Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 80 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Serve & Pro CLI monorepo and source repository
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MOH indicator report runner for LiberiaEMR: choose a report, period and location; run, view by disaggregation and export
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Thin CLI for the remote Datadog service (logs, metrics, traces, general API) - no inline JSON needed.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: yori の管理CLI。会社・社員・案件・案件メンバー・認証トークンを管理する
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Persistent MCP login state for DeepSeek Harness: OAuth 2.1 / manual header credentials per MCP server, injected into mcp-client rows via !!js.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Long-term memory for Claude Code: recalls relevant context before each prompt, retains conversations afterwards, and exposes knowledge tools over MCP.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | AppAIHelp | — | 🪝 🌐 | |
|
Package purpose: AppAIHelp Code Agent CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DeepSeek Harness 防休眠插件（守夜人）：agent 任务执行期间阻止操作系统休眠，任务结束后恢复；方式子系统（systemd-inhibit / GNOME gsettings / caffeinate / pmset / PowerShell / powercfg）+ 浏览器 Wake Lock + 一键更新
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Kit SDK and independently verifiable draw tooling for mallow sweepstakes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP stdio server exposing the smart-yield command surface as read-only tools: vault discovery, yield analytics, positions, unsigned tx plans
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local Open Autonomy treasury (agent-model-proxy) twin — the economy layer's money boundary: the funding-account tree (mint/grant/accrue, conservation invariant), the generic supplier API (scoped bearer suppliers, itemized consume, two-phase reserve/settle
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | VibeDefender | — | 🪝 🌐 | |
|
Package purpose: Scanner de seguranca para projetos feitos com IA: sites, APIs, apps, bots e scripts em JavaScript, Python, PHP, Go e mais. Acha falhas criticas, explica em portugues e entrega o prompt de correcao pronto.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 6d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Visual QA for AI-coded interfaces. Learn a visual contract and detect frontend drift.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Managed personal compute for Conveyor. Installs and maintains a k3s cluster that runs your own card builds, kept converged on Conveyor's desired state.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Plugin per cercare nella documentazione Backstage (docs/) tramite AI agent. Supporta Antigravity, Claude Code e OpenCode.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI oficial da RockQuant: cliente MCP fino sobre a fachada mcp.rockquant.io
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The AstraCode agent, headless: run one task from a shell, a CI job or a script.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Octopus host proxy: OpenCode, Codex, ZCode and Pi adapters with service installer CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 6d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: fontTools for the browser and Node.js — pyftsubset / ttx / varLib.instancer running on Pyodide (WASM CPython). In the browser it lives in a Web Worker; in Node it runs on the calling thread. No server, no local Python.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Keyright Node.js client SDK — offline/online software license validation and entitlements.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | DJ | — | 🪝 🌐 | |
|
Package purpose: Open-source AI harness that turns customer bug reports into reviewed GitHub pull requests
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: SosoAPI CLI and MCP server: let your coding agent draft, schedule and publish social posts you approve.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Read Oracle Fusion Cloud financials, purchasing, worker assignments, inventory, sales orders, and receiving history. Download invoice files and manage eligible payables invoices, purchase requisitions, and original draft purchase orders.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Typed, fetch-based TypeScript client for the Scribase control-plane /v1 API (agent-native, flat-priced Supabase-compatible application cloud).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | OXVO | — | 🪝 | |
|
Package purpose: The command line interface for Oxvo Insights
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Compiled Vizly editor runtime. Public npm distribution is approved for the compiled package. Core source remains private. Commercial production deployment requires separate authorization under the bundled `LICENSE`.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Publish Markdown papers to the web
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Native Decoded Ventures CLI for platform tests, release verification, and workflow operations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Vite + React + TypeScript app template for Waypoint app previews — create-vite react-ts, plus the Waypoint overlay (ai-design-system, PWA, push).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | zetagoaurum | — | 🪝 | |
|
Package purpose: AUREUS — Video Enhancer, Upscaler & RAW Lossless Converter. YouTube & local files → RAW/lossless/HDR output. Interactive TUI + CLI + local Web UI. Linux, Windows, macOS, Termux.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agent-first app workflow capture, frontend completeness scoring, and local screenshot review.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK for the Incus REST API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run the crewbench multi-agent dev workflow headlessly, or start its local web UI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 8d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local QR transport for the Thunder Den offline signer
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Turns a product idea into a repository an AI coding agent can build without drifting, and keeps it in step.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Arsya | — | 🪝 🌐 | |
|
Package purpose: Arsya's modded Baileys v7 — interactive messages, album, newsletter, VoIP, anti-lag send queue, auto decrypt-retry/reconnect, metadata cache TTL, media download helpers & ARich helper
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Acceptance QA walkthroughs rendered as a shareable flow canvas.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Izdax Studio CLI and local MCP with browser account authorization
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Accounts by iAurelius for your backend: verify sessions, call the Backend API, verify webhooks. Works on Cloudflare Workers, Node, Bun and Deno.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Karpathy-style three-layer knowledge base for DSH: immutable raw sources, an LLM-maintained wiki, and a schema that tells the LLM how to maintain that wiki.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | ChatDaddy | — | 🪝 🌐 | |
|
Package purpose: ChatDaddy MCP server — WhatsApp automation for Claude Code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Scalebun CLI — OTA bundle publishing and management
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | System Systems LLC | — | 🪝 🌐 | |
|
Package purpose: Stage1 Inspector — local website capture, evidence views and design comparison
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 统一选择测试或 Stage 环境，分别发布各仓库的远端协作分支并查看构建结果。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A dual OpenCode and OpenCode2 plugin for local cross-platform desktop control.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Deploys one Foundation instance from a published, signed release: the CDK app and the deploy tool.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | JJ Eaton | — | 🪝 🌐 | |
|
Package purpose: Sidebud companion: talk to the agents on your computer from your phone.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Give Us a Project | — | 🪝 🌐 | |
|
Package purpose: Build add-ons for Give Us a Project: define tools, lists, schedules and views, and test them on practice data.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cria um projeto novo (backend CAP + frontend web React ou Fiori, ou app mobile React Native/Expo) a partir do template Copacol
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 80 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Code Quality Studio | — | 🪝 🌐 | |
|
Package purpose: Code Quality Studio — CLI for auditing test files (Playwright, Cypress, Selenium, Appium, TOSCA and more)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||