Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 90 | 11d | — | — | — |
SUSPICIOUS
|
— | npm | latest | xingzhen199186 | — | 🪝 🌐 | |
|
Package purpose: DSH 极简移动端遥控器：只把「你的指令」和「AI 的最终回复」送到手机，屏蔽全部中间过程。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TestHub Coordinator — job queue, resource registry, scheduler, heartbeat monitor, log/artifact store and web dashboard
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Command-line interface for SIPPulse AI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | GitCode CLI Contributors | — | 🪝 | |
|
Package purpose: AtomGit CLI (formerly GitCode CLI) — open-source command line tool with bundled multi-platform binaries. Recommended coordinate: atomgit-cli; @gitcode-cli/cli stays supported in parallel.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | GitCode CLI Contributors | — | 🪝 | |
|
Package purpose: AtomGit CLI (formerly GitCode CLI) — open-source command line tool with bundled multi-platform binaries. Recommended coordinate: atomgit-cli; @gitcode-cli/cli stays supported in parallel.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Edge MCP server: finds a fitting public agent skill for the task at hand and loads it on demand.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 12d | 276 | 50 | ↑23.0/day |
Very Risky
|
diavlos | npm | 1.0.0 | — | — | 🪝 🌐 | |
|
Package purpose: The channel between AI agents. This package downloads the diavlos binary for your platform.
Claimed homepage: https://diavlos.sh
Matched naming pattern: node-diavlos-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 12
Registry downloads: 276/month, 69/week (MODERATE_USAGE)
Codebase size: 50 lines, 2.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | sauron contributors | — | 🪝 | |
|
Package purpose: Universal AI agent orchestrator and harness for 17 AI coding runtimes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 12d | — | — | — |
SUSPICIOUS
|
— | npm | latest | gitbot-hq | — | 🪝 🌐 | |
|
Package purpose: Run Claude Code, Codex, or OpenCode from any device on your network — a local server that puts an AI coding agent in your browser, with reusable bots, threads, and per-bot setup instructions.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 12d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: npm audit for your AI coding agents - audit dangerous actions in agent session history
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: printlabtestresults frontend module for O3
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | Vincent | — | 🪝 🌐 | |
|
Package purpose: DocsAgent MCP server for your knowledge base — Zotero, Obsidian, and Apple Notes (macOS) over a resident native C++ search core (BM25 + passage retrieval, mixed search; stdio + Streamable HTTP)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 13d | 587 | 90 | ↑45.2/day |
Very Risky
|
hostbind | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: HostBind local-first project context CLI
Claimed homepage: https://github.com/RudraMakwana257/hostbind#readme
Matched naming pattern: node-hostbind-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 13
Registry downloads: 587/month, 146/week (MODERATE_USAGE)
Codebase size: 90 lines, 3.4 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: <p align="center"> <h1 align="center">DevEco Code</h1> </p> <p align="center">面向 HarmonyOS 开发场景的 AI Agent 工具。</p> <p align="center"> <a href="README.en.md">English</a> · 简体中文 </p>
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: SuperBridge Flow workflow CLI for Claude Code and Codex
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 14d | — | — | — |
Unverified Signal
|
— | npm | latest | Hasna | — | 🪝 🌐 | |
|
Package purpose: Open source connector library - Install API connectors with a single command
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 14d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: O3 frontend module for fast data entry using the OpenMRS Angular Form Engine
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 14d | — | — | — |
Unverified Signal
|
— | npm | latest | bluesliu | — | 🪝 🌐 | |
|
Package purpose: Generic OpenAI-compatible proxy for multiple LLM providers (codearts, ...). Pluggable via config.json5.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 15d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local-first document management with markdown rendering, knowledge graph, and MCP server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 15d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: `boboddy` is a Bun + TypeScript CLI workspace with a modular command layout and compiled binary distribution support.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 15d | — | — | — |
Unverified Signal
|
— | npm | latest | Massimo Saccani | — | 🪝 🌐 | |
|
Package purpose: KNX integration for Node-RED with KNX/IP and KNX Secure, ETS import, routing, diagnostics, automation utilities, MQTT and Modbus adapters. Optional Hue Ultimate and Matter Ultimate packages connect through the KNX gateway.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 16d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: O3 frontend module for handling billing concerns in healthcare settings
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 16d | — | — | — |
Very Risky
|
— | pypi | 0.6.1 | ReproLLM maintainers | — | 🪝 | |
|
Package purpose: A reproducibility linter, experiment recorder, lockfile system, and drift detector for LLM research.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 90 | 16d | — | — | — |
Unverified Signal
|
— | npm | latest | gogogohuang | — | 🪝 | |
|
Package purpose: 終端機 TUI，即時追蹤 Claude Code 自己開出來的 task（TodoWrite / Tasks API）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 17d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Turn Pi into el Gentleman: a senior-architect development harness with SDD/OpenSpec, subagents, strict TDD evidence, review guardrails, and skill discovery.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 17d | — | — | — |
Unverified Signal
|
— | npm | latest | ils15 | — | 🪝 🌐 | |
|
Package purpose: Multi-agent orchestration for OpenCode — 14 specialized agents, TDD, Themis review gates.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 17d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 17d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Code-orchestrated parallel execution of plan-feature plans across agent harnesses.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 17d | — | — | — |
Unverified Signal
|
— | npm | latest | Boris Kostadinov | — | 🪝 🌐 | |
|
Package purpose: A web-framework based on the ti-engine. It provides a customizable ready-to-use web-server microservice and a set of tools for creating web applications. NOTICE: This is still a work in progress and the full architecture, design, and functionality are not
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 17d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Device-level CLI for the Morula local agent runtime (daemon/portal/models/auth) and the Morula business CLI (morula), distributed via npm
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 18d | — | — | — |
Unverified Signal
|
— | npm | latest | AtomGit CLI Contributors | — | 🪝 | |
|
Package purpose: AtomGit CLI (formerly GitCode CLI) — open-source command line tool with bundled multi-platform binaries. Recommended coordinate: atomgit-cli; @gitcode-cli/cli stays supported in parallel.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 19d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MAFW Loop Agent Plugin for OpenCode - Phase Relay + TMEM + Dynamic Compression
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 19d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: One law. Eight elements. One contract. The backend model stays small; operational surfaces are derived from it instead of maintained separately.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 20d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Lightweight coding agent that runs in your terminal - fork of OpenAI Codex
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 20d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Boxes.dev CLI (standalone, includes bundled Node runtime)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 20d | — | — | — |
Unverified Signal
|
— | npm | latest | Radient Inc. | — | 🪝 🌐 | |
|
Package purpose: User interface for AI agent assistants that run Python code safely on your device through an intuitive chat interface. Supports local and cloud LLM models with built-in security features.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 21d | — | — | — |
Unverified Signal
|
— | npm | latest | yuanjie liu | — | 🪝 🌐 | |
|
Package purpose: P2P AI Document Agent - 全局安装后执行 `bolloon` 启动产品
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 21d | — | — | — |
Unverified Signal
|
— | npm | latest | Supercode | — | 🪝 🌐 | |
|
Package purpose: Installer for the Supercode Claude Desktop integration on macOS.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 21d | — | — | — |
Unverified Signal
|
— | npm | latest | TestRelic AI | — | 🪝 🌐 | |
|
Package purpose: Playwright test analytics reporter with E2E navigation tracking, API call capture, network stats, failure diagnostics, and interactive HTML reports
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 21d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: udctl — the AI agent CLI: let Claude Code, Cursor & Codex manage tasks, notes and expenses from the terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 22d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Official-grade GitHub CI for DeepSeek Harness: composite action (review PRs / fix CI / report), polling PR review bot with idempotent inline comments, a status-check gate, and approval-gated PR/issue/repo/file tools
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 22d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Open a Claude Code multi-pane terminal workspace with one command (macOS and Windows)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 23d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Three-agent development workflow for OpenCode (orchestrator, implementer, reviewer + Impact Engine)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 23d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Lingjing AWB CLI monorepo with shared core, standalone CLI, and agent skills (pre-release build pointing to https://animeworkbench-pre.lingjingai.cn)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 24d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Elyntic self-improvement lab
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 24d | — | — | — |
Unverified Signal
|
— | npm | latest | maintainer@emeraldcoastsystemsgroup.com maintainer@emeraldcoastsystemsgroup.com | emeraldcoastsystemsgroup.com | 🪝 🌐 | |
|
Package purpose: Local desktop node that joins the OSHAL swarm as an A2A remote client: a Jarvis-style orb you talk to, that also runs swarm-dispatched tasks locally with your own signed-in CLIs (codex/claude/gcloud/aws).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 24d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Link CLI lets agents get secure, one-time-use payment credentials from a Link wallet to complete purchases on your behalf — without storing your real card details.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 25d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Runtime-safe zstd decode + KTX2 container parse + build-time zstd encode for the forgeax asset pipeline.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 25d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: LLM-optimized CLI for Omni
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 90 | 25d | 109 | 133 | ↑4.4/day |
Very Risky
|
summary | npm | 1.0.1 | saimakramai11 | — | 🪝 🌐 | |
|
Package purpose: Install the transcript-summary agent skill for Grok, Claude Code, Copilot, Gemini CLI, and Codex.
Claimed homepage: https://github.com/saimakramai11/Ai11-Transcript-Summary-Skill
Matched naming pattern: transcript-summary-skill
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 25
Registry downloads: 109/month, 27/week (MODERATE_USAGE)
Codebase size: 133 lines, 4.8 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||