for an upcoming Postgres project from the author of Zod. Not released yet.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 10h — — —
Possible Squatted Stub
— npm latest Colin McDonnell —
Package purpose: Reserved for typed tsv file imports in TypeScript, from the author of Zod. Not released yet.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 10h — — —
Possible Squatted Stub
— npm latest Colin McDonnell —
Package purpose: Reserved for typed ext file imports in TypeScript, from the author of Zod. Not released yet.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 10h — — —
Possible Squatted Stub
— npm latest Colin McDonnell —
Package purpose: Reserved for dotsql, typed SQL file imports for TypeScript, from the author of Zod. Not released yet.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 10h — — —
Possible Squatted Stub
— npm latest Colin McDonnell —
Package purpose: Reserved for dotsql, typed SQL file imports for TypeScript, from the author of Zod. Not released yet.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 12h — — —
Possible Squatted Stub
— npm latest — —
Package purpose: Temporary package placeholder for staged publishing
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 12h — — —
Possible Squatted Stub
— npm latest — —
Package purpose: Temporary package placeholder for staged publishing
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 16h — — —
Possible Squatted Stub
— npm latest — —
Package purpose: A collection of production-ready Claude Code agents, skills, and commands for SEO, vibe/copy, and marketing teams.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 17h — — —
Possible Squatted Stub
— npm latest — —
Package purpose: Temporary package placeholder for staged publishing
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 21h — — —
Possible Squatted Stub
— npm latest — —
Package purpose: Temporary package placeholder for staged publishing
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 23h — — —
Possible Squatted Stub
— npm latest — —
Package purpose: Publish to 15 social media platforms from a Notion database via BulkPublish
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 23h — — —
Possible Squatted Stub
— npm latest — —
Package purpose: One shared single-statement assertion for native SQLite SQL text
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 27h — — —
Possible Squatted Stub
— npm latest — —
Package purpose: All-in-one GitHub artifact provider for OmniFlow: GitHub Container Registry (ghcr.io), NPM, Maven, and Releases generic packages
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 33h — — —
Possible Squatted Stub
— npm latest — —
Package purpose: Cloudflare Workers tracing spans for Drizzle ORM queries, transactions and batches, for any driver
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 34h — — —
Possible Squatted Stub
— npm latest — —
Package purpose: Normara M0 qualification prototype; not a production CLI, native integration or governed runtime.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 34h — — —
Possible Squatted Stub
— npm latest — —
Package purpose: Normara M0 qualification prototype; not a production CLI, native integration or governed runtime.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 35h — — —
Possible Squatted Stub
— npm latest — —
Package purpose: Claude Code discovery and output adapter for Causign
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
15 38h — — —
Possible Squatted Stub
— npm latest — —
Package purpose: The cca binary for darwin x64. Install claude-context-admin instead.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
« Prev Next »
LINK COPIED TO CLIPBOARD