🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Growing Packages Fastest-adopted since publish Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
125 3477d 0 44 ↑0.0/day
Very Risky
base pypi 9.0.1.0.0.99.dev38 Camptocamp,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Partner merge wizard without dependency on CRM
Claimed homepage: https://pypi.org/project/odoo9-addon-base-partner-merge/
Matched naming pattern: odoo9-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 44 lines, 2.6 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_partner_merge-9.0.1.0.0.99.dev38-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_partner_merge-9.0.1.0.0.99.dev38-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_partner_merge-9.0.1.0.0.99.dev38-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_partner_merge-9.0.1.0.0.99.dev38-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 35 360 ↑0.0/day
Very Risky
base pypi 9.0.1.1.0.99.dev32 Tecnativa, Antiun Ingeniería, S.L., Sodexis, LasLabs, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Allow multiple images for database objects
Claimed homepage: http://www.antiun.com
Matched naming pattern: odoo9-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 35/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 360 lines, 14.9 kB across 6 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_multi_image-9.0.1.1.0.99.dev32-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_multi_image-9.0.1.1.0.99.dev32-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_multi_image-9.0.1.1.0.99.dev32-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_multi_image-9.0.1.1.0.99.dev32-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 27 149 ↑0.0/day
Very Risky
base pypi 9.0.1.0.1 — — 🪝 ⚡
Package purpose: Import better zip entries from Geonames
Claimed homepage: http://www.akretion.com
Matched naming pattern: odoo9-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 27/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 149 lines, 6.6 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_location_geonames_import-9.0.1.0.1-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_location_geonames_import-9.0.1.0.1-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_location_geonames_import-9.0.1.0.1-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_location_geonames_import-9.0.1.0.1-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 32 105 ↑0.0/day
Very Risky
base pypi 9.0.1.1.0 Camptocamp,ACYSOS S.L.,Alejandro Santana,Tecnativa,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Enhanced zip/npa management system
Claimed homepage: http://www.camptocamp.com
Matched naming pattern: odoo9-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 32/month, 15/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 105 lines, 9.9 kB across 7 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3455 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_location-9.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_location-9.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_location-9.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_location-9.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 22 205 ↑0.0/day
Very Risky
base pypi 9.0.1.1.0 LasLabs, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Provides stage model and abstract logic for inheritance
Claimed homepage: https://laslabs.com
Matched naming pattern: odoo9-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 22/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 205 lines, 8.8 kB across 5 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_kanban_stage-9.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_kanban_stage-9.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_kanban_stage-9.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_kanban_stage-9.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 36 249 ↑0.0/day
Very Risky
base pypi 9.0.1.0.0 Grupo ESOC Ingeniería de Servicios,Tecnativa, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Try to avoid duplicates before importing
Claimed homepage: https://tecnativa.com
Matched naming pattern: odoo9-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 36/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 249 lines, 11.6 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_import_match-9.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_import_match-9.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_import_match-9.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_import_match-9.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 66 459 ↑0.0/day
Very Risky
base pypi 9.0.1.0.1 Camptocamp,Akretion,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Base module for carrier labels
Claimed homepage: http://www.camptocamp.com/
Matched naming pattern: odoo9-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 66/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 459 lines, 22.2 kB across 12 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3455 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_delivery_carrier_label-9.0.1.0.1-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_delivery_carrier_label-9.0.1.0.1-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_delivery_carrier_label-9.0.1.0.1-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_delivery_carrier_label-9.0.1.0.1-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 37 596 ↑0.0/day
Very Risky
base pypi 9.0.2.0.0.99.dev12 Tecnativa, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Add custom field in models
Claimed homepage: https://www.tecnativa.com
Matched naming pattern: odoo9-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 37/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 596 lines, 27.5 kB across 13 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_custom_info-9.0.2.0.0.99.dev12-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_custom_info-9.0.2.0.0.99.dev12-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • INFOSubstantial functional codebase (596 LOC across 13 file(s)).
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_custom_info-9.0.2.0.0.99.dev12-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_custom_info-9.0.2.0.0.99.dev12-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 14 32 ↑0.0/day
Very Risky
base pypi 9.0.1.0.0 Camptocamp,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Comments templates on documents
Claimed homepage: https://pypi.org/project/odoo9-addon-base-comment-template/
Matched naming pattern: odoo9-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 14/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 32 lines, 1.7 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_comment_template-9.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_comment_template-9.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_base_comment_template-9.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_base_comment_template-9.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 0 41 ↑0.0/day
Very Risky
base pypi 9.0.1.0.0.99.dev17 Camptocamp, Daniel Reis,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Base Analytic Department Categorization
Claimed homepage: http://camptocamp.com
Matched naming pattern: odoo9-base-analytic
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 41 lines, 1.7 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_analytic_base_department-9.0.1.0.0.99.dev17-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_analytic_base_department-9.0.1.0.0.99.dev17-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_analytic_base_department-9.0.1.0.0.99.dev17-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_analytic_base_department-9.0.1.0.0.99.dev17-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 20 346 ↑0.0/day
Very Risky
base pypi 9.0.1.0.0.99.dev21 Akretion,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Base module for Account Cut-offs
Claimed homepage: http://www.akretion.com
Matched naming pattern: odoo9-base-account
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 20/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 346 lines, 15.5 kB across 5 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_account_cutoff_base-9.0.1.0.0.99.dev21-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_account_cutoff_base-9.0.1.0.0.99.dev21-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo9_addon_account_cutoff_base-9.0.1.0.0.99.dev21-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo9_addon_account_cutoff_base-9.0.1.0.0.99.dev21-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 74 157 ↑0.0/day
Very Risky
base pypi 8.0.1.0.0.99.dev29 Camptocamp,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Base transaction id for financial institutes
Claimed homepage: http://www.openerp.com
Matched naming pattern: odoo8-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 74/month, 21/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 157 lines, 13.8 kB across 7 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3452 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_transaction_id-8.0.1.0.0.99.dev29-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_transaction_id-8.0.1.0.0.99.dev29-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_transaction_id-8.0.1.0.0.99.dev29-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_transaction_id-8.0.1.0.0.99.dev29-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 33 217 ↑0.0/day
Very Risky
base pypi 8.0.1.0.0.99.dev32 bloopark systems GmbH & Co. KG, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Fuzzy search with the PostgreSQL trigram extension
Claimed homepage: https://odoo-community.org/
Matched naming pattern: odoo8-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 33/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 217 lines, 9.3 kB across 5 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_search_fuzzy-8.0.1.0.0.99.dev32-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_search_fuzzy-8.0.1.0.0.99.dev32-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_search_fuzzy-8.0.1.0.0.99.dev32-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_search_fuzzy-8.0.1.0.0.99.dev32-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 47 320 ↑0.0/day
Very Risky
base pypi 8.0.2.0.1 Serv. Tecnol. Avanzados - Pedro M. Baeza, Antiun Ingeniería, S.L., Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Allow multiple images for database objects
Claimed homepage: http://www.antiun.com
Matched naming pattern: odoo8-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 47/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 320 lines, 13.7 kB across 6 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_multi_image-8.0.2.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_multi_image-8.0.2.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_multi_image-8.0.2.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_multi_image-8.0.2.0.1-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 0 103 ↑0.0/day
Very Risky
base pypi 8.0.1.0.0.99.dev12 Camptocamp,ACYSOS S.L.,Alejandro Santana,Serv. Tecnol. Avanzados - Pedro M. Baeza,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Enhanced zip/npa management system
Claimed homepage: http://www.camptocamp.com
Matched naming pattern: odoo8-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 103 lines, 9.8 kB across 7 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_location-8.0.1.0.0.99.dev12-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_location-8.0.1.0.0.99.dev12-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_location-8.0.1.0.0.99.dev12-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_location-8.0.1.0.0.99.dev12-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 32 248 ↑0.0/day
Very Risky
base pypi 8.0.1.0.1 — — 🪝 ⚡
Package purpose: Try to avoid duplicates before importing
Claimed homepage: https://grupoesoc.es
Matched naming pattern: odoo8-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 32/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 248 lines, 11.4 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3452 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_import_match-8.0.1.0.1-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_import_match-8.0.1.0.1-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_import_match-8.0.1.0.1-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_import_match-8.0.1.0.1-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 4 175 ↑0.0/day
Very Risky
base pypi 8.0.1.1.0 — — 🪝 ⚡
Package purpose: Decoding API for GS1-128 (aka UCC/EAN-128) and GS1-Datamatrix
Claimed homepage: http://numerigraphe.com
Matched naming pattern: odoo8-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 4/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 175 lines, 13.0 kB across 5 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3451 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_gs1_barcode-8.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_gs1_barcode-8.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_gs1_barcode-8.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_gs1_barcode-8.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo_addons',));ie = os.path.exists(os.p'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 38 111 ↑0.0/day
Very Risky
base pypi 8.0.1.0.0.99.dev32 Agile Business Group, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Validate fields using regular expressions
Claimed homepage: http://www.agilebg.com
Matched naming pattern: odoo8-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 38/month, 23/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 111 lines, 5.4 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3452 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_field_validator-8.0.1.0.0.99.dev32-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_field_validator-8.0.1.0.0.99.dev32-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_field_validator-8.0.1.0.0.99.dev32-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_field_validator-8.0.1.0.0.99.dev32-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 92 465 ↑0.0/day
Very Risky
base pypi 8.0.1.2.0.99.dev52 Camptocamp,Akretion,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Base module for carrier labels
Claimed homepage: http://www.camptocamp.com/
Matched naming pattern: odoo8-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 92/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 465 lines, 26.1 kB across 6 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3456 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_delivery_carrier_label-8.0.1.2.0.99.dev52-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_delivery_carrier_label-8.0.1.2.0.99.dev52-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_delivery_carrier_label-8.0.1.2.0.99.dev52-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_delivery_carrier_label-8.0.1.2.0.99.dev52-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 71 593 ↑0.0/day
Very Risky
base pypi 8.0.1.2.5 Camptocamp,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Base Delivery Carrier Files
Claimed homepage: http://www.camptocamp.com
Matched naming pattern: odoo8-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 71/month, 57/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 593 lines, 27.2 kB across 15 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 3452 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_delivery_carrier_files-8.0.1.2.5-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_delivery_carrier_files-8.0.1.2.5-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • INFOSubstantial functional codebase (593 LOC across 15 file(s)).
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_delivery_carrier_files-8.0.1.2.5-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_delivery_carrier_files-8.0.1.2.5-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3477d 39 42 ↑0.0/day
Very Risky
base pypi 8.0.1.0.0.99.dev29 Camptocamp,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Comments templates on documents
Claimed homepage: https://pypi.org/project/odoo8-addon-base-comment-template/
Matched naming pattern: odoo8-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3477
Registry downloads: 39/month, 29/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 42 lines, 3.2 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3452 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_comment_template-8.0.1.0.0.99.dev29-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_comment_template-8.0.1.0.0.99.dev29-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_base_comment_template-8.0.1.0.0.99.dev29-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_base_comment_template-8.0.1.0.0.99.dev29-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3478d 0 137 ↑0.0/day
Very Risky
base pypi 10.0.1.1.0 Camptocamp,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Base transaction id for financial institutes
Claimed homepage: https://www.odoo-community.org/
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3478
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 137 lines, 6.9 kB across 8 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3452 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_transaction_id-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_transaction_id-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_transaction_id-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_transaction_id-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_transaction_id-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_transaction_id-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_transaction_id-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_transaction_id-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_transaction_id-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_transaction_id-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_transaction_id-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_transaction_id-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3478d 28 657 ↑0.0/day
Very Risky
base pypi 10.0.2.0.2 Agile Business Group & Domsense, Pegueroles SCP, NaN, LasLabs, Tecnativa, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Report to printer
Claimed homepage: https://github.com/OCA/report-print-send
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3478
Registry downloads: 28/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 657 lines, 31.2 kB across 13 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 3452 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_report_to_printer-10.0.2.0.2-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_report_to_printer-10.0.2.0.2-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_report_to_printer-10.0.2.0.2-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_report_to_printer-10.0.2.0.2-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_report_to_printer-10.0.2.0.2-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_report_to_printer-10.0.2.0.2-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_report_to_printer-10.0.2.0.2-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_report_to_printer-10.0.2.0.2-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_report_to_printer-10.0.2.0.2-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_report_to_printer-10.0.2.0.2-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_report_to_printer-10.0.2.0.2-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_report_to_printer-10.0.2.0.2-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3478d 13 358 ↑0.0/day
Very Risky
base pypi 10.0.1.0.0 — — 🪝 ⚡
Package purpose: Allow multiple images for database objects
Claimed homepage: http://www.antiun.com
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3478
Registry downloads: 13/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 358 lines, 14.7 kB across 6 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3452 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_multi_image-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo',));ie = os.path.exists(os.path.joi'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_multi_image-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo',));ie = os.path.exists(os.path.joi'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_multi_image-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo', 'addons'));ie = os.path.exists(os'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_multi_image-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo', 'addons'));ie = os.path.exists(os'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_multi_image-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo',));ie = os.path.exists(os.path.joi'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_multi_image-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo',));ie = os.path.exists(os.path.joi'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_multi_image-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo', 'addons'));ie = os.path.exists(os'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_multi_image-10.0.1.0.0-py2.7-nspkg.pth: 'import sys, types, os;p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo', 'addons'));ie = os.path.exists(os'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3478d 52 176 ↑0.0/day
Very Risky
base pypi 10.0.1.1.1 Akretion,Agile Business Group,Antiun Ingeniería S.L.,Tecnativa,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Import better zip entries from Geonames
Claimed homepage: http://www.akretion.com
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3478
Registry downloads: 52/month, 24/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 176 lines, 7.9 kB across 6 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3452 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location_geonames_import-10.0.1.1.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location_geonames_import-10.0.1.1.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location_geonames_import-10.0.1.1.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location_geonames_import-10.0.1.1.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location_geonames_import-10.0.1.1.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location_geonames_import-10.0.1.1.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location_geonames_import-10.0.1.1.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location_geonames_import-10.0.1.1.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location_geonames_import-10.0.1.1.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location_geonames_import-10.0.1.1.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location_geonames_import-10.0.1.1.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location_geonames_import-10.0.1.1.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3478d 33 106 ↑0.0/day
Very Risky
base pypi 10.0.1.1.0 Camptocamp,ACYSOS S.L.,Alejandro Santana,Tecnativa,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Enhanced zip/npa management system
Claimed homepage: http://www.camptocamp.com
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3478
Registry downloads: 33/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 106 lines, 4.7 kB across 7 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3452 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_location-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_location-10.0.1.1.0-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3478d 0 202 ↑0.0/day
Very Risky
base pypi 10.0.1.2.1 LasLabs, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Provides stage model and abstract logic for inheritance
Claimed homepage: https://github.com/OCA/server-tools
Matched naming pattern: odoo10-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3478
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 202 lines, 8.7 kB across 5 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3452 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_kanban_stage-10.0.1.2.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_kanban_stage-10.0.1.2.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_kanban_stage-10.0.1.2.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_kanban_stage-10.0.1.2.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_kanban_stage-10.0.1.2.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_kanban_stage-10.0.1.2.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_kanban_stage-10.0.1.2.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_kanban_stage-10.0.1.2.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_kanban_stage-10.0.1.2.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_kanban_stage-10.0.1.2.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_base_kanban_stage-10.0.1.2.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_base_kanban_stage-10.0.1.2.1-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3478d 41 460 ↑0.0/day
Very Risky
base pypi 8.0.0.1.0.99.dev71 Akretion,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Base module for Account Cut-offs
Claimed homepage: http://www.akretion.com
Matched naming pattern: odoo8-base-account
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3478
Registry downloads: 41/month, 21/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 460 lines, 24.7 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3456 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_account_cutoff_base-8.0.0.1.0.99.dev71-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_account_cutoff_base-8.0.0.1.0.99.dev71-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_account_cutoff_base-8.0.0.1.0.99.dev71-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_account_cutoff_base-8.0.0.1.0.99.dev71-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3478d 25 93 ↑0.0/day
Very Risky
base pypi 8.0.0.1.0.99.dev45 Akretion,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Base module for accrued expenses and revenues
Claimed homepage: http://www.akretion.com
Matched naming pattern: odoo8-base-account
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3478
Registry downloads: 25/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 93 lines, 4.8 kB across 6 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3452 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_account_cutoff_accrual_base-8.0.0.1.0.99.dev45-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_account_cutoff_accrual_base-8.0.0.1.0.99.dev45-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_account_cutoff_accrual_base-8.0.0.1.0.99.dev45-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_account_cutoff_accrual_base-8.0.0.1.0.99.dev45-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3478d 48 556 ↑0.0/day
Very Risky
base pypi 8.0.0.4.1.99.dev2 Akretion, Noviat, Serv. Tecnol. Avanzados - Pedro M. Baeza, Antiun Ingeniería S.L., Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Base module for PAIN file generation
Claimed homepage: https://github.com/OCA/bank-payment
Matched naming pattern: odoo8-base-account
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3478
Registry downloads: 48/month, 12/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 556 lines, 29.8 kB across 11 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3452 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_account_banking_pain_base-8.0.0.4.1.99.dev2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_account_banking_pain_base-8.0.0.4.1.99.dev2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • HIGHSYNTAX_ERROR_IN_odoo_addons/account_banking_pain_base/models/banking_export_pain.py: multiple exception types must be parenthesized (<unknown>, line 90)
  • INFOSubstantial functional codebase (556 LOC across 11 file(s)).
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo8_addon_account_banking_pain_base-8.0.0.4.1.99.dev2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo8_addon_account_banking_pain_base-8.0.0.4.1.99.dev2-py3.8-nspkg.pth: 'import sys, types, os;has_mfs = sys.version_info > (3, 5);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo'
  • SYNTAX_ERROR_IN_odoo_addons/account_banking_pain_base/models/banking_export_pain.py: multiple exception types must be parenthesized (<unknown>, line 90)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
125 3478d 40 378 ↑0.0/day
Very Risky
base pypi 10.0.1.1.0 Akretion,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org 🪝 ⚡
Package purpose: Base module for Account Cut-offs
Claimed homepage: http://www.akretion.com
Matched naming pattern: odoo10-base-account
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3478
Registry downloads: 40/month, 20/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 378 lines, 17.1 kB across 6 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 3452 days ago (predates modern AI hallucination waves).
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_account_cutoff_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_account_cutoff_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_account_cutoff_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_account_cutoff_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_account_cutoff_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • CRITICALPYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_account_cutoff_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
Static code signals:
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_account_cutoff_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_account_cutoff_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_account_cutoff_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_account_cutoff_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'sys' imported in odoo10_addon_account_cutoff_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''
  • PYTHON_PTH_CODE_EXECUTION: Dangerous startup module 'os' imported in odoo10_addon_account_cutoff_base-10.0.1.1.0-py2.7-nspkg.pth: 'import sys, types, os;pep420 = sys.version_info > (3, 3);p = os.path.join(sys._getframe(1).f_locals['sitedir'], *('odoo''

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
122 107d 1,452 9,268 ↑13.6/day
🐛 Potential Cross-Ecosystem Worm Very Risky
rsalmn npm latest rsalmn — 🪝 🐛 🗄️
Package purpose: ExtremeRouter CLI - AI Gateway control plane
Claimed homepage: https://github.com/rsalmn/extremerouter
Matched naming pattern: node-rsalmn-extremerouter
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 107
Registry downloads: 1452/month, 363/week (ACTIVE_COMMUNITY_USE)
Codebase size: 9268 lines, 12.3 MB across 833 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (91 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node hooks/postinstall.js'
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/app/.next-cli-build/server/chunks/1170.js:1 (+84 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/app/.next-cli-build/server/chunks/1170.js:1 (+47 more occurrence(s) elsewhere)
  • HIGHCREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/app/.next-cli-build/server/chunks/1194.js:1 (+3 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/app/.next-cli-build/server/chunks/1241.js:1 (+7 more occurrence(s) elsewhere)
  • HIGHSUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/app/.next-cli-build/server/chunks/1241.js:1 (+3 more occurrence(s) elsewhere)
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node hooks/postinstall.js'
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/app/.next-cli-build/server/chunks/1170.js:1 (+84 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/app/.next-cli-build/server/chunks/1170.js:1 (+47 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/app/.next-cli-build/server/chunks/1194.js:1 (+3 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/app/.next-cli-build/server/chunks/1241.js:1 (+7 more occurrence(s) elsewhere)
  • SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/app/.next-cli-build/server/chunks/1241.js:1 (+3 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/app/.next-cli-build/server/chunks/2409.js:1 (+6 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'process.binding/mainModule' found in package/app/.next-cli-build/static/chunks/3794-a6cbe3f16d804637.js:1 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
120 4d 0 44,288 ↑0.0/day
Very Risky
@whyshu/argent npm 0.7.3 — — 🪝 🗄️
Package purpose: Argent 引擎（L1）：流程/台账/重试/守卫/审计/浏览器自动化 —— 逐字节来自 argent-dsh 仓库
Matched naming pattern: npm-@whyshu/argent-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 4
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 44288 lines, 2.7 MB across 145 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (2 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/engine/skills/ml-store-daily-report/scripts/extract.js:21 (+2 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/engine/skills/ml-store-daily-report/scripts/extract.js:25 (+49 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/engine/scripts/archive/feishu-bridge.js:37 (+82 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/engine/scripts/argent-capabilities.mjs:777 (+8 more occurrence(s) elsewhere)
  • HIGHSYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/engine/scripts/argent-doctor.mjs:138
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/engine/skills/ml-store-daily-report/scripts/extract.js:21 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/engine/skills/ml-store-daily-report/scripts/extract.js:25 (+49 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/engine/scripts/archive/feishu-bridge.js:37 (+82 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/engine/scripts/argent-capabilities.mjs:777 (+8 more occurrence(s) elsewhere)
  • SYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/engine/scripts/argent-doctor.mjs:138
  • SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/engine/scripts/argent-doctor.mjs
  • CREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in package/engine/scripts/dsh-offline-pack.mjs:78

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
120 11d 0 124 ↑0.0/day
Very Risky
aresneuro pypi 1.0.0 — — 🪝 📡
Package purpose: Python client for the Ares Neuro CORTEX EEG embedding API
Claimed homepage: https://pypi.org/project/aresneuro/
Matched naming pattern: python-aresneuro-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 11
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 15/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 124 lines, 7.2 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (10 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in aresneuro-1.0.0/aresneuro/__init__.py:36
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in aresneuro-1.0.0/aresneuro/__init__.py:45
Static code signals:
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in aresneuro-1.0.0/aresneuro/__init__.py:36
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in aresneuro-1.0.0/aresneuro/__init__.py:45

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
120 17d 235 720 ↑13.8/day
Very Risky
ws pypi 1.2.2 Aforo, Inc. — 🪝
Package purpose: Aforo WebSocket Metering SDK — wrappers for the `websockets` library + FastAPI/Starlette WebSocket routes that meter frames, bytes and connection duration.
Claimed homepage: https://pypi.org/project/aforo-ws-metering/
Matched naming pattern: aforo-ws-metering
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 17
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 235/month, 19/week (MODERATE_USAGE)
Codebase size: 720 lines, 34.8 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (11 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in aforo_ws_metering-1.2.2/setup.py:7
  • INFOSubstantial functional codebase (720 LOC across 3 file(s)).
  • INFOModerate community usage with 235 monthly downloads.
Static code signals:
  • OBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in aforo_ws_metering-1.2.2/setup.py:7

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
120 17d 235 650 ↑13.8/day
Very Risky
mqtt pypi 1.2.2 Aforo, Inc. — 🪝
Package purpose: Aforo MQTT Metering SDK — paho-mqtt and aiomqtt client wrappers that meter PUBLISH/SUBSCRIBE/CONNECT/DISCONNECT events.
Claimed homepage: https://pypi.org/project/aforo-mqtt-metering/
Matched naming pattern: aforo-mqtt-metering
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 17
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 235/month, 20/week (MODERATE_USAGE)
Codebase size: 650 lines, 32.2 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (11 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in aforo_mqtt_metering-1.2.2/setup.py:7
  • INFOSubstantial functional codebase (650 LOC across 3 file(s)).
  • INFOModerate community usage with 235 monthly downloads.
Static code signals:
  • OBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in aforo_mqtt_metering-1.2.2/setup.py:7

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
120 17d 233 666 ↑13.7/day
Very Risky
grpc pypi 1.2.2 Aforo, Inc. — 🪝
Package purpose: Aforo gRPC Metering SDK — server interceptors and decorators that meter every RPC call to Aforo's usage ingestor.
Claimed homepage: https://pypi.org/project/aforo-grpc-metering/
Matched naming pattern: aforo-grpc-metering
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 17
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 233/month, 20/week (MODERATE_USAGE)
Codebase size: 666 lines, 33.8 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (11 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in aforo_grpc_metering-1.2.2/setup.py:7
  • INFOSubstantial functional codebase (666 LOC across 3 file(s)).
  • INFOModerate community usage with 233 monthly downloads.
Static code signals:
  • OBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in aforo_grpc_metering-1.2.2/setup.py:7

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
120 17d 229 808 ↑13.5/day
Very Risky
graphql pypi 1.2.2 Aforo, Inc. — 🪝
Package purpose: Aforo GraphQL Metering SDK — Strawberry/Graphene/Ariadne extensions + ASGI middleware that meter every GraphQL operation with AST-accurate complexity scoring.
Claimed homepage: https://pypi.org/project/aforo-graphql-metering/
Matched naming pattern: aforo-graphql-metering
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 17
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 229/month, 16/week (MODERATE_USAGE)
Codebase size: 808 lines, 40.0 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (11 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in aforo_graphql_metering-1.2.2/setup.py:7
  • INFOSubstantial functional codebase (808 LOC across 3 file(s)).
  • INFOModerate community usage with 229 monthly downloads.
Static code signals:
  • OBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in aforo_graphql_metering-1.2.2/setup.py:7

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
120 19d 578 118,948 ↑30.4/day
Very Risky
yalehwang npm latest CloudCLI UI Contributors — 🪝 🗄️
Package purpose: A web-based UI for Claude Code CLI
Claimed homepage: https://github.com/yaleh/claudecodeui
Matched naming pattern: node-yalehwang-cloudcli
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 19
Code-only verdict: SUSPICIOUS (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 578/month, 144/week (MODERATE_USAGE)
Codebase size: 118948 lines, 12.4 MB across 757 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (17 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/fix-node-pty.js'
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist-server/server/modules/websocket/services/activity-heartbeat.service.js:49 (+67 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/dist-server/server/modules/auth/auth.middleware.js:10 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist-server/server/modules/browser-use/browser-use-mcp.js:24 (+11 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist-server/server/shared/claude-cli-path.js:74 (+16 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/electron/cloud.js:23 (+6 more occurrence(s) elsewhere)
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/fix-node-pty.js'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist-server/server/modules/websocket/services/activity-heartbeat.service.js:49 (+67 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/dist-server/server/modules/auth/auth.middleware.js:10 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist-server/server/modules/browser-use/browser-use-mcp.js:24 (+11 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist-server/server/shared/claude-cli-path.js:74 (+16 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/electron/cloud.js:23 (+6 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/assets/cytoscape.esm-C10L9Icf.js:331 (+3 more occurrence(s) elsewhere)
  • SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/dist-server/server/modules/mcp-gateway/mcp-gateway.read-tools.js:192 (+5 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
120 22d 124 1,662 ↑5.6/day
Very Risky
vezor pypi 2.0.0 Vezor Team team@vezor.io vezor.io 🪝
Package purpose: GitOps-native secrets management SDK and CLI
Claimed homepage: https://github.com/vezor/vezor-python
Matched naming pattern: python-vezor-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 22
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 124/month, 1/week (MODERATE_USAGE)
Codebase size: 1662 lines, 72.9 kB across 8 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPublisher email domain '@vezor.io' matches package identifier token 'vezor', verifying identifiable third-party organization ownership.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vezor-2.0.0/config.py:76
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in vezor-2.0.0/setup.py:7
  • INFOSubstantial functional codebase (1662 LOC across 8 file(s)).
  • INFOModerate community usage with 124 monthly downloads.
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vezor-2.0.0/config.py:76
  • OBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in vezor-2.0.0/setup.py:7

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
120 24d 200 117 ↑8.3/day
Very Risky
nanoempire pypi 1.0.1 — core@nanoempireai.com nanoempireai.com 🪝 📡
Package purpose: Official Python SDK for Nano Empire x402 Clearing House and Behavioral Attestations
Claimed homepage: https://pypi.org/project/nanoempire-sdk/
Matched naming pattern: python-nanoempire-sdk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 24
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 200/month, 12/week (MODERATE_USAGE)
Codebase size: 117 lines, 6.2 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOPublisher email domain '@nanoempireai.com' matches package identifier token 'nanoempireai', verifying identifiable third-party organization ownership.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (20 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in nanoempire_sdk-1.0.1/nanoempire/a2a_autonomous_payer.py:56
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in nanoempire_sdk-1.0.1/nanoempire/a2a_autonomous_payer.py:11
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in nanoempire_sdk-1.0.1/nanoempire/client.py:9
  • INFOModerate community usage with 200 monthly downloads.
Static code signals:
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in nanoempire_sdk-1.0.1/nanoempire/a2a_autonomous_payer.py:56
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in nanoempire_sdk-1.0.1/nanoempire/a2a_autonomous_payer.py:11
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in nanoempire_sdk-1.0.1/nanoempire/client.py:9

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
120 40d 538 886 ↑13.4/day
Very Risky
ui pypi 0.5.1 若清风 — 🪝 📡
Package purpose: 研学产品线 UI 规范查询 MCP：查询研学小程序/研学后台的设计 token、组件规格与生成纪律，并支持对生成页面截图做色彩校验。
Claimed homepage: https://pypi.org/project/canpoint-ui-mcp/
Matched naming pattern: canpoint-ui-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 40
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 538/month, 30/week (MODERATE_USAGE)
Codebase size: 886 lines, 50.9 kB across 5 files (MODERATE_CODEBASE)
Automated signals flagged:
  • HIGHPackage registered recently (30 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ui_query_mcp.py:593
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in clients/env_config.py:43
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in clients/env_config.py:70
  • INFOSubstantial functional codebase (886 LOC across 5 file(s)).
  • INFOModerate community usage with 538 monthly downloads.
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ui_query_mcp.py:593
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in clients/env_config.py:43
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in clients/env_config.py:70

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
120 43d 143 421 ↑3.3/day
Very Risky
omniventure pypi 1.0.1 — dalnaspidal@gmail.com gmail.com 🪝 📡
Package purpose: Sub-15ms edge intelligence tools for Claude Desktop, Cursor, LangChain, and autonomous AI agents.
Claimed homepage: https://pypi.org/project/omniventure-tools/
Matched naming pattern: python-omniventure-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 43
Code-only verdict: SUSPICIOUS (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 143/month, 4/week (MODERATE_USAGE)
Codebase size: 421 lines, 19.0 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • HIGHPackage registered recently (30 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Tunneling Service' found in mcp/client_agent_mcp.py:27
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in mcp/client_agent_mcp.py:25
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Tunneling Service' found in python_sdk/omniventure_tools.py:14
  • INFOModerate community usage with 143 monthly downloads.
Static code signals:
  • EXFILTRATION_DESTINATION_DETECTED: 'Tunneling Service' found in mcp/client_agent_mcp.py:27
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in mcp/client_agent_mcp.py:25
  • EXFILTRATION_DESTINATION_DETECTED: 'Tunneling Service' found in python_sdk/omniventure_tools.py:14

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
120 109d 54 823 ↑0.5/day
Very Risky
digvijay pypi 0.2.0 Digvijay Phutane — 🪝
Package purpose: Run local LLMs on low-RAM machines with automatic hardware detection and streaming inference
Claimed homepage: https://pypi.org/project/digvijay-llm/
Matched naming pattern: python-digvijay-llm
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 109
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 54/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 823 lines, 34.7 kB across 7 files (MODERATE_CODEBASE)
Automated signals flagged:
  • HIGHPackage registered recently (83 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in digvijay_llm-0.2.0/digvijay_llm/engine_safetensors.py:122
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in digvijay_llm-0.2.0/setup.py:7
  • INFOSubstantial functional codebase (823 LOC across 7 file(s)).
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in digvijay_llm-0.2.0/digvijay_llm/engine_safetensors.py:122
  • OBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in digvijay_llm-0.2.0/setup.py:7

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
120 167d 856 501,871 ↑5.1/day
Very Risky
useanvil npm 0.5.6 Anvil henry@anvilcontrol.ai anvilcontrol.ai 🪝 🗄️
Package purpose: Anvil: execution correctness layer for AI-triggered actions
Claimed homepage: https://anvilcontrol.ai
Matched naming pattern: node-useanvil-sdk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 167
Code-only verdict: SUSPICIOUS (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 856/month, 214/week (MODERATE_USAGE)
Codebase size: 501871 lines, 21.0 MB across 421 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (148 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall-editor.mjs'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/integrations/anthropic.cjs:5801 (+20 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/integrations/anthropic.cjs:10148 (+17 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/integrations/anthropic.cjs:26885 (+9 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/integrations/anthropic.cjs:8622 (+33 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/integrations/anthropic.cjs:34 (+39 more occurrence(s) elsewhere)
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall-editor.mjs'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/integrations/anthropic.cjs:5801 (+20 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/integrations/anthropic.cjs:10148 (+17 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/integrations/anthropic.cjs:26885 (+9 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/integrations/anthropic.cjs:8622 (+33 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/integrations/anthropic.cjs:34 (+39 more occurrence(s) elsewhere)
  • SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/dist/integrations/anthropic.cjs:26885 (+9 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/ghost-ui/onboarding-session.js:111

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
120 168d 1 53 ↑0.0/day
Very Risky
safe pypi 0.1.0 Forgemaster forgemaster@cocapn.ai cocapn.ai 🪝
Package purpose: Safe-TOPS/W benchmark metric for safety-certified AI accelerators
Claimed homepage: https://github.com/SuperInstance/JetsonClaw1-vessel
Matched naming pattern: safe-safe-w
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 168
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 1/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 53 lines, 2.2 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHPackage registered recently (142 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in safe_tops_w-0.1.0/setup.py:8
Static code signals:
  • OBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in safe_tops_w-0.1.0/setup.py:8

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
120 169d 8 355 ↑0.0/day
Very Risky
metacog pypi 1.0.1 Metacog api@metacog.ai metacog.ai 🪝
Package purpose: Metacog Python SDK — Governed vertical AI for regulated industries
Claimed homepage: https://github.com/metacog-ai/metacog-python
Matched naming pattern: python-metacog-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 169
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 8/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 355 lines, 14.4 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPublisher email domain '@metacog.ai' matches package identifier token 'metacog', verifying identifiable third-party organization ownership.
  • HIGHPackage registered recently (158 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in metacog-1.0.1/metacog/__init__.py:309
  • CRITICALOBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in metacog-1.0.1/setup.py:7
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in metacog-1.0.1/metacog/__init__.py:309
  • OBFUSCATED_DYNAMIC_ACCESS: __import__() dynamic loading 'os' detected in metacog-1.0.1/setup.py:7

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
120 172d 16 957 ↑0.1/day
Very Risky
discord pypi 0.1.0 — — 🪝 📡
Package purpose: Python SDK for sending Discord notifications — fire-and-forget, retry, webhook/bot mode
Claimed homepage: https://pypi.org/project/discord-ops-alert/
Matched naming pattern: discord-discord-alert
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 172
Code-only verdict: SUSPICIOUS (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 957 lines, 39.0 kB across 11 files (MODERATE_CODEBASE)
Automated signals flagged:
  • HIGHPackage registered recently (159 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Discord Webhook' found in discord_ops_alert-0.1.0/src/discord_ops_alert/notifier.py:233
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in discord_ops_alert-0.1.0/src/discord_ops_alert/notifier.py:24
  • INFOSubstantial functional codebase (957 LOC across 11 file(s)).
Static code signals:
  • EXFILTRATION_DESTINATION_DETECTED: 'Discord Webhook' found in discord_ops_alert-0.1.0/src/discord_ops_alert/notifier.py:233
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in discord_ops_alert-0.1.0/src/discord_ops_alert/notifier.py:24

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
120 505d 472 5,581 ↑0.9/day
Very Risky
sc pypi 2.6.8 — nick@spelloconsulting.com spelloconsulting.com 🪝 📡
Package purpose: Shared utilities for logging and configuration management
Claimed homepage: https://pypi.org/project/sc-utility/
Matched naming pattern: python-sc-utility
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 505
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 472/month, 30/week (MODERATE_USAGE)
Codebase size: 5581 lines, 320.3 kB across 19 files (LARGE_CODEBASE)
Automated signals flagged:
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in sc_utility-2.6.8/src/sc_utility/sc_common.py:119
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in sc_utility-2.6.8/src/sc_utility/sc_common.py:97
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in sc_utility-2.6.8/src/sc_utility/sc_common.py:210
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in sc_utility-2.6.8/src/sc_utility/sc_config_mgr.py:260
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in sc_utility-2.6.8/src/sc_utility/sc_shelly_control.py:124
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in sc_utility-2.6.8/src/weather_client/client.py:102
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in sc_utility-2.6.8/src/weather_client/providers/open_meteo_provider.py:42
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in sc_utility-2.6.8/src/weather_client/providers/owm_provider.py:48
Static code signals:
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in sc_utility-2.6.8/src/sc_utility/sc_common.py:119
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in sc_utility-2.6.8/src/sc_utility/sc_common.py:97
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in sc_utility-2.6.8/src/sc_utility/sc_common.py:210
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in sc_utility-2.6.8/src/sc_utility/sc_config_mgr.py:260
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in sc_utility-2.6.8/src/sc_utility/sc_shelly_control.py:124
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in sc_utility-2.6.8/src/weather_client/client.py:102
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in sc_utility-2.6.8/src/weather_client/providers/open_meteo_provider.py:42
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in sc_utility-2.6.8/src/weather_client/providers/owm_provider.py:48

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
120 508d 14 821 ↑0.0/day
Very Risky
langchain pypi 0.1.6 — support@pangea.cloud pangea.cloud 🪝
Package purpose: LangChain integrations for Pangea
Claimed homepage: https://pypi.org/project/langchain-pangea/
Matched naming pattern: python-langchain-pangea
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 508
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 14/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 821 lines, 40.3 kB across 10 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-pangea' matches AI hallucination template [python] + [langchain] + [pangea].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • INFOPublisher email domain '@pangea.cloud' matches package identifier token 'pangea', verifying identifiable third-party organization ownership.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in langchain_pangea-0.1.6/src/langchain_pangea/document_transformers/pangea_text_guard.py:29
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in langchain_pangea-0.1.6/src/langchain_pangea/tools/ai_guard.py:39
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in langchain_pangea-0.1.6/src/langchain_pangea/tools/domain_intel_guard.py:39
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in langchain_pangea-0.1.6/src/langchain_pangea/tools/ip_intel_guard.py:43
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in langchain_pangea-0.1.6/src/langchain_pangea/tools/ip_intel_guard.py:39
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in langchain_pangea-0.1.6/src/langchain_pangea/document_transformers/pangea_text_guard.py:29
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in langchain_pangea-0.1.6/src/langchain_pangea/tools/ai_guard.py:39
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in langchain_pangea-0.1.6/src/langchain_pangea/tools/domain_intel_guard.py:39
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in langchain_pangea-0.1.6/src/langchain_pangea/tools/ip_intel_guard.py:43
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in langchain_pangea-0.1.6/src/langchain_pangea/tools/ip_intel_guard.py:39
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in langchain_pangea-0.1.6/src/langchain_pangea/tools/prompt_guard.py:35
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in langchain_pangea-0.1.6/src/langchain_pangea/tools/redact_guard.py:38
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in langchain_pangea-0.1.6/src/langchain_pangea/tools/url_intel_guard.py:43

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
« Prev Next »
LINK COPIED TO CLIPBOARD