Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 85 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Provectus Inc. | — | 🪝 🌐 | |
|
Package purpose: This framework outlines a structured approach to leveraging Large Language Models (LLMs) for high-quality code generation, moving beyond basic prompting to a spec-driven development methodology.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Deterministic, secure, fast HTML→PDF converter: one semantic section per page, runtime print-CSS defeated, self-verifying output. Zero config.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Renz - XcV Company | — | 🪝 🌐 | |
|
Package purpose: XcV Company
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Sean Heiney | — | 🪝 🌐 | |
|
Package purpose: A panel of frontier models debates your hardest question until it agrees, and reports what it could not settle. Runs on the subscriptions you already have. CLI, MCP server, GitHub Action, library.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Drive the user's own Claude Code and Codex — on their own subscription logins, no API keys — from AI Matrx, and take over chats they started elsewhere. The engine wraps Paperclip's MIT driver packages with every fix the 2026-09-27 spike found (clean envir
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | prastzy | — | 🪝 🌐 | |
|
Package purpose: hello I am prastzy, I am a student trying to develop a WhatsApp library via baileys and this is my baileys prastzy
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | prastzy | — | 🪝 🌐 | |
|
Package purpose: hello I am prastzy, I am a student trying to develop a WhatsApp library via baileys and this is my baileys prastzy
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local-first code intelligence for AI agents (MCP). Self-contained — bundles its own runtime.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Kristoffer Ekstrand | — | 🪝 | |
|
Package purpose: Curated portable agent skills and coding harness setup.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CodeGraph self-contained bundle for linux-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CodeGraph self-contained bundle for linux-x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CodeGraph self-contained bundle for darwin-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Anthony Gachet | — | 🪝 🌐 | |
|
Package purpose: CLI for SaaSFoundryAI - Integrated SaaS Development Platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | thirsty5034 | — | 🪝 🌐 | |
|
Package purpose: GitHub/Gitea (and other forge) accounts with project-scoped grants and push policy for DeepSeek Harness better-sidebar
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Wingo UI | — | 🪝 🌐 | |
|
Package purpose: Add Wingo UI components to your React + Tailwind CSS v4 project, keep them up to date, and connect your coding agent (MCP).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Aaron Volter | — | 🪝 🌐 | |
|
Package purpose: Local Chrome lifecycle, durable profiles and authenticated CDP publication.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Artem Rufornyi | — | 🪝 🌐 | |
|
Package purpose: Install, version, sync and track agent skills (SKILL.md) across Claude Code, Codex, Cursor and more.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Loukman Nacik | — | 🪝 🌐 | |
|
Package purpose: Iterate on videos with your agent, frame by frame. Frame-accurate feedback on rendered videos for AI agents: point, draw and comment on any frame, and your agent reads it over MCP. Works with HyperFrames, Remotion, or any MP4.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Hugelidus | — | 🪝 🌐 | |
|
Package purpose: Turn a pointcast recording (your voice + the elements you pointed at) into a Markdown spec for coding agents, or serve it over MCP.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Rove Code CLI executable for win32-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 6d | — | — | — |
Very Risky
|
— | pypi | 1.3.1 | — | — | 🪝 | |
|
Package purpose: Just import it. Missing packages install themselves - fast, safe, and in your language.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 85 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: doug: tailored, approval-gated harness install for Claude Code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Customer skill bundle for Catalyst Cloud, named from the executive's seat — get set up, see what is happening, see what needs you, run a project, unstick what is stuck — plus the catalyst CLI that reads through the Catalyst Cloud SDK, writes through the a
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Northlatch Labs LLC | — | 🪝 🌐 | |
|
Package purpose: Web application entry: vite build over the @xlaunch/client-web shell library; dist/ served by apps/cli's xlaunch web
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Çağlar Utku Güler | — | 🪝 🌐 | |
|
Package purpose: A live pixel-art office for your AI agents: Paperclip, Claude Code, Codex, Gemini CLI or any JSON feed. KPI board, Telegram alerts, HD themes. Zero dependencies, read-only.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Teste temporário do setup da plataforma WiseWork (não usar em produção)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Berth Contributors | — | 🪝 🌐 | |
|
Package purpose: Docker-based Agent OS stand-in: Alpine base image, container lifecycle, hot reload
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Thuy Phuoc Thinh | — | 🪝 🌐 | |
|
Package purpose: Scaffold spec-driven AI workspace docs into any project — supports new & existing codebases.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | William Hilton | — | 🪝 🌐 | |
|
Package purpose: isomorphic-git fork for Quartz Syncer — stripped API, GC support, memory fixes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agent Flow — self-healing context + an Implement → Review → QA pipeline with enforced guardrails (Pi) and a zero-dependency CLI for every other harness. Detects context drift, gates risky diffs, keeps the trust signals honest.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | bronz3beard | — | 🪝 🌐 | |
|
Package purpose: A decoupled local-SLM pre-processing and routing layer for MCP and cloud LLMs. Intercepts, distills, and routes prompts locally with Ollama to cut token costs and protect monthly quota.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | bronz3beard | — | 🪝 🌐 | |
|
Package purpose: MCP server for the Tech-Lead Stack: agent skills and workflows for tech leads, PMs and HR.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Vic | — | 🪝 🌐 | |
|
Package purpose: A language-agnostic CLI tool that scans codebases for hardcoded secrets, moves them to .env files, and rewrites source files with proper env-var references.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Aditya Sethi | — | 🪝 🌐 | |
|
Package purpose: MCP server that runs plain-language browser steps. Jev, a typed decision model, picks the control on each page instead of an LLM reading the DOM.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Deterministic web retriever for AI agents — no search API, no external service, no AI inside the retriever itself.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Web application entry: vite build over the @hydra1902/harness-client-web shell library; dist/ served by apps/cli's hydra web
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | meanaverage | — | 🪝 🌐 | |
|
Package purpose: Remote desktops in Tabby's SSH tabs: Linux (GNOME) and Windows, through the SSH connection, with clipboard, files and sound. Built on IronRDP.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A living architecture map for any codebase, any language, any coding agent. See what every change does to the structure, and stop it crossing the lines you drew.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Yatharth Roy | — | 🪝 🌐 | |
|
Package purpose: Overarch CLI platform package for macOS Intel (x86_64)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Yatharth Roy | — | 🪝 🌐 | |
|
Package purpose: Overarch CLI platform package for macOS Apple Silicon (M1/M2/M3/M4)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Yatharth Roy | — | 🪝 🌐 | |
|
Package purpose: Overarch CLI platform package for Linux (x86_64)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Yatharth Roy | — | 🪝 🌐 | |
|
Package purpose: Overarch CLI platform package for Linux (ARM64 / aarch64)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DeepSeek Harness (dsh) plugin: prompt your home servers into existence through home-hosted — Gitea, Jellyfin, anything — and manage the panel, the entries and boot autostart from dsh.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Global dsh-rsi command: status, doctor, web-url, and full purge for DSH enhanced plugin installations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: macOS 本机后台与管理页：保留原生 Claude 体验，可靠、透明地选择模型和额度来源
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Bring what you built in Claude Code, Codex, Cursor, Copilot, Gemini, Windsurf, Cline or OpenCode into Kringl, and export it back.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | kandiesky | — | 🪝 🌐 | |
|
Package purpose: High-performance Model Context Protocol (MCP) server for Microsoft Azure Pricing Calculator
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Engin Diri | — | 🪝 🌐 | |
|
Package purpose: Pass-through model router for Claude Code and Codex CLI that picks a model tier per human turn with Jev, TypeSafe AI's decision model
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | CAST AI Group, Inc. | — | 🪝 🌐 | |
|
Package purpose: Create and connect to kimchi remote workspaces from the terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 85 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ZERODAY CLI — rank which files in your repo matter for a CWE / CVE / GHSA and emit SARIF + hashed evidence for human review. Keyless and offline by default. Not a Cisco product.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||