Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 15 | 1972d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 2147d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: This library was generated with [Angular CLI](https://github.com/angular/angular-cli) version 10.0.6.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 2224d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Guillaume Felley | — | ||
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 2697d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
Package purpose: Actions on Google channel for stentor
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 15 | 3321d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Progress | — | ||
|
Package purpose: Ripple Package for Angular
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 14h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 14h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 16h | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0 | Taylor (gh0stfqce) | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 16h | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0 | Taylor (gh0stfqce) | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 16h | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0 | Taylor (gh0stfqce) | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 16h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 16h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 38h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | John Carroll | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 38h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | John Carroll | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 38h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | John Carroll | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 52h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 55h | — | — | — |
Very Risky
|
— | pypi | 0.3.0 | Naveenraj Kamalakannan | — | 🪝 | |
|
Package purpose: Give an open LLM a fast, calibrated decision path and serve it natively with vLLM.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 62h | — | — | — |
Very Risky
|
— | pypi | 0.3.7 | — | — | 🪝 | |
|
Package purpose: Open-source AI coding agent for the terminal and browser — runs on local Ollama models (even on modest hardware) or any cloud LLM. A self-hostable alternative to Claude Code and opencode.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 65h | — | — | — |
Very Risky
|
— | pypi | 66.0.3 | Yandex | — | 🪝 | |
|
Package purpose: A package to prevent Dependency Confusion attacks against Yandex.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 65h | — | — | — |
Very Risky
|
— | pypi | 66.0.3 | Yandex | — | 🪝 | |
|
Package purpose: A package to prevent Dependency Confusion attacks against Yandex.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 3d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.1 | volc-engine | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 3d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.1 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4d | — | — | — |
Very Risky
|
— | pypi | 0.0.7 | Karellen, Inc. | — | 🪝 | |
|
Package purpose: MCP Server for QuickBooks Online
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.1 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0b1 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0 | Praneeth Vadlapati | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0 | Praneeth Vadlapati | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 4d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.5 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 5d | — | — | — |
Very Risky
|
— | pypi | 66.0.3 | Yandex | — | 🪝 | |
|
Package purpose: A package to prevent Dependency Confusion attacks against Yandex.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 5d | — | — | — |
Very Risky
|
— | pypi | 66.0.3 | Yandex | — | 🪝 | |
|
Package purpose: A package to prevent Dependency Confusion attacks against Yandex.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 5d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.1 | volc-engine | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 5d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0 | Praneeth Vadlapati | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 5d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0 | Praneeth Vadlapati | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 5d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.0 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 6d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.0.0 | Cheffelo | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 6d | — | — | — |
Possible Squatted Stub
|
— | pypi | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 6d | — | — | — |
Possible Squatted Stub
|
— | pypi | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 6d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.0 | Rawson Consulting B.V. | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 6d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.0 | Rawson Consulting B.V. | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 6d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.0 | Rawson Consulting B.V. | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 6d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.0 | Rawson Consulting B.V. | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 6d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.9 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 6d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.1.9 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Robert King | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 0 | 8d | — | — | — |
Very Risky
|
— | pypi | 66.0.3 | Yandex | — | 🪝 | |
|
Package purpose: A package to prevent Dependency Confusion attacks against Yandex.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 0 | 8d | — | — | — |
Possible Squatted Stub
|
— | pypi | 0.2.1 | — | — | ||
|
No additional detail available for this finding. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||