Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 80 | 32h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Declarative config reconciler: edit a typed config repo, push it, and your hosts converge. Also exports the schema library config repos import.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 37h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Live2D desktop pet for the DeepSeek Harness web GUI: a real Cubism 5 model with breath, physics, blinking, gaze tracking, 81 motions and 70 expressions, plus 11 voiced lines that animate both the character and her plush, driven by session activity.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 38h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 手机远程访问 DSH 的一站式插件：移动端 UI 适配 + 公网零配置访问。安装后无论用 frp / ngrok / Cloudflare Tunnel / 路由器端口转发，只要把本地端口映射到公网即可直接用，无需任何额外配置；自带 HTTP Basic Auth 门卫保护公网入口。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 39h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Prebuilt Electron runtime shared libraries for OpenHarmony (ARM aarch64), auto-extracted to a configured directory on install.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 42h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: See what your AI agents built: every screen, language and device walked, assessed and approved on one canvas.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 46h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Opt-in local model usage snapshots for Model Tides
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 46h | — | — | — |
Unverified Signal
|
— | npm | latest | ZEAM Labs, LLC | — | 🪝 | |
|
Package purpose: ZEAM :: Pass for your own server: a paywall (x402; you keep 90.01%), a key gate, or both, for your MCP and HTTP tools. Runs in your process with your keys.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 46h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Publish what your AI makes as private pages, and share them with exactly the people you choose.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 49h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cortico 的 Gemini Web Provider（Windows）：通过内嵌 Electron 使用已登录的 Gemini 网页。必须与 cortico-world-gemini-web 同时安装，二者互为刚需。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 51h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Reads a product's screens, plans its help articles, and photographs them.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 54h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Approval Box connector: lets Claude Code, Codex, Cursor and Grok ask you for a decision, and steers your answer back into the same session.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Retrieve complete customer support threads across email, chat, social media, and SMS. Read customer messages, staff replies, and internal notes; manage conversations, contacts and identities, contact notes, knowledge base articles, response templates, sta
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 65h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Your AI writes the code. AsBuiltBy draws the blueprints. Local capture bridge for AsBuiltBy Cloud.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 67h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: veo: a knowledge graph of your code — every function, what it calls, and the line proving it
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 67h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Parle plugin for Claude Code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 67h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agentic Continuous Delivery kit: deterministic orchestrator, typed stages, pluggable harnesses
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 67h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Parle plugin for Codex.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 67h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Parle MCP server for any MCP host that can launch a local stdio server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 71h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Desktop app framework using Node.js and webview.h
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Search and read the web, retrieve brand and company intelligence, parse documents, and manage asynchronous batches and recurring website monitors.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Command-line client for Projectrr: issues, epics, workflow rules and integrations from your terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 3d | — | — | — |
Very Risky
|
— | npm | latest | Andrey Gubanov | — | 🪝 🌐 | |
|
Package purpose: The expression language of uicast documents: JavaScript expressions over JSON data. Closed AST allow-list, runtime membrane, CPU and allocation budget. Never calls new Function, so it needs no unsafe-eval.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: conform.tools on your machine: timeline exchange, relink, media trim, delivery and auto conform, as MCP tools for Claude and other AI apps, a CLI and a local HTTP API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A local-first AI coding time machine — captures meaningful changes, reasoning, and session context so you can see what happened across your coding sessions, even days later.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | LinkBridge | — | 🪝 🌐 | |
|
Package purpose: LinkBridge — 把本地 MCP 工具安全桥接到云端 AI 客户端（公测 CLI）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Emotion Guru Team | — | 🪝 | |
|
Package purpose: CLI tool for syncing GSB serverless functions and libraries
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | ADES | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: WorkBuddy / CodeBuddy 多账号切换工具：本地 webui（浏览器操作），同时作为 CodeBuddy / WorkBuddy 插件的内核
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Matthieu Pesnot-Pin | — | 🪝 | |
|
Package purpose: MCP server for Gmail organization — read, search, label management, no send/delete
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 3d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Olit is an AI co-scientist that runs directly inside Galaxy, in the web browser.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: AI-native headless community OS
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 华数 AI Store / Token Plan 费用中心：控制台、套餐、API 密钥、积分、订单、消息、云盘、AI作品；AI创作生图/生视频（Agent 工具 + 对话画廊）；模型广场目录写入 dsh chat「华数模型」。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Upload-Post | — | 🪝 🌐 | |
|
Package purpose: Activepieces piece for Upload-Post: publish and schedule videos, photos and text posts to TikTok, Instagram, YouTube, LinkedIn, Facebook, X, Threads, Pinterest, Bluesky and more.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | JB Natividad | — | 🪝 🌐 | |
|
Package purpose: Role-based multi-agent workflow harness: Claude Code by default, other AI agents pluggable
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Tangle Media, Inc. | — | 🪝 🌐 | |
|
Package purpose: Installs the Poll collections (polls, questions, options, responses, answers) plus vote validation, results endpoint, list summary and results panel.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The headless host of LeCodes projects (Bun): sessions, scenario flows, JSON / PNG snapshots — with the canvas UI renderer (the tree UI and its painter) it runs them on
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 4d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Flow-Like widget bundler: extracts typed contracts from TS widgets and packs framework builds into .flwb bundles.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 管理 AI 编程智能体(OpenCode/Claude Code/Hermes)模型配置的本地仪表盘工具
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Provider-neutral external agent workflow for KheleShikhi Interactive Studio
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | 01Republic Inc. | — | 🪝 🌐 | |
|
Package purpose: Connect your AI tools to Stubee and verify your account
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Thin CLI for the remote Datadog service (metrics, traces, general API) - no inline JSON needed.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local MCP server for the GoatEdit video editor: drive your open editor tab from Claude Code or any MCP client
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run a TymNet node: take jobs, run them with your own AI coding agent, get paid for accepted work.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP-Server (stdio) für die autoiXpert External API: Gutachten, Fotos, Dokumente, Kontakte, Rechnungen, Webhooks.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 5d | — | — | — |
Very Risky
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Tyler | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Model-agnostic AI agent with MCP tools over Open-Meteo
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | paulocapa55@gmail.com paulocapa55@gmail.com | gmail.com | 🪝 🌐 | |
|
Package purpose: Local-only Figma bridge: full Figma Plugin API access from Claude over MCP. No telemetry.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||