Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 15 | 22d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: BullMQ-over-Redis driver for the queue contracts declared in [`@owlmeans/queue`](../queue).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 22d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: PostgreSQL service for OwlMeans server contexts — pooled connections, readiness probing, schema provisioning, and an opt-in least-privilege bootstrap path.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 22d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: MongoDB service for OwlMeans server contexts — connection management with replica set and cluster support.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 22d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: 渲染包：ui+style+injector+渲染契约，装配唯一 owner
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 22d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | MMI Future | — | ||
|
Package purpose: MMI workflow skills and org gates delivery.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 22d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | MMI Future | — | ||
|
Package purpose: MMI workflow skills and organisation gates for Cursor.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 22d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: No-op stub for @matterlabs/zksync-telemetry-js so blockExoticSubdeps can stay enabled
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 22d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: **English** | [日本語](README.ja.md)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 22d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Clerk implementation of Clivly's ClivlyAuthAdapter.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 23d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Pegasystems | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 23d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Pegasystems | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 23d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Pegasystems | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 23d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: win32-arm64 binary for @xai-official/grok. Do not install directly; install @xai-official/grok instead.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 23d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Provider-neutral authoritative SQLite backend for Party Stack ontologies. Each SQLite database is owned by exactly one ontology; use a separate database for another ontology.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 24d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Downcity Federation Database adapter for PostgreSQL via postgres-js.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 24d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: TON Connect connector for Universal Wallet Connector — mobile QR/URI wallet connections
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 24d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Anchor your LangChain.js agent's run tree as it executes: one callback handler turns every chain, LLM and tool step into a signed evidence envelope, sent to Sanning and witnessed on an interval to a permanent public record. Prompts and outputs are hashed
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 24d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Docker Engine API client with HTTP keep-alive for Node.js
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 24d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Official [wagmi](https://wagmi.sh) support for the Dynamic JS SDK. Expose a Dynamic-managed EVM wallet account (embedded/OTP or external) as a wagmi connector so `useAccount`, `useSendTransaction`, `useReadContract`, and the rest of the wagmi/viem hook ec
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 24d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: This package contains the TON integration for the Dynamic SDK
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 24d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Chain-agnostic primitives for integrating the [MetaMask SDK](https://docs.metamask.io/sdk/) (`@metamask/connect-multichain` and its chain-specific facades such as `@metamask/connect-evm`) with the Dynamic JS SDK.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Native binary for Claude Code on linux-x64-musl
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Native binary for Claude Code on linux-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Native CLI binary for @anthropic-ai/claude-agent-sdk on darwin-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Native CLI binary for @anthropic-ai/claude-agent-sdk on darwin-x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Native CLI binary for @anthropic-ai/claude-agent-sdk on linux-arm64-musl
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Native CLI binary for @anthropic-ai/claude-agent-sdk on linux-x64-musl
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Native CLI binary for @anthropic-ai/claude-agent-sdk on linux-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Native CLI binary for @anthropic-ai/claude-agent-sdk on linux-x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Starknet ERC20 mint/burn token contract for LayerZero v2
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Native binary for Claude Code on darwin-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Native binary for Claude Code on darwin-x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Native binary for Claude Code on linux-arm64-musl
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 26d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: A linear progress bar visually represents a task's completion along a horizontal track. Use it for loading processes, file uploads, or other determinate tasks to provide real-time feedback on progress.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 26d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Dynamic Labs, Inc. | — | ||
|
Package purpose: A React SDK for implementing wallet web3 authentication and authorization to your website.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 28d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Voltro UG | — | ||
|
Package purpose: Prometheus exporter — scrapes the framework's unified Metrics-API (Effect MetricRegistry) at GET /metrics in Prometheus text exposition format. Counters, histograms (with buckets), gauges + custom metrics; optional bearer-token gate + node process metrics
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: NextClaw Slack channel extension process.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: NextClaw WhatsApp channel extension process.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Kanishk Gupta | — | ||
|
Package purpose: A scrollable container component with enhanced scrolling features compatiable to Web
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Voltro UG | — | ||
|
Package purpose: ClickHouse AnalyticsSink. Native HTTP ingest into a ClickHouse cluster — self-hosted OR ClickHouse Cloud. Production-grade OLAP for high-cardinality events with millisecond aggregate queries over billions of rows.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Voltro UG | — | ||
|
Package purpose: Embedded DuckDB AnalyticsSink. Runs DuckDB in-process for real OLAP performance without an external service. Events land in a DuckDB column-store table; aggregate / timeseries / topN queries execute vectorized.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Voltro UG | — | ||
|
Package purpose: Clerk-backed AuthStrategy for the Voltro framework. Verifies Clerk-issued __session JWTs via the Frontend API JWKS. Conforms to @voltro/protocol AuthStrategy so it composes with other IdP plugins.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: OIDC trusted publishing setup package for @lunora/platform-cloudflare
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 34d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Salesforce UI Security Team | — | ||
|
Package purpose: Lightning Web Security AST library maker utilities
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 34d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | bitgobot | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 35d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: ## Installation
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 35d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 35d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: DSH plugin for semantic code search via Milvus vector database
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||