Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
90 26d — — —
Very Risky
— pypi 0.12.0 — — 🪝
Package purpose: Fleet supervisor for Graphban — spawns and retires fleet members on the machine the agents actually run on
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in graphban_fleet-0.12.0/scripts/verify_hostos_windows.py:43
  • ANTI_ANALYSIS_EVASION: 'Extended Scanner Timeout Stall' found in graphban_fleet-0.12.0/scripts/verify_hostos_windows.py:51
  • SOURCE_CODE_EVASIVE_PAYLOAD: anti-analysis evasion combined with execution/payload hook in graphban_fleet-0.12.0/scripts/verify_hostos_windows.py
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in graphban_fleet-0.12.0/src/gbagent/cli.py:75
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in graphban_fleet-0.12.0/src/gbagent/config.py:170
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in graphban_fleet-0.12.0/src/gbagent/verify.py:87
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in graphban_fleet-0.12.0/src/gbfleet/cli.py:619
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in graphban_fleet-0.12.0/src/gbfleet/doctor.py:279

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
90 27d 997 412 ↑36.9/day
Very Risky
girder npm latest — — 🪝 🌐
Package purpose: Saves AI coding-agent context: a local semantic-graph MCP server that gives the agent exactly the code it needs instead of whole files. Also provides conservative change-impact/test selection.
Claimed homepage: https://github.com/dhishwasher/Girder#readme
Matched naming pattern: node-girder-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 27
Registry downloads: 997/month, 249/week (MODERATE_USAGE)
Codebase size: 412 lines, 15.7 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (24 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/girder-mcp.js:11 (+3 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:104 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:31
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:18 (+1 more occurrence(s) elsewhere)
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/girder-mcp.js:11 (+3 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:104 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:31
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:18 (+1 more occurrence(s) elsewhere)
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 27d — — —
Unverified Signal
— npm latest — — 🪝
Package purpose: <p align="center"> <a href="https://github.com/alltomatos/opencode"> <picture> <source srcset="packages/console/app/src/asset/logo-ornate-dark.svg" media="(prefers-color-scheme: dark)"> <source srcset="packages/console/app/src/asset/logo
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node ./postinstall.mjs'
  • MISSING_SOURCE_REPOSITORY_URL
  • BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bin/opencode.exe' in npm tarball
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postinstall.mjs:49

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 27d 698 123 ↑25.9/day
Very Risky
@synrest/netbot npm 0.4.5 — — 🪝 🌐
Package purpose: Agentless topology discovery and SSH reconciliation for private networks.
Claimed homepage: https://github.com/synrest/netbot#readme
Matched naming pattern: node-@synrest/netbot-netbot
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 27
Registry downloads: 698/month, 174/week (MODERATE_USAGE)
Codebase size: 123 lines, 7.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node lib/postinstall.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/lib/installer.js:5
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/lib/installer.js:25
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/installer.js:15 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/lib/postinstall.js:15
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/lib/postinstall.js, which makes network calls and executes/decodes/reads secrets
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node lib/postinstall.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/lib/installer.js:5
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/lib/installer.js:25
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/installer.js:15 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/lib/postinstall.js:15
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/lib/postinstall.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 27d — — —
Unverified Signal
— npm latest — — 🪝
Package purpose: Browser automation CLI for AI agents
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bin/browser4-cli-win32-x64.exe' in npm tarball
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/browser4-cli.js:18 (+3 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/check-npm-publish-needed.js:34 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 27d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: [Mycelium Mind](https://github.com/pkcpkc/mycelium-mind) is a fully offline, schema-driven, multi-vault compiler pipeline and wiki engine built on top of **Obsidian** and **MkDocs**, powered by local LLMs via an OpenAI-compatible API.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/setup.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/build/core/asset-extractor.js:28 (+7 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/build/commands/assets/publish/collections-cloud/collections-cloud.js:28
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/build/utils/config.js:33 (+6 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'vm.runInContext' found in package/build/utils/overview-runner.js:174

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 27d — — —
Unverified Signal
— npm latest Genspark — 🪝
Package purpose: GenCode — Genspark's AI coding agent for the terminal: an interactive TUI and headless CLI that read your codebase, plan and edit files, run commands and tests, and explain the result with the models in your Genspark plan.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node ./postinstall.mjs'
  • MISSING_SOURCE_REPOSITORY_URL
  • BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bin/gencode.exe' in npm tarball
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postinstall.mjs:48

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 28d — — —
Unverified Signal
— npm latest vanillagreen — 🪝
Package purpose: Pi extension for delegating work to project or user agents, including persistent tmux agent panes.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/append-system.mjs install'
  • LIFECYCLE_SCRIPT: 'preuninstall' -> 'node scripts/append-system.mjs remove'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/append-system.mjs:113 (+15 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/extensions/subagent/browser/frontmatter-editor.ts:260

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 28d — — —
Unverified Signal
— npm latest vanillagreen — 🪝
Package purpose: Pi extension for explicit non-blocking background shell tasks, log tails, and completion wakeups.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/append-system.mjs install'
  • LIFECYCLE_SCRIPT: 'preuninstall' -> 'node scripts/append-system.mjs remove'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/append-system.mjs:113 (+3 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/extensions/probes.ts:64 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 28d — — —
Unverified Signal
— npm latest Son Nguyen — 🪝 🌐
Package purpose: Forge - a local-first, multi-agent, programmable software-engineering runtime
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cli/animations.js:19 (+23 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/ui/public/app.js:141
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/cli/commands/bundle.js:46 (+12 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/bundle.js:26 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/dist/mcp/oauth.js:51 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/release/verify.js:85

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 29d 571 111 ↑19.7/day
Very Risky
provalot npm 0.1.2 Prarambh LLC — 🪝 🌐
Package purpose: Deterministic evidence gate for coding agents (Claude Code, Codex CLI)
Claimed homepage: https://github.com/prarambh-labs/provalot#readme
Matched naming pattern: node-provalot-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 29
Registry downloads: 571/month, 142/week (MODERATE_USAGE)
Codebase size: 111 lines, 4.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/install.js:7 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:96 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:5
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:31
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/install.js:7 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:96 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:5
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:31
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 29d — — —
Unverified Signal
— npm latest signiphi — 🪝 🌐
Package purpose: Flexible React components for PDF viewing, form filling, and signature capture
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/components/index.js:61 (+9 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/components/index.js:617 (+7 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/components/index.js:102 (+9 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/components/index.js:140 (+10 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 29d 173 1,970 ↑6.0/day
Very Risky
gallerydl npm 1.0.0 Cem — 🪝 🌐
Package purpose: A powerful gallery-dl wrapper for Node.js to fetch image galleries, metadata, and more.
Matched naming pattern: node-gallerydl-api
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 29
Registry downloads: 173/month, 43/week (MODERATE_USAGE)
Codebase size: 1970 lines, 73.8 kB across 8 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/install-gallery-dl.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/index.js:107 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/dist/index.js:111 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/install-gallery-dl.js:46
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/install-gallery-dl.js, which makes network calls and executes/decodes/reads secrets
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/install-gallery-dl.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/index.js:107 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/dist/index.js:111 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/install-gallery-dl.js:46
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/install-gallery-dl.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 29d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: Atlas Agent — terminal-first AI coding assistant. Downloads the native binary on install.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/atlas-coder.js:5
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/atlas-coder.js:29
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/postinstall.js:15

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 29d — — —
Unverified Signal
— npm latest catli — 🪝 🌐
Package purpose: Transparent local proxy for AI coding CLIs that bridges local sessions to a web/PWA client via a relay server.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.cjs'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/autostart-VGHJZS6V.js:838 (+17 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/chunk-FNZ5X2VZ.js:75 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/chunk-G4QN6LOR.js:88 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/chunk-KM62ELKK.js:1530
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/chunk-KM62ELKK.js:1531

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 30d — — —
Unverified Signal
— npm latest Wang Hui — 🪝
Package purpose: Developer Agent for the Terminal
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node ./postinstall.mjs'
  • BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bin/axon.exe' in npm tarball
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postinstall.mjs:44
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/postinstall.mjs:154

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 30d 926 102 ↑30.9/day
Very Risky
@sallyhuang/agent npm 1.0.4 — — 🪝 🌐
Package purpose: Native macOS notifications for AI coding agents
Claimed homepage: https://github.com/sally1913105/AgentNotify
Matched naming pattern: node-@sallyhuang/agent-agent-notify
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 30
Registry downloads: 926/month, 231/week (MODERATE_USAGE)
Codebase size: 102 lines, 4.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/npm-install.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/agent-notify.js:5 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/agent-notify.js:16 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/npm-install.js:4
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/npm-install.js:14
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/npm-install.js, which makes network calls and executes/decodes/reads secrets
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/npm-install.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/agent-notify.js:5 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/agent-notify.js:16 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/npm-install.js:4
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/npm-install.js:14
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/npm-install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 30d — — —
Unverified Signal
— npm latest yuda-lyu — 🪝 🌐
Package purpose: A wrapper for ffmpeg.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/install.mjs'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/.eslintrc.js:23
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/w-ffmpeg.umd.js:6
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/w-ffmpeg.umd.js:6
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/w-ffmpeg.umd.js:6

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 31d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: NOCTRODEX(GHOSTMASTER) DAST — War Room GUI. The scan engine runs on your own host and scans from your own IP.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node bin/postinstall.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/lib/engine-fetch.js:18 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/lib/engine-fetch.js:152
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/lib/engine-fetch.js:92
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/engine-fetch.js:24 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 31d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: NOCTRODEX(GHOSTMASTER) SAST — War Room GUI. The scan engine runs on your own host and scans from your own IP.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node bin/postinstall.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/lib/engine-fetch.js:18 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/lib/engine-fetch.js:152
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/lib/engine-fetch.js:92
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/engine-fetch.js:24 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 31d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: CLI to scaffold basement projects and add integrations
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node src/assets/check-node-version.mjs'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/infrastructure/create/apply-package-json.js:59 (+20 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/infrastructure/update/cache.js:6 (+33 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/infrastructure/update/check-version.js:17 (+5 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 31d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: Self-judging agent orchestration layer for OpenCode. Reads memory, scores sessions, dispatches decisions.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/bootstrap-agents-md.mjs || true'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cli-doctor.js:7 (+4 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/index.js:175 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/index.js:7 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index.js:175 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/mcp-server.js:263

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 31d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: Link Injections (also called TPI (Text Playlink Injection)) adds links to any page content. These links open a popover or modal with relevant information for any given movie or show. Alternatively, they link directly to the related PlayPilot page. This al
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'patch-package'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/editorial.mount.js:3 (+6 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/release.js:11
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/vite._mount.config.js:55 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/vite._mount.config.js:55

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 31d — — —
Unverified Signal
— npm latest Keel — 🪝
Package purpose: Your production-grade backend from one file
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/setup.js install'
  • LIFECYCLE_SCRIPT: 'preuninstall' -> 'node scripts/setup.js uninstall'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/setup.js:11
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/setup.js:38

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 31d — — —
Unverified Signal
— npm latest — — 🪝
Package purpose: Super Audit(SA)工程方法包与 Codex 插件:自动探测宿主并完成安装
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node bin/postinstall.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/dist/super-audit-win32-x64.exe' in npm tarball
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/postinstall.js:8 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 32d — — —
SUSPICIOUS
— npm latest — — 🪝 🌐
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.mjs'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bundle/dist/utils/providers/anthropic/claude-session.js:78 (+29 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/cli.js:103
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/bundle/web-dist/client/assets/index-DJpa8UaG.js:2 (+11 more occurrence(s) elsewhere)
  • ANTI_ANALYSIS_EVASION: 'CI/CD & Sandbox Environment Detection' found in package/bundle/web-dist/client/assets/index-DJpa8UaG.js:80 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/bundle/dist/utils/providers/openai/openai-image-generation.js:69 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/bundle/web-dist/client/assets/services.generated-Bg2XkD-D.js:15 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/bundle/web-dist/server/assets/services.generated-BsKOUSXl.js:18665

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 32d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: Dialetica AI — self-hosted server CLI
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node ./dist/openclaw/scripts/postinstall-bundled-plugins.mjs'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/openclaw/dist/plugin-sdk/root-alias.cjs:20 (+39 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/frontend/apps/frontend/.next/server/chunks/ssr/_51dcb121._.js:4 (+34 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/frontend/apps/frontend/.next/server/chunks/ssr/_c2467e36._.js:1 (+3 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/frontend/apps/frontend/.next/server/chunks/ssr/[root-of-the-server]__2573cba9._.js:4 (+4 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/frontend/apps/frontend/.next/server/chunks/[root-of-the-server]__9243c1f2._.js:14
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/dist/openclaw/dist/extensions/discord/account-inspect-BNdqsthq.js:58 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 32d — — —
Unverified Signal
— npm latest Apify — 🪝 🌐
Package purpose: Apify command-line interface (CLI) helps you manage the Apify cloud platform and develop, build, and deploy Apify Actors.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node -e "console.log('We have an active developer community on Discord. You can find it on https://discord.gg/crawlee-apify-801163717915574323.');"'
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/_register-CIxRiiT3.js:29
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/_register-CIxRiiT3.js:29
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/_register-CIxRiiT3.js:1
  • ANTI_ANALYSIS_EVASION: 'CI/CD & Sandbox Environment Detection' found in package/dist/_register-CIxRiiT3.js:29

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 33d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: FilePress — file-based Markdown blog engine. Link this package from a content-only site (config + posts), then run `filepress build`.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.mjs'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/filepress.mjs:118 (+8 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.mjs:24 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/packages/import/src/fetch.ts:11 (+3 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/packages/app/src/lib/genie/ops.ts:251

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 33d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: Merged wgpu 29 + naga 29 wasm-bindgen crate exposing RHI + shader-pipeline raw bindings to JS; consumed by @forgeax/engine-rhi-wgpu + @forgeax/engine-naga thin shells. AI engine users do not import this package directly.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/ensure-wasm.mjs'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.mjs:105 (+3 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/ensure-wasm-lib.mjs:38 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/ensure-wasm-lib.mjs:37 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 33d — — —
Unverified Signal
— npm latest TestRelic AI — 🪝 🌐
Package purpose: Appium test analytics reporter with device log capture, command tracking, network interception, and interactive HTML reports for Android and iOS
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.cjs'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/cli.cjs:204
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/dist/cli.cjs:146
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.cjs:6
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/download-apps.mjs:34

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 33d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/fix-better-sqlite3.cjs'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/check-e2e-pairing.cjs:37 (+30 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/check-e2e-pairing.cjs:31 (+52 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/check-rule3-coverage.cjs:14 (+16 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/fix-better-sqlite3.cjs:27 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/threadline/relay/A2ABridge.js:161 (+8 more occurrence(s) elsewhere)
  • SYSTEM_PERSISTENCE_TAMPERING: 'Shell Profile Backdoor Injection' found in package/dist/core/AdaptiveTrust.js:354
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/providers/adapters/pi-cli/transport/agenticSessionRpc.js:20

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 33d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: Install all six SDTK toolkits in one command. Meta-package for sdtk-spec-kit, sdtk-code-kit, sdtk-ops-kit, sdtk-design-kit, sdtk-wiki-kit, and sdtk-agent-kit.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/lib/account-slots.js:173 (+8 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/src/lib/account.js:16 (+8 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/lib/account.js:68 (+8 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/src/lib/license-activation.js:133
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/lib/license-activation.js:342
  • SYSTEM_PERSISTENCE_TAMPERING: 'Shell Profile Backdoor Injection' found in package/src/commands/login.js:138

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 34d — — —
Unverified Signal
— npm latest A. Kitelev — 🪝 🌐
Package purpose: CLI tool for Exocortex knowledge management system - SPARQL queries, task management, and more
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node ./scripts/postinstall.cjs'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/index.js:559
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/index.js:458
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index.js:34
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:97
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:97
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/dist/index.js:678
  • ANTI_ANALYSIS_EVASION: 'CI/CD & Sandbox Environment Detection' found in package/dist/index.js:471

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 34d — — —
Unverified Signal
— npm latest — — 🪝
Package purpose: OpenScience is a model-agnostic, open-source AI research agent for scientific and ML engineering work. It runs a workspace in your browser where the agent plans tasks, writes and runs code, drives experiments, queries scientific databases, and writes up r
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node ./preinstall.mjs || exit 0'
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'bun ./postinstall.mjs || node ./postinstall.mjs || exit 0'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postinstall.mjs:79 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/preinstall.mjs:16

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 34d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: Overlord CLI — management, agent protocol, and runner for OpenOverlord
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.mjs'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/index.js:2862
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/index.js:13236
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index.js:13238
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:1722
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:289 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/dist/index.js:1311

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 35d — — —
Unverified Signal
— npm latest — — 🪝
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node ./postinstall.mjs'
  • MISSING_SOURCE_REPOSITORY_URL
  • BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bin/opencode.exe' in npm tarball
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postinstall.mjs:44

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 35d — — —
Unverified Signal
— npm latest OpenYida Contributors — 🪝 🌐
Package purpose: OpenYida CLI - 宜搭低代码 AI 开发工具(安装即用,零配置)
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/core/agent-capabilities.js:131 (+29 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/lib/ai/ai.js:282 (+6 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/lib/asset/asset-resolve.js:6 (+8 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/lib/app/create-form/batch.js:6 (+11 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/lib/core/batch.js:139 (+8 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/lib/app/canvas-compile.js:22 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/lib/feedback/feedback.js:462

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 35d — — —
Unverified Signal
— npm latest — — 🪝
Package purpose: Stable terminal UI for Codex and Claude Agent SDK
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node install-skills.mjs && node prepare-search-deps.mjs'
  • BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bin/dvz.exe' in npm tarball
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/dvz.js:9 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/prepare-search-deps.mjs:17

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 62d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: Run pi coding agent from Matrix. Slash commands, skills and prompts fully work from messengers via the RPC protocol.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/ensure-crypto-native.mjs'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/cli.js:161 (+7 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cli.js:151 (+9 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/setup.js:117 (+5 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/scripts/generate-avatars-candy.mjs:224 (+4 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 64d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: samplecollection frontend module for O3
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'husky install'
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/30.js:1 (+5 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/584.js:1 (+4 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/981.js:38
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/main.js:5 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 66d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: AI agent interface for WeChat Web — send/receive messages, manage contacts, upload media, transcribe voice
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node -e "const p=require('path'),o=require('os'),d=p.join(o.homedir(),'.wechat-bro','chromium');process.env.PUPPETEER_CACHE_DIR=d;const pup=require('puppeteer');(async()=>{try{await pup.executablePath()}catch{require('child_process').execSync('npx @puppeteer/browsers install chrome@stable --path \"'+d+'\"',{stdio:'inherit',timeout:300000})}})()"'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/src/cli.js:43 (+5 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/cli.js:815 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/src/cli.js:157 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/cli.js:311 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/cli.js:58 (+3 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 71d 29 25 ↑0.4/day
SUSPICIOUS
llamaindex pypi 0.1.1 U.CASH u.cash
Package purpose: LlamaIndex tools for U.CASH agent monetization over HTTP-402.
Claimed homepage: https://pypi.org/project/llamaindex-ucashpay/
Matched naming pattern: python-llamaindex-ucashpay
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 71
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 29/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 25 lines, 1.1 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llamaindex-ucashpay' matches AI hallucination template [python] + [llamaindex] + [ucashpay].
  • HIGHClaims critical enterprise brand identity ('LLAMAINDEX').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (69 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
90 71d 38 34 ↑0.5/day
SUSPICIOUS
crewai pypi 0.1.1 U.CASH u.cash
Package purpose: crewAI tools for U.CASH agent monetization over HTTP-402.
Claimed homepage: https://pypi.org/project/crewai-ucashpay/
Matched naming pattern: python-crewai-ucashpay
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 71
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 38/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 34 lines, 1.6 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'crewai-ucashpay' matches AI hallucination template [python] + [crewai] + [ucashpay].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (69 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
90 71d 36 29 ↑0.5/day
SUSPICIOUS
google pypi 1.55.0 — —
Package purpose: First-party Google Python documentation audit plugin for codira
Claimed homepage: https://pypi.org/project/codira-documentation-audit-google/
Matched naming pattern: codira-google-audit
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 71
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 36/month, 12/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 29 lines, 1.1 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'codira-documentation-audit-google' matches AI hallucination template [codira] + [google] + [audit].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (68 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
90 80d 778 163 ↑9.7/day
Very Risky
@angelmsger/jira npm 0.7.0 — — 🪝 🌐
Package purpose: Drive Jira issue-tracking workflows from the command line, built for coding agents: read and search issues via JQL, create/edit/assign/transition them, manage comments, and log work across Cloud and Data Center.
Claimed homepage: https://angelmsger.github.io/jira-cli/
Matched naming pattern: npm-@angelmsger/jira-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 80
Registry downloads: 778/month, 194/week (MODERATE_USAGE)
Codebase size: 163 lines, 6.4 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • INFOLegitimate documentation effort (211 chars with homepage link).
  • HIGHPackage registered recently (70 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:9
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:152
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/jira-cli.js:8
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/jira-cli.js:19
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:9
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:152
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/jira-cli.js:8
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/jira-cli.js:19
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 90d 21 68 ↑0.2/day
SUSPICIOUS
google npm 1.0.0 — —
Package purpose: Google global IP address list grouped by country.
Claimed homepage: https://github.com/justjavac/Google-IPs#readme
Matched naming pattern: node-google-ips
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 90
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 21/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 68 lines, 2.5 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'google-ips' matches AI hallucination template [node] + [google] + [ips].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (64 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 93d — — —
Unverified Signal
— npm latest — — 🪝
Package purpose: Self-hosted Discord bot that runs AI coding agents — Claude Code, Codex, and more — per channel. Open access for every member, multi-server, extensible.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/modes/shared/cliHelpCatalog.ts:41
  • CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/src/core/providerCatalog.ts:215
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/core/resolveCli.ts:42 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
90 95d 11 18 ↑0.1/day
SUSPICIOUS
langgraph pypi 0.1.1 Microloop Team —
Package purpose: Microloop integration for LangGraph
Claimed homepage: https://pypi.org/project/microloop-langgraph/
Matched naming pattern: python-langgraph-microloop
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 95
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 18 lines, 781 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'microloop-langgraph' matches AI hallucination template [python] + [langgraph] + [microloop].
  • HIGHClaims critical enterprise brand identity ('LANGGRAPH').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (83 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
90 97d 16 2 ↑0.2/day
SUSPICIOUS
google npm 0.0.0 — —
Package purpose: Reserved by Zercade — install from github.com/zercade-dev/narn
Claimed homepage: https://github.com/zercade-dev/narn
Matched naming pattern: node-google-narn-module-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 97
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 130 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@zercade-dev/narn-module-google' matches AI hallucination template [node] + [google] + [narn-module-google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (71 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

LINK COPIED TO CLIPBOARD