🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
80 54d 0 60 ↑0.0/day
SUSPICIOUS
google pypi 0.0.2 wordstotech —
Package purpose: Python client for scraping Google AI Mode answers and citations using the ScrapingBee web scraping API
Claimed homepage: https://pypi.org/project/google-ai-mode-scraper-api/
Matched naming pattern: google-google-mode
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 54
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 60 lines, 2.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (42 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 59d 41 76 ↑0.7/day
SUSPICIOUS
llama pypi 0.1.1 Ice Phi — 🪝
Package purpose: Sub-20ms prompt injection and jailbreak protection for LlamaIndex query engines.
Claimed homepage: https://pypi.org/project/llama-index-guardrails-icephi/
Matched naming pattern: llama-llama-guardrails
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 59
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 41/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 76 lines, 3.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_index_guardrails_icephi-0.1.1/llama_index/guardrails/icephi/base.py:38
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_index_guardrails_icephi-0.1.1/llama_index/guardrails/icephi/base.py:38

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 60d 60 124 ↑1.0/day
SUSPICIOUS
google pypi 1.3.0 Alis Build —
Package purpose: Python and gRPC stubs generated by Alis Build for google.logging.type
Claimed homepage: https://pypi.org/project/google.logging.type/
Matched naming pattern: google-google-type
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 60
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 60/month, 19/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 124 lines, 8.1 kB across 8 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (54 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 62d 1,816 126 ↑29.3/day
Very Risky
yibi npm latest — — 🪝
Package purpose: 本机 agent 交互台账：ccusage 采集 + session 对话投影 + SQLite 全文检索，附交互质量评审模块（pd-analyze）。npx 一次装好，并把用法 skill 装进 ~/.claude/skills 教会你的 agent。
Matched naming pattern: node-yibi-pd-ledger
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 62
Registry downloads: 1816/month, 454/week (ACTIVE_COMMUNITY_USE)
Codebase size: 126 lines, 6.5 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (59 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/install.js:20
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/install.js:56
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/install.js:71
  • HIGHSYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/bin/install.js:130
  • CRITICALSOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/bin/install.js
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/install.js:20
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/install.js:56
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/install.js:71
  • SYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/bin/install.js:130
  • SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/bin/install.js

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 65d 0 110 ↑0.0/day
SUSPICIOUS
chroma pypi 0.1.4 zhenzi0322 82131529@qq.com qq.com
Package purpose: 轻量级 Python ANSI 终端色彩库，支持 4/8/256 色、24 位真 RGB 色彩与文本样式
Claimed homepage: https://pypi.org/project/chroma-term-console/
Matched naming pattern: chroma-chroma-console
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 65
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 110 lines, 3.9 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('CHROMA').
  • HIGHPublisher email '82131529@qq.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (58 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 78d 22 54 ↑0.3/day
SUSPICIOUS
llama pypi 0.1.0 — chandu1221@gmail.com gmail.com
Package purpose: llama-index postprocessor distil integration
Claimed homepage: https://pypi.org/project/llama-index-postprocessor-distil/
Matched naming pattern: llama-llama-postprocessor
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 78
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 22/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 54 lines, 2.9 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'chandu1221@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (52 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 78d 29 40 ↑0.4/day
SUSPICIOUS
grok pypi 0.0.0 Development Team reserver@openscilab.com openscilab.com
Package purpose: This name has been reserved using Reserver
Claimed homepage: https://github.com/openscilab/reserver
Matched naming pattern: grok-grok-sdk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 78
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 29/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 40 lines, 1.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('GROK').
  • HIGHPublisher email 'reserver@openscilab.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (56 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 80d — — —
Unverified Signal
— npm latest — — 🪝
Package purpose: Billing engine for the serverless agency — a pi extension that meters agentic dev work like cloud compute and invoices it like a timesheet.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'simple-git-hooks 2>/dev/null || true'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/extensions/pi-ledger/index.ts:3489
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/extensions/pi-ledger/index.ts:994
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/extensions/pi-ledger/index.ts:907

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 83d 40 440 ↑0.5/day
Very Risky
brand npm 0.1.0 — — 🪝 🌐
Package purpose: Connect a local coding agent to a Duya Workspace and expose its shared memory, tasks, and activity through MCP.
Claimed homepage: https://github.com/lava-chen/duya-workspace#readme
Matched naming pattern: node-brand-duya
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 83
Registry downloads: 40/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 440 lines, 21.8 kB across 1 file (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (80 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'install' -> 'npm run build && node dist/cli.js install'
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/cli.js:33
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cli.js:10
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'install' script runs package/dist/cli.js, which makes network calls and executes/decodes/reads secrets
  • INFOPackage affiliated with trusted vendor 'brand' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (110 -> 55) to reduce false positives while retaining hijack/takeover detection.
  • CRITICALCRITICAL: Weaponized payload detected on package affiliated with trusted vendor 'brand'. High probability of vendor account takeover, compromised credentials, or malicious release.
Static code signals:
  • LIFECYCLE_SCRIPT: 'install' -> 'npm run build && node dist/cli.js install'
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/cli.js:33
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cli.js:10
  • INSTALL_TIME_NETWORK_SOCKET: 'install' script runs package/dist/cli.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 88d 117 20 ↑1.3/day
SUSPICIOUS
claude pypi 0.1.0 — —
Package purpose: The official Claude Code agent — same as Anthropic's, full coding toolset. GPU via providers.
Claimed homepage: https://pypi.org/project/pwm-agent-claude-gpu/
Matched naming pattern: pwm-claude-claude
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 88
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 117/month, 1/week (MODERATE_USAGE)
Codebase size: 20 lines, 941 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'pwm-agent-claude-gpu' matches AI hallucination template [pwm] + [claude] + [claude].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (70 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 117 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 97d 102 127 ↑1.1/day
SUSPICIOUS
google pypi 0.1.0 — federicobond@gmail.com gmail.com
Package purpose: OpenTelemetry google-api-python-client instrumentation
Claimed homepage: https://pypi.org/project/opentelemetry-instrumentation-google-api-client/
Matched naming pattern: opentelemetry-google-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 97
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 102/month, 21/week (MODERATE_USAGE)
Codebase size: 127 lines, 5.7 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'opentelemetry-instrumentation-google-api-client' matches AI hallucination template [opentelemetry] + [google] + [google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'federicobond@gmail.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (84 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 102 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 100d 16 3 ↑0.2/day
SUSPICIOUS
google pypi 1.0.0 DownloadMapImage —
Package purpose: Parse Google Maps place URLs.
Claimed homepage: https://pypi.org/project/google-maps-place-parser/
Matched naming pattern: google-google-place
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 100
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 3 lines, 76 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (88 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 102d — — —
Unverified Signal
— npm latest RealtimeX — 🪝 🌐
Package purpose: Drop-in real-time chat UI for React and Next.js — DMs, groups, reactions, replies, forwarding, attachments, push notifications, and admin permissions.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/copy-firebase-sw.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index.cjs:3378 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.cjs:4243 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/copy-firebase-sw.js:11

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 171d 0 149 ↑0.0/day
SUSPICIOUS
llama pypi 0.2.0 Neosapience developers@neosapience.com neosapience.com
Package purpose: llama-index tools typecast integration
Claimed homepage: https://pypi.org/project/llama-index-tools-typecast/
Matched naming pattern: llama-llama-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 171
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 149 lines, 7.0 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'developers@neosapience.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (145 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 194d 9,633 384 ↑49.7/day
Very Risky
@toothfairyai/tfcode npm 2.5.15 — — 🪝 🌐
Package purpose: **ToothFairyAI's AI coding agent** — a command-line interface that brings AI-powered coding assistance to your terminal with deep ToothFairyAI workspace integration.
Claimed homepage: https://toothfairyai.com/developers/tfcode
Matched naming pattern: npm-@toothfairyai/tfcode-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 194
Registry downloads: 9633/month, 2408/week (ACTIVE_COMMUNITY_USE)
Codebase size: 384 lines, 15.8 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage registered 182 days ago within the 1-year AI tool proliferation window.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node ./postinstall.mjs'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/tfcode.js:2
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/tfcode.js:17 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/tfcode.js:57 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/postinstall.mjs:77
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/postinstall.mjs, which makes network calls and executes/decodes/reads secrets
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node ./postinstall.mjs'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/tfcode.js:2
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/tfcode.js:17 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/tfcode.js:57 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/postinstall.mjs:77
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/postinstall.mjs, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 197d 0 13 ↑0.0/day
SUSPICIOUS
crewai pypi 0.1.0 — —
Package purpose: Power up your crews with crewai_geolocate
Claimed homepage: https://pypi.org/project/crewai_geolocate/
Matched naming pattern: python-crewai-geolocate
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 197
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 13 lines, 603 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'crewai-geolocate' matches AI hallucination template [python] + [crewai] + [geolocate].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 186 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 197d 0 27 ↑0.0/day
SUSPICIOUS
langchain pypi 0.1.0 Kasa Harendra harendrakasa@gmail.com gmail.com
Package purpose: A LangChain toolkit for integrating Google Workspace (Gmail, Calendar, Tasks, Sheets, Drive)
Claimed homepage: https://github.com/Kasa-Harendra/langchain-gsuite
Matched naming pattern: gsuite-langchain-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 197
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 27 lines, 925 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'gsuite-langchain-tools' matches AI hallucination template [gsuite] + [langchain] + [tools].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'harendrakasa@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 187 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 209d 7 36 ↑0.0/day
SUSPICIOUS
ledger pypi 0.1.0 — jasper@humotica.com humotica.com
Package purpose: Provenance-first crypto transactions — alias for tibet-jawbreaker
Claimed homepage: https://pypi.org/project/tibet-ledger/
Matched naming pattern: python-ledger-tibet
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 209
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 36 lines, 878 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'tibet-ledger' matches AI hallucination template [python] + [ledger] + [tibet].
  • HIGHClaims critical enterprise brand identity ('LEDGER').
  • HIGHPublisher email 'jasper@humotica.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 184 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 216d 9 53 ↑0.0/day
SUSPICIOUS
ledger pypi 1.0.0 SimoesCTT —
Package purpose: Singapore-Zenith-Mainnet Unitary Ledger Engine
Claimed homepage: https://pypi.org/project/omega-ledger/
Matched naming pattern: python-ledger-omega
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 216
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 53 lines, 2.1 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'omega-ledger' matches AI hallucination template [python] + [ledger] + [omega].
  • HIGHClaims critical enterprise brand identity ('LEDGER').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 205 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 223d 10 73 ↑0.0/day
SUSPICIOUS
google pypi 1.0.12 — —
Package purpose: Google GenAI integration for Vespwood
Claimed homepage: https://pypi.org/project/vespwood-google/
Matched naming pattern: python-google-vespwood
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 223
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 73 lines, 3.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'vespwood-google' matches AI hallucination template [python] + [google] + [vespwood].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 197 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 227d 1,615 31 ↑7.1/day
Very Risky
safe npm 0.0.9 — — 🪝 🌐
Package purpose: SAFE test package: exfiltration-intent patterns with dummy data; localhost only; optional CLI.
Matched naming pattern: safe-safe-intent
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 227
Registry downloads: 1615/month, 403/week (ACTIVE_COMMUNITY_USE)
Codebase size: 31 lines, 950 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage registered 221 days ago within the 1-year AI tool proliferation window.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postinstall.js:8
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/postinstall.js:10
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/postinstall.js:10
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/postinstall.js, which makes network calls and executes/decodes/reads secrets
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postinstall.js:8
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/postinstall.js:10
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/postinstall.js:10
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/postinstall.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 229d 13 42 ↑0.1/day
SUSPICIOUS
stripe pypi 0.1.0b2 — shawn@shawngrover.ca shawngrover.ca
Package purpose: Flask integration for the eldercrank-stripe library, providing easy webhook handling for Stripe events in Flask applications.
Claimed homepage: https://pypi.org/project/eldercrank-stripe-flask/
Matched naming pattern: django-stripe-auth
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 229
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 13/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 42 lines, 2.0 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'eldercrank-stripe-flask' matches AI hallucination template [django] + [stripe] + [auth].
  • HIGHClaims critical enterprise brand identity ('STRIPE').
  • HIGHPublisher email 'shawn@shawngrover.ca' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 203 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 229d 11 41 ↑0.0/day
SUSPICIOUS
stripe pypi 0.1.0b2 — shawn@shawngrover.ca shawngrover.ca
Package purpose: FastAPI integration for the eldercrank-stripe library, providing easy webhook handling for Stripe events in FastAPI applications.
Claimed homepage: https://pypi.org/project/eldercrank-stripe-fastapi/
Matched naming pattern: eldercrank-stripe-fastapi
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 229
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 11/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 41 lines, 1.7 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'eldercrank-stripe-fastapi' matches AI hallucination template [eldercrank] + [stripe] + [fastapi].
  • HIGHClaims critical enterprise brand identity ('STRIPE').
  • HIGHPublisher email 'shawn@shawngrover.ca' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 218 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 232d 10 125 ↑0.0/day
SUSPICIOUS
cursor pypi 0.1.0 Solihatun1 —
Package purpose: AI Cursor Scraping Assistant - An MCP server for generating web scrapers using AI
Claimed homepage: https://pypi.org/project/iflow-mcp_solihatun1-ai-cursor-scraping-assistant/
Matched naming pattern: iflow-cursor-solihatun1
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 232
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 125 lines, 5.7 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'iflow-mcp-solihatun1-ai-cursor-scraping-assistant' matches AI hallucination template [iflow] + [cursor] + [solihatun1].
  • HIGHClaims critical enterprise brand identity ('CURSOR').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 206 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 232d 5,432 181 ↑23.4/day
Very Risky
@themoltnet/cli npm 3.2.0 — — 🪝 🌐
Package purpose: CLI for MoltNet — AI agent identity and autonomy network
Claimed homepage: https://themolt.net
Matched naming pattern: npm-@themoltnet/cli-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 232
Registry downloads: 5432/month, 1358/week (ACTIVE_COMMUNITY_USE)
Codebase size: 181 lines, 6.2 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage registered 220 days ago within the 1-year AI tool proliferation window.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/install.js:7 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:116 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:65
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets
  • INFOActive community usage with 5,432 monthly downloads.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/install.js:7 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:116 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:65
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 237d 12 126 ↑0.1/day
SUSPICIOUS
cursor pypi 0.1.0 — —
Package purpose: AI-powered Cursor assistant for web scraping using MCP protocol
Claimed homepage: https://pypi.org/project/iflow-mcp_thewebscrapingclub-ai-cursor-scraping-assistant/
Matched naming pattern: iflow-cursor-thewebscrapingclub
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 237
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 126 lines, 5.8 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'iflow-mcp-thewebscrapingclub-ai-cursor-scraping-assistant' matches AI hallucination template [iflow] + [cursor] + [thewebscrapingclub].
  • HIGHClaims critical enterprise brand identity ('CURSOR').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 226 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 249d 6 121 ↑0.0/day
SUSPICIOUS
uniswap pypi 0.1.1 — — 🪝
Package purpose: An MCP server that tracks newly created liquidity pools on Uniswap across nine blockchain networks
Claimed homepage: https://pypi.org/project/iflow-mcp_kukapay_uniswap-poolspy-mcp/
Matched naming pattern: iflow-uniswap-kukapay
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 249
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 6/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 121 lines, 6.6 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'iflow-mcp-kukapay-uniswap-poolspy-mcp' matches AI hallucination template [iflow] + [uniswap] + [kukapay].
  • HIGHClaims critical enterprise brand identity ('UNISWAP').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 238 days ago within the 1-year AI tool proliferation window.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in iflow_mcp_kukapay_uniswap_poolspy_mcp-0.1.1/main.py:12
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in iflow_mcp_kukapay_uniswap_poolspy_mcp-0.1.1/main.py:12

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 253d 3,980 365 ↑15.7/day
Very Risky
squirrelscan npm 0.0.97 squirrelscan — 🪝 🌐
Package purpose: Website QA tool built for coding agents. 260+ rules across SEO, performance, security, accessibility & agent experience, from the CLI, cloud, or MCP.
Claimed homepage: https://squirrelscan.com
Matched naming pattern: npm-squirrelscan-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 253
Registry downloads: 3980/month, 995/week (ACTIVE_COMMUNITY_USE)
Codebase size: 365 lines, 11.6 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage registered 241 days ago within the 1-year AI tool proliferation window.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/postinstall.js:16 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.js:221 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/postinstall.js:12
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.js:128
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/postinstall.js, which makes network calls and executes/decodes/reads secrets
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/postinstall.js:16 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.js:221 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/postinstall.js:12
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.js:128
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/postinstall.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 265d 42 1 ↑0.2/day
SUSPICIOUS
perplexity npm 0.0.1 Efficient Frontier Labs —
Package purpose: MCP server for perplexity integration
Claimed homepage: https://github.com/hlos-ai/mcp-servers#readme
Matched naming pattern: node-perplexity-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 265
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 42/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 86 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mcp-perplexity' matches AI hallucination template [node] + [perplexity] + [mcp].
  • HIGHClaims critical enterprise brand identity ('PERPLEXITY').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 239 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 265d 26 1 ↑0.1/day
SUSPICIOUS
stripe npm 0.0.1 Efficient Frontier Labs —
Package purpose: MCP server for stripe API integration
Claimed homepage: https://github.com/hlos-ai/mcp-servers#readme
Matched naming pattern: node-stripe-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 265
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 26/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 82 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mcp-stripe' matches AI hallucination template [node] + [stripe] + [mcp].
  • HIGHClaims critical enterprise brand identity ('STRIPE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 239 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 269d 8 126 ↑0.0/day
SUSPICIOUS
llama pypi 1.0.0 — tuana@runllama.ai runllama.ai 🪝
Package purpose: Expose LlamaCloud services as MCP tools
Claimed homepage: https://pypi.org/project/iflow-mcp_run-llama_llamacloud-mcp/
Matched naming pattern: iflow-llama-run
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 269
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 8/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 126 lines, 5.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'iflow-mcp-run-llama-llamacloud-mcp' matches AI hallucination template [iflow] + [llama] + [run].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'tuana@runllama.ai' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 261 days ago within the 1-year AI tool proliferation window.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in iflow_mcp_run_llama_llamacloud_mcp-1.0.0/llamacloud_mcp/main.py:105
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in iflow_mcp_run_llama_llamacloud_mcp-1.0.0/llamacloud_mcp/main.py:105

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 272d 74 140 ↑0.3/day
SUSPICIOUS
google pypi 1.0.0 Ganesh Raut rautganesh9370@gmail.com gmail.com
Package purpose: Fast Google Finance scraper for stocks, forex, crypto with pandas output
Claimed homepage: https://github.com/93627829939e93u3/google_finance_scraper.git
Matched naming pattern: django-google-auth
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 272
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 74/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 140 lines, 6.8 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'google-finance-scraper' matches AI hallucination template [django] + [google] + [auth].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'rautganesh9370@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 246 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 273d 6,619 2,693 ↑24.2/day
Very Risky
houdini npm 2.0.9 — — 🪝 🌐
Package purpose: The core GraphQL client for Houdini
Claimed homepage: https://github.com/HoudiniGraphql/houdini
Matched naming pattern: npm-houdini-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 273
Registry downloads: 6619/month, 1654/week (ACTIVE_COMMUNITY_USE)
Codebase size: 2693 lines, 96.2 kB across 28 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage registered 267 days ago within the 1-year AI tool proliferation window.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node postInstall.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/postInstall.js:5
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postInstall.js:97
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postInstall.js:4
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/postInstall.js:20
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/runtime/plugins/fetch.ts:73 (+1 more occurrence(s) elsewhere)
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node postInstall.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/postInstall.js:5
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postInstall.js:97
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postInstall.js:4
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/postInstall.js:20
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/runtime/plugins/fetch.ts:73 (+1 more occurrence(s) elsewhere)
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/postInstall.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 274d 0 53 ↑0.0/day
SUSPICIOUS
ledger pypi 0.1.1 kuruitinoji —
Package purpose: A tamper-evident auditing ledger with Tsundere philosophy.
Claimed homepage: https://pypi.org/project/tundere-ledger/
Matched naming pattern: python-ledger-tundere
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 274
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 53 lines, 3.0 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'tundere-ledger' matches AI hallucination template [python] + [ledger] + [tundere].
  • HIGHClaims critical enterprise brand identity ('LEDGER').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 264 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 276d 22 20 ↑0.1/day
SUSPICIOUS
aws pypi 0.1.0 — security@poneglyph.research poneglyph.research
Package purpose: MCP server package - Created by Poneglyph for security research
Claimed homepage: https://pypi.org/project/awslabs.aws-dms-mcp-server/
Matched naming pattern: awslabs-aws-dms
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 276
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 22/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 648 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'awslabs-aws-dms-mcp-server' matches AI hallucination template [awslabs] + [aws] + [dms].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'security@poneglyph.research' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 266 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 276d 27 20 ↑0.1/day
SUSPICIOUS
aws pypi 0.1.0 — security@poneglyph.research poneglyph.research
Package purpose: MCP server package - Created by Poneglyph for security research
Claimed homepage: https://pypi.org/project/awslabs.aws-dms-troubleshoot-mcp-server/
Matched naming pattern: awslabs-aws-dms
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 276
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 27/month, 12/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 674 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'awslabs-aws-dms-troubleshoot-mcp-server' matches AI hallucination template [awslabs] + [aws] + [dms].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'security@poneglyph.research' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 266 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 279d 8 32 ↑0.0/day
SUSPICIOUS
llamaindex pypi 0.1.0 — —
Package purpose: Primordia metering for LlamaIndex
Claimed homepage: https://pypi.org/project/llamaindex-primordia/
Matched naming pattern: python-llamaindex-primordia
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 279
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 8/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 32 lines, 1.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llamaindex-primordia' matches AI hallucination template [python] + [llamaindex] + [primordia].
  • HIGHClaims critical enterprise brand identity ('LLAMAINDEX').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 269 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 281d 87 62 ↑0.3/day
SUSPICIOUS
google npm 0.0.2 Entangle Software Private Limited —
Package purpose: Capacitor plugin that enables Google Pay Web support in Angular apps by fixing iOS WKWebView and Android WebView limitations.
Claimed homepage: https://github.com/entanglesoftware-angular/ng-google-pay-webview#readme
Matched naming pattern: ng-google-pay
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 281
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 87/month, 21/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 62 lines, 2.2 kB across 8 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'ng-google-pay-webview' matches AI hallucination template [ng] + [google] + [pay].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 255 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 291d 8 102 ↑0.0/day
SUSPICIOUS
elevenlabs pypi 0.1.0 reklis —
Package purpose: OVOS TTS plugin for ElevenLabs text-to-speech API
Claimed homepage: https://pypi.org/project/ovos-tts-plugin-elevenlabs/
Matched naming pattern: ovos-elevenlabs-plugin
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 291
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 102 lines, 4.0 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'ovos-tts-plugin-elevenlabs' matches AI hallucination template [ovos] + [elevenlabs] + [plugin].
  • HIGHClaims critical enterprise brand identity ('ELEVENLABS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 280 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 292d 55 88 ↑0.2/day
SUSPICIOUS
google npm 0.1.1 Vijay Gojiya vmgojiya32@gmail.com gmail.com
Claimed homepage: https://github.com/vijaygojiya/react-native-google-places-turbo#readme
Matched naming pattern: react-google-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 292
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 55/month, 13/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 88 lines, 3.0 kB across 8 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'react-native-google-places-turbo' matches AI hallucination template [react] + [google] + [google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'vmgojiya32@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 266 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 300d 5 37 ↑0.0/day
SUSPICIOUS
hf pypi 0.0.0 — ai@abrain.one abrain.one
Package purpose: Uploader of Deep Model Weights to Hugging Face
Claimed homepage: https://pypi.org/project/nn-hf/
Matched naming pattern: python-hf-nn
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 300
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 37 lines, 1.9 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'nn-hf' matches AI hallucination template [python] + [hf] + [nn].
  • HIGHClaims critical enterprise brand identity ('HF').
  • HIGHPublisher email 'ai@abrain.one' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 290 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 303d 11 30 ↑0.0/day
SUSPICIOUS
aws pypi 0.1.0 — —
Claimed homepage: https://pypi.org/project/pytest-aws-fixtures-293984/
Matched naming pattern: pytest-aws-fixtures
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 303
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 30 lines, 1.1 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'pytest-aws-fixtures-293984' matches AI hallucination template [pytest] + [aws] + [fixtures].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 293 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 303d 9 30 ↑0.0/day
SUSPICIOUS
aws pypi 0.1.0 — —
Claimed homepage: https://pypi.org/project/fastapi-aws-auth-29146/
Matched naming pattern: fastapi-aws-auth
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 303
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 30 lines, 1.1 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'fastapi-aws-auth-29146' matches AI hallucination template [fastapi] + [aws] + [auth].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 293 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 303d 23 30 ↑0.1/day
SUSPICIOUS
aws pypi 0.1.0 — —
Claimed homepage: https://pypi.org/project/asyncio-aws-client-290657/
Matched naming pattern: asyncio-aws-client
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 303
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 23/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 30 lines, 1.1 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'asyncio-aws-client-290657' matches AI hallucination template [asyncio] + [aws] + [client].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 293 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 303d 10 30 ↑0.0/day
SUSPICIOUS
aws pypi 0.1.0 — —
Claimed homepage: https://pypi.org/project/django-aws-storage-28814/
Matched naming pattern: django-aws-storage
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 303
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 30 lines, 1.1 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'django-aws-storage-28814' matches AI hallucination template [django] + [aws] + [storage].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 293 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 318d 12 86 ↑0.0/day
SUSPICIOUS
google pypi 0.0.0.2 — muhammetozturk.219@gmail.com gmail.com 🪝
Claimed homepage: https://pypi.org/project/google-colabkit/
Matched naming pattern: python-google-colabkit
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 318
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 86 lines, 3.1 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'google-colabkit' matches AI hallucination template [python] + [google] + [colabkit].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'muhammetozturk.219@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 292 days ago within the 1-year AI tool proliferation window.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in google_colabkit-0.0.0.2/colabkit/colabkit.py:83
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in google_colabkit-0.0.0.2/colabkit/colabkit.py:83

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 333d 6 9 ↑0.0/day
SUSPICIOUS
copilot pypi 0.0.1 Mohsen Azimi —
Package purpose: Scaffolding & CLI hooks for an upcoming OpenSees agent — placeholder release.
Claimed homepage: https://pypi.org/project/opensees-copilot/
Matched naming pattern: python-copilot-opensees
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 333
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 9 lines, 310 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'opensees-copilot' matches AI hallucination template [python] + [copilot] + [opensees].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 323 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 340d 22 122 ↑0.1/day
SUSPICIOUS
perplexity pypi 0.1.4 — tanigami@teps.io teps.io
Claimed homepage: https://pypi.org/project/iflow-mcp_mcp-server-perplexity/
Matched naming pattern: iflow-perplexity-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 340
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 22/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 122 lines, 5.6 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'iflow-mcp-mcp-server-perplexity' matches AI hallucination template [iflow] + [perplexity] + [mcp].
  • HIGHClaims critical enterprise brand identity ('PERPLEXITY').
  • HIGHPublisher email 'tanigami@teps.io' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 328 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 341d 16 13 ↑0.0/day
SUSPICIOUS
cursor pypi 1.0.1 Jeremy Tuloup —
Claimed homepage: https://pypi.org/project/jupyterlab-cursor-theme/
Matched naming pattern: jupyterlab-cursor-theme
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 341
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 13 lines, 808 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'jupyterlab-cursor-theme' matches AI hallucination template [jupyterlab] + [cursor] + [theme].
  • HIGHClaims critical enterprise brand identity ('CURSOR').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 331 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 342d 6 32 ↑0.0/day
SUSPICIOUS
langchain pypi 1.0.0 Surprise Dev charleslepoittevin34@gmail.com gmail.com
Claimed homepage: https://github.com/surprise-dev/sheetbase-langchain
Matched naming pattern: python-langchain-sheetbase
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 342
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 6/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 32 lines, 1.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'sheetbase-langchain' matches AI hallucination template [python] + [langchain] + [sheetbase].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'charleslepoittevin34@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 332 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
« Prev Next »
LINK COPIED TO CLIPBOARD