🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
80 342d 6 32 ↑0.0/day
SUSPICIOUS
langchain pypi 1.0.0 Surprise Dev charleslepoittevin34@gmail.com gmail.com
Package purpose: Simple HTTP client for SheetBase - Use Google Sheets as a database
Claimed homepage: https://github.com/surprise-dev/sheetbase-langchain
Matched naming pattern: python-langchain-sheetbase
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 342
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 6/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 32 lines, 1.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'sheetbase-langchain' matches AI hallucination template [python] + [langchain] + [sheetbase].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'charleslepoittevin34@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 332 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 350d 11 88 ↑0.0/day
SUSPICIOUS
polygon pypi 1.0.0 — xiaoyou.chen@mail.vnpy.com mail.vnpy.com
Package purpose: Polygon.io datafeed for VeighNa quant trading framework.
Claimed homepage: https://pypi.org/project/vnpy_polygon/
Matched naming pattern: python-polygon-vnpy
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 350
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 11/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 88 lines, 4.9 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'vnpy-polygon' matches AI hallucination template [python] + [polygon] + [vnpy].
  • HIGHClaims critical enterprise brand identity ('POLYGON').
  • HIGHPublisher email 'xiaoyou.chen@mail.vnpy.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 344 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 358d 52 59 ↑0.1/day
SUSPICIOUS
llama pypi 0.2.1 — —
Package purpose: vibe-llama-core is a reduced version of vibe-llama containing only the code for downloading documentation and templates.
Claimed homepage: https://pypi.org/project/vibe-llama-core/
Matched naming pattern: vibe-llama-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 358
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 52/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 59 lines, 2.8 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'vibe-llama-core' matches AI hallucination template [vibe] + [llama] + [core].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 333 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 372d 22 126 ↑0.1/day
SUSPICIOUS
alchemy pypi 0.1.1 Juan C. Del Monte delmontejuan92@gmail.com gmail.com
Package purpose: Components for Streamlit and Cube Alchemy
Claimed homepage: https://github.com/cube-alchemy/cube-alchemy-streamlit-components
Matched naming pattern: cube-alchemy-streamlit
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 372
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 22/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 126 lines, 5.7 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'cube-alchemy-streamlit-components' matches AI hallucination template [cube] + [alchemy] + [streamlit].
  • HIGHClaims critical enterprise brand identity ('ALCHEMY').
  • HIGHPublisher email 'delmontejuan92@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 362 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 373d 19 84 ↑0.1/day
SUSPICIOUS
llama pypi 0.4.0 — — 🪝
Package purpose: Embedded Llama-Stack server inference for Next Gen UI Agent
Claimed homepage: https://github.com/RedHat-UX/next-gen-ui-agent
Matched naming pattern: next-llama-ui
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 373
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 19/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 84 lines, 3.9 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'next-gen-ui-llama-stack-embedded' matches AI hallucination template [next] + [llama] + [ui].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 363 days ago within the 1-year AI tool proliferation window.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in next_gen_ui_llama_stack_embedded/llama_stack_inference_embedded.py:62
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in next_gen_ui_llama_stack_embedded/llama_stack_inference_embedded.py:62

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 374d 18 651 ↑0.0/day
SUSPICIOUS
google npm 5.0.7 Strapi Community — 🪝
Package purpose: Community Google Cloud Storage Provider for Strapi Upload
Claimed homepage: https://github.com/trungbkit/strapi-provider-upload-google-cloud-storage#readme
Matched naming pattern: node-google-strapi-provider-upload-google-cloud-storage
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 374
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 651 lines, 30.8 kB across 5 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@trungjs/strapi-provider-upload-google-cloud-storage' matches AI hallucination template [node] + [google] + [strapi-provider-upload-google-cloud-storage].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 348 days ago within the 1-year AI tool proliferation window.
  • MEDIUMPackage registered with suspiciously high major version (v5.0.7, major 5) despite recent registration (348 days ago, 3 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:263 (+1 more occurrence(s) elsewhere)
  • INFOSubstantial functional codebase (651 LOC across 5 file(s)).
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:263 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 376d 20 131 ↑0.1/day
SUSPICIOUS
polygon npm 0.0.5 Energy Smart Home —
Package purpose: Piecewise linear interpolation with up to 20 XY pairs; robust endpoint extrapolation.
Matched naming pattern: node-polygon-contrib
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 376
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 20/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 131 lines, 6.2 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'node-red-contrib-polygon' matches AI hallucination template [node] + [polygon] + [contrib].
  • HIGHClaims critical enterprise brand identity ('POLYGON').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 350 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 378d 24 33 ↑0.1/day
SUSPICIOUS
llama pypi 0.1.6 — 100033398@mvla.net mvla.net 🪝
Package purpose: Simple and lightweight Python wrapper for Llama AI API
Claimed homepage: https://pypi.org/project/ai-llama-module/
Matched naming pattern: ai-llama-module
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 378
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 24/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 33 lines, 979 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'ai-llama-module' matches AI hallucination template [ai] + [llama] + [module].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email '100033398@mvla.net' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 352 days ago within the 1-year AI tool proliferation window.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ai_llama_module-0.1.6/ai_llama_module/ai.py:7
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ai_llama_module-0.1.6/ai_llama_module/ai.py:7

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 385d 16 17 ↑0.0/day
SUSPICIOUS
ollama pypi 1.0.2 Jordan Miller, Bas Steins — 🪝
Package purpose: Windows support for copilot-ollama
Claimed homepage: https://pypi.org/project/copilot-ollama-windows/
Matched naming pattern: copilot-ollama-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 385
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 17 lines, 677 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'copilot-ollama-windows' matches AI hallucination template [copilot] + [ollama] + [windows].
  • HIGHClaims critical enterprise brand identity ('OLLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in copilot_ollama_windows-1.0.2/copilot_ollama_windows/start.py:18
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in copilot_ollama_windows-1.0.2/copilot_ollama_windows/start.py:18

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 389d 48 83 ↑0.1/day
SUSPICIOUS
workspace pypi 0.1.0 Robert Haschke rhaschke@techfak.uni-bielefeld.de techfak.uni-bielefeld.de 🪝
Package purpose: Extension for colcon to locate and use a top-level workspace
Claimed homepage: https://colcon.readthedocs.io
Matched naming pattern: colcon-workspace-level
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 389
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 48/month, 17/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 83 lines, 3.8 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'colcon-top-level-workspace' matches AI hallucination template [colcon] + [workspace] + [level].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'rhaschke@techfak.uni-bielefeld.de' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 364 days ago within the 1-year AI tool proliferation window.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in colcon_top_level_workspace-0.1.0/colcon_top_level_workspace/argument_parser.py:88
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in colcon_top_level_workspace-0.1.0/colcon_top_level_workspace/argument_parser.py:88

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 390d — — —
Unverified Signal
— npm latest Erick Christian — 🪝 🌐
Package purpose: Turn GitHub Copilot into OpenAI/Anthropic API compatible server. Usable with Claude Code! (Node v20+ fork)
Static code signals:
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/main.mjs:2
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/main.mjs:2
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/main.mjs:2
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/main.mjs:2

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 395d 16 20 ↑0.0/day
SUSPICIOUS
gemini pypi 0.1.3 — — 🪝
Package purpose: uvx wrapper that launches @eyycheev/gemini-mcp (Node) via npx
Claimed homepage: https://pypi.org/project/eyycheev-gemini-mcp/
Matched naming pattern: eyycheev-gemini-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 395
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 907 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'eyycheev-gemini-mcp' matches AI hallucination template [eyycheev] + [gemini] + [mcp].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in eyycheev_gemini_mcp-0.1.3/src/gemini_mcp/cli.py:23
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in eyycheev_gemini_mcp-0.1.3/src/gemini_mcp/cli.py:22
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in eyycheev_gemini_mcp-0.1.3/src/gemini_mcp/cli.py:23
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in eyycheev_gemini_mcp-0.1.3/src/gemini_mcp/cli.py:22

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 396d 8 17 ↑0.0/day
SUSPICIOUS
chroma pypi 3.343.40.2160 — mcpbind@example.com example.com
Package purpose: MCP Server Package: chroma
Claimed homepage: https://pypi.org/project/mcpbind-chroma/
Matched naming pattern: python-chroma-mcpbind
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 396
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 17 lines, 415 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mcpbind-chroma' matches AI hallucination template [python] + [chroma] + [mcpbind].
  • HIGHClaims critical enterprise brand identity ('CHROMA').
  • HIGHPublisher email 'mcpbind@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 401d 0 62 ↑0.0/day
SUSPICIOUS
google pypi 0.0.0 — —
Package purpose: Google integration providing adk utility for Davidkhala
Claimed homepage: https://pypi.org/project/davidkhala.google.adk/
Matched naming pattern: davidkhala-google-adk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 401
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 62 lines, 3.2 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'davidkhala-google-adk' matches AI hallucination template [davidkhala] + [google] + [adk].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 403d 16 85 ↑0.0/day
SUSPICIOUS
circle npm 0.0.3 — —
Package purpose: Import styles
Claimed homepage: https://github.com/knpreacher/Ripple-Light-Hover-Vue-Lib#readme
Matched naming pattern: kn-circle-light
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 403
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 85 lines, 4.9 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'kn-circle-light' matches AI hallucination template [kn] + [circle] + [light].
  • HIGHClaims critical enterprise brand identity ('CIRCLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 406d 45 107,492 ↑0.1/day
Very Risky
web3 npm 0.1.10 @Keyrxng @keyrxng — 🪝 📡
Package purpose: Pragmatic RPC tooling for EVM stacks — discover, measure, and wrap JSON-RPC providers with latency-aware selection, retries, and optional consensus helpers.
Matched naming pattern: node-web3-ez-web3-rpc
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 406
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 45/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 107492 lines, 2.7 MB across 19 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@keyrxng/ez-web3-rpc' matches AI hallucination template [node] + [web3] + [ez-web3-rpc].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'git submodule update --init --recursive'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/esm/index.js:13114
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/esm/index.js:61352
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/esm/index.js:59905
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'git submodule update --init --recursive'
  • MISSING_SOURCE_REPOSITORY_URL
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/esm/index.js:13114
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/esm/index.js:61352
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/esm/index.js:59905

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 409d 23 63 ↑0.1/day
SUSPICIOUS
vllm pypi 0.0.19 — — 🪝
Package purpose: Inference locally.
Claimed homepage: https://pypi.org/project/vllm-inference/
Matched naming pattern: python-vllm-inference
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 409
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 23/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 63 lines, 3.6 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'vllm-inference' matches AI hallucination template [python] + [vllm] + [inference].
  • HIGHClaims critical enterprise brand identity ('VLLM').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_inference-0.0.19/vllm_inference/__init__.py:5
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_inference-0.0.19/vllm_inference/__init__.py:5

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 415d 11 12 ↑0.0/day
SUSPICIOUS
langchain pypi 0.0.1 x —
Package purpose: x
Claimed homepage: https://pypi.org/project/genai-gateway-langchain/
Matched naming pattern: genai-langchain-langchain
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 415
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 11/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 12 lines, 358 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'genai-gateway-langchain' matches AI hallucination template [genai] + [langchain] + [langchain].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 421d 5 1 ↑0.0/day
SUSPICIOUS
claude npm 0.0.1 John Lindquist —
Package purpose: Work in progress: powerful Claude code agents that exponentially cut your development time.
Matched naming pattern: node-claude-god
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 421
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 74 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'claude-god' matches AI hallucination template [node] + [claude] + [god].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 427d 50 136 ↑0.1/day
SUSPICIOUS
ripple npm 0.2.2 — —
Package purpose: A lightweight, customizable React component that adds Material Design-style ripple effects to any element. Perfect for creating interactive UI components with smooth touch feedback.
Matched naming pattern: node-ripple-react-ripple
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 427
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 50/month, 12/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 136 lines, 5.2 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@bradreelee/react-ripple' matches AI hallucination template [node] + [ripple] + [react-ripple].
  • HIGHClaims critical enterprise brand identity ('RIPPLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 438d 24 70 ↑0.1/day
SUSPICIOUS
tron npm 0.37.0 — —
Package purpose: Signer for Tron Transacations generated by Rango API
Matched naming pattern: node-tron-signer-tron
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 438
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 24/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 70 lines, 3.2 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@arlert-dev/signer-tron' matches AI hallucination template [node] + [tron] + [signer-tron].
  • HIGHClaims critical enterprise brand identity ('TRON').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 444d 3,155 94,839 ↑7.1/day
Very Risky
@moontra/moonui npm 4.47.3 MoonUI Team — 🪝 🌐
Package purpose: Premium React components for MoonUI - Advanced UI library with 50+ pro components including performance, interactive, and gesture components
Claimed homepage: https://moonui.dev
Matched naming pattern: npm-@moontra/moonui-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 444
Registry downloads: 3155/month, 788/week (ACTIVE_COMMUNITY_USE)
Codebase size: 94839 lines, 3.7 MB across 419 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.cjs'
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/plugin/index.cjs:21 (+17 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/next-config-plugin.cjs:85 (+4 more occurrence(s) elsewhere)
  • HIGHSUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/dist/next-config-plugin.cjs:85 (+4 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/postinstall.cjs:10
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/chunk-6HPXUO3B.mjs:17 (+7 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/chunk-IDLCQHPR.mjs:25 (+1 more occurrence(s) elsewhere)
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.cjs'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/plugin/index.cjs:21 (+17 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/next-config-plugin.cjs:85 (+4 more occurrence(s) elsewhere)
  • SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/dist/next-config-plugin.cjs:85 (+4 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/postinstall.cjs:10
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/chunk-6HPXUO3B.mjs:17 (+7 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/chunk-IDLCQHPR.mjs:25 (+1 more occurrence(s) elsewhere)
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/postinstall.cjs, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 456d 10 20 ↑0.0/day
SUSPICIOUS
phantom pypi 0.1.0 Your Name —
Package purpose: A custom stats library
Claimed homepage: https://pypi.org/project/phantom-mystats/
Matched naming pattern: python-phantom-mystats
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 456
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 487 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'phantom-mystats' matches AI hallucination template [python] + [phantom] + [mystats].
  • HIGHClaims critical enterprise brand identity ('PHANTOM').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 477d 10 10 ↑0.0/day
SUSPICIOUS
circle npm 1.0.8 Ethan —
Package purpose: 一个兼容H5和APP的圆环进度条组件/A circular progress bar component for uni-app
Matched naming pattern: uni-circle-progress
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 477
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 373 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'uni-circle-progress' matches AI hallucination template [uni] + [circle] + [progress].
  • HIGHClaims critical enterprise brand identity ('CIRCLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 489d 7 55 ↑0.0/day
SUSPICIOUS
google pypi 0.3.0 — —
Package purpose: # Platzky Login With Google Plugin ## Overview Platzky Login With Google is a plugin that allows to login to the application using Google account. ## Installation ```sh pip install platzky-login-with-google ``` ### Usage ```json "plugins": [ { "name": "login_with_google", "config": {
Claimed homepage: https://pypi.org/project/platzky-login-with-google/
Matched naming pattern: platzky-google-with
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 489
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 55 lines, 2.8 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'platzky-login-with-google' matches AI hallucination template [platzky] + [google] + [with].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 509d 20 95 ↑0.0/day
SUSPICIOUS
google pypi 14.0.1.0.1.dev5 CreuBlanca,Odoo Community Association (OCA) support@odoo-community.org odoo-community.org
Package purpose: Integration with purchase
Claimed homepage: https://github.com/OCA/account-invoicing
Matched naming pattern: odoo14-google-account
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 509
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 20/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 95 lines, 4.2 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'odoo14-addon-account-invoice-google-document-ai-purchase' matches AI hallucination template [odoo14] + [google] + [account].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'support@odoo-community.org' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 511d 0 0 ↑0.0/day
SUSPICIOUS
google pypi 1.8.0 B2CK info@b2ck.com b2ck.com
Package purpose: Translate items with Google Translate
Claimed homepage: http://www.tryton.org/
Matched naming pattern: trytond-google-translate
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 511
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 0 files (UNKNOWN)
Automated signals flagged:
  • MEDIUMPackage name 'trytond-google-translate' matches AI hallucination template [trytond] + [google] + [translate].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'info@b2ck.com' is not affiliated with official vendor domain.
  • HIGHMETADATA_UNAVAILABLE_OR_NO_SDIST
Static code signals:
  • METADATA_UNAVAILABLE_OR_NO_SDIST

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 512d 76 12 ↑0.1/day
SUSPICIOUS
llama npm 1.7.0 Gilad S. — 🪝 📦
Package purpose: Prebuilt binary for node-llama-cpp for Linux armv7l
Claimed homepage: https://node-llama-cpp.withcat.ai
Matched naming pattern: node-llama-node-llama-cpp-linux-armv7l
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 512
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 76/month, 19/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 12 lines, 422 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@aibrow/node-llama-cpp-linux-armv7l' matches AI hallucination template [node] + [llama] + [node-llama-cpp-linux-armv7l].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHBUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bins/linux-armv7l/libllama.so' in npm tarball
Static code signals:
  • BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bins/linux-armv7l/libllama.so' in npm tarball

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 523d 9 25 ↑0.0/day
SUSPICIOUS
google npm 1.0.1 sanin-mn —
Package purpose: Easily connect your website's HTML form to a Google Form and Google Sheets.
Claimed homepage: https://github.com/sanin-mn/form-to-google#readme
Matched naming pattern: form-google-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 523
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 25 lines, 868 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'form-to-google' matches AI hallucination template [form] + [google] + [google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/index.js:22
Static code signals:
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/index.js:22

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 532d 16 37 ↑0.0/day
SUSPICIOUS
cursor pypi 0.1.9 — —
Package purpose: 프로젝트 규칙 파일을 간편하게 세팅하는 CLI
Claimed homepage: https://pypi.org/project/cursor-init/
Matched naming pattern: python-cursor-init
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 532
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 37 lines, 1.5 kB across 10 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'cursor-init' matches AI hallucination template [python] + [cursor] + [init].
  • HIGHClaims critical enterprise brand identity ('CURSOR').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 540d 0 81 ↑0.0/day
SUSPICIOUS
chroma pypi 1.4.0 Dragonscale Industries Inc. dev@dragonscale.ai dragonscale.ai
Package purpose: Rustic AI module for leveraging ChromaDB
Claimed homepage: https://pypi.org/project/rusticai-chroma/
Matched naming pattern: python-chroma-rusticai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 540
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 81 lines, 3.8 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'rusticai-chroma' matches AI hallucination template [python] + [chroma] + [rusticai].
  • HIGHClaims critical enterprise brand identity ('CHROMA').
  • HIGHPublisher email 'dev@dragonscale.ai' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 544d 35 87 ↑0.1/day
SUSPICIOUS
google npm 0.0.9 Ryan Nelsestuen —
Package purpose: Tier1 Frontend Google App
Claimed homepage: https://github.com/horizon-3-venture-studio/tier1-app-catalog
Matched naming pattern: node-google-t1-app-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 544
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 35/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 87 lines, 3.3 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@horizon3/t1-app-google' matches AI hallucination template [node] + [google] + [t1-app-google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 545d 40 87 ↑0.1/day
SUSPICIOUS
llama pypi 1.0.1 — email@email.com email.com 🪝
Package purpose: dora-llama-cpp-python
Claimed homepage: https://pypi.org/project/dora-llama-cpp-python/
Matched naming pattern: dora-llama-cpp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 545
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 40/month, 29/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 87 lines, 3.4 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'dora-llama-cpp-python' matches AI hallucination template [dora] + [llama] + [cpp].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'email@email.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in dora_llama_cpp_python-1.0.1/dora_llama_cpp_python/main.py:13
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in dora_llama_cpp_python-1.0.1/dora_llama_cpp_python/main.py:13

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 549d 0 133 ↑0.0/day
SUSPICIOUS
together pypi 0.0.3 InstaTrader — 🪝
Package purpose: Together API client
Claimed homepage: https://pypi.org/project/instra-together-client/
Matched naming pattern: instra-together-client
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 549
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 133 lines, 6.1 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'instra-together-client' matches AI hallucination template [instra] + [together] + [client].
  • HIGHClaims critical enterprise brand identity ('TOGETHER').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in instra_together_client-0.0.3/module.py:15
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in instra_together_client-0.0.3/module.py:15

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 549d 9 133 ↑0.0/day
SUSPICIOUS
together pypi 0.0.1 InstaTrader — 🪝
Package purpose: Together API client
Claimed homepage: https://pypi.org/project/instra.together/
Matched naming pattern: python-together-instra
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 549
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 133 lines, 6.2 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'instra-together' matches AI hallucination template [python] + [together] + [instra].
  • HIGHClaims critical enterprise brand identity ('TOGETHER').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in instra_together-0.0.1/module.py:15
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in instra_together-0.0.1/module.py:15

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 551d 9 20 ↑0.0/day
SUSPICIOUS
azure pypi 0.1.0 Jochen Schultz js@intelligent-intern.com intelligent-intern.com
Package purpose: Azure integration providing azure utility for Corex
Claimed homepage: https://pypi.org/project/corex-storage-azure-blob/
Matched naming pattern: corex-azure-azure
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 551
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 681 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'corex-storage-azure-blob' matches AI hallucination template [corex] + [azure] + [azure].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 551d 9 20 ↑0.0/day
SUSPICIOUS
auth0 pypi 0.1.0 Jochen Schultz js@intelligent-intern.com intelligent-intern.com
Package purpose: Auth0 integration providing auth0 utility for Corex
Claimed homepage: https://pypi.org/project/corex-security-auth0/
Matched naming pattern: corex-auth0-auth0
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 551
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 667 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'corex-security-auth0' matches AI hallucination template [corex] + [auth0] + [auth0].
  • HIGHClaims critical enterprise brand identity ('AUTH0').
  • HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 552d 0 20 ↑0.0/day
SUSPICIOUS
google pypi 0.1.0 Jochen Schultz js@intelligent-intern.com intelligent-intern.com
Package purpose: Google integration providing google utility for Corex
Claimed homepage: https://pypi.org/project/corex-events-google-pubsub/
Matched naming pattern: corex-google-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 552
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 687 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'corex-events-google-pubsub' matches AI hallucination template [corex] + [google] + [google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 552d 19 20 ↑0.0/day
SUSPICIOUS
openai pypi 0.1.0 Jochen Schultz js@intelligent-intern.com intelligent-intern.com
Package purpose: Openai integration providing nlp utility for Corex
Claimed homepage: https://pypi.org/project/corex-ai-nlp-openai/
Matched naming pattern: corex-openai-nlp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 552
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 19/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 659 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'corex-ai-nlp-openai' matches AI hallucination template [corex] + [openai] + [nlp].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 552d 13 20 ↑0.0/day
SUSPICIOUS
huggingface pypi 0.1.0 Jochen Schultz js@intelligent-intern.com intelligent-intern.com
Package purpose: Huggingface integration providing nlp utility for Corex
Claimed homepage: https://pypi.org/project/corex-ai-nlp-huggingface/
Matched naming pattern: corex-huggingface-nlp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 552
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 13/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 679 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'corex-ai-nlp-huggingface' matches AI hallucination template [corex] + [huggingface] + [nlp].
  • HIGHClaims critical enterprise brand identity ('HUGGINGFACE').
  • HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 552d 10 20 ↑0.0/day
SUSPICIOUS
llama pypi 0.1.0 Jochen Schultz js@intelligent-intern.com intelligent-intern.com
Package purpose: Llama integration providing nlp utility for Corex
Claimed homepage: https://pypi.org/project/corex-ai-nlp-llama/
Matched naming pattern: corex-llama-nlp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 552
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 655 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'corex-ai-nlp-llama' matches AI hallucination template [corex] + [llama] + [nlp].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 552d 0 20 ↑0.0/day
SUSPICIOUS
mistral pypi 0.1.0 Jochen Schultz js@intelligent-intern.com intelligent-intern.com
Package purpose: Mistral integration providing nlp utility for Corex
Claimed homepage: https://pypi.org/project/corex-ai-nlp-mistral/
Matched naming pattern: corex-mistral-nlp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 552
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 663 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'corex-ai-nlp-mistral' matches AI hallucination template [corex] + [mistral] + [nlp].
  • HIGHClaims critical enterprise brand identity ('MISTRAL').
  • HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 552d 12 20 ↑0.0/day
SUSPICIOUS
cohere pypi 0.1.0 Jochen Schultz js@intelligent-intern.com intelligent-intern.com
Package purpose: Cohere integration providing nlp utility for Corex
Claimed homepage: https://pypi.org/project/corex-ai-nlp-cohere/
Matched naming pattern: corex-cohere-nlp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 552
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 659 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'corex-ai-nlp-cohere' matches AI hallucination template [corex] + [cohere] + [nlp].
  • HIGHClaims critical enterprise brand identity ('COHERE').
  • HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 552d 9 20 ↑0.0/day
SUSPICIOUS
weaviate pypi 0.1.0 Jochen Schultz js@intelligent-intern.com intelligent-intern.com
Package purpose: Weaviate integration providing embeddings utility for Corex
Claimed homepage: https://pypi.org/project/corex-ai-embeddings-weaviate/
Matched naming pattern: corex-weaviate-embeddings
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 552
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 709 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'corex-ai-embeddings-weaviate' matches AI hallucination template [corex] + [weaviate] + [embeddings].
  • HIGHClaims critical enterprise brand identity ('WEAVIATE').
  • HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 552d 12 20 ↑0.0/day
SUSPICIOUS
llama pypi 0.1.0 Jochen Schultz js@intelligent-intern.com intelligent-intern.com
Package purpose: Llama integration providing retrieval utility for Corex
Claimed homepage: https://pypi.org/project/corex-ai-retrieval-llama-index/
Matched naming pattern: corex-llama-retrieval
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 552
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 715 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'corex-ai-retrieval-llama-index' matches AI hallucination template [corex] + [llama] + [retrieval].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 552d 7 20 ↑0.0/day
SUSPICIOUS
qdrant pypi 0.1.0 Jochen Schultz js@intelligent-intern.com intelligent-intern.com
Package purpose: Qdrant integration providing retrieval utility for Corex
Claimed homepage: https://pypi.org/project/corex-ai-retrieval-qdrant/
Matched naming pattern: corex-qdrant-retrieval
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 552
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 695 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'corex-ai-retrieval-qdrant' matches AI hallucination template [corex] + [qdrant] + [retrieval].
  • HIGHClaims critical enterprise brand identity ('QDRANT').
  • HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 552d 0 20 ↑0.0/day
SUSPICIOUS
pinecone pypi 0.1.0 Jochen Schultz js@intelligent-intern.com intelligent-intern.com
Package purpose: Pinecone integration providing retrieval utility for Corex
Claimed homepage: https://pypi.org/project/corex-ai-retrieval-pinecone/
Matched naming pattern: corex-pinecone-retrieval
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 552
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 703 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'corex-ai-retrieval-pinecone' matches AI hallucination template [corex] + [pinecone] + [retrieval].
  • HIGHClaims critical enterprise brand identity ('PINECONE').
  • HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 552d 16 20 ↑0.0/day
SUSPICIOUS
vllm pypi 0.1.0 Jochen Schultz js@intelligent-intern.com intelligent-intern.com
Package purpose: Vllm integration providing runtimes utility for Corex
Claimed homepage: https://pypi.org/project/corex-ai-runtimes-vllm/
Matched naming pattern: corex-vllm-runtimes
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 552
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 681 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'corex-ai-runtimes-vllm' matches AI hallucination template [corex] + [vllm] + [runtimes].
  • HIGHClaims critical enterprise brand identity ('VLLM').
  • HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 552d 10 20 ↑0.0/day
SUSPICIOUS
ollama pypi 0.1.0 Jochen Schultz js@intelligent-intern.com intelligent-intern.com
Package purpose: Ollama integration providing runtimes utility for Corex
Claimed homepage: https://pypi.org/project/corex-ai-runtimes-ollama/
Matched naming pattern: corex-ollama-runtimes
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 552
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 689 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'corex-ai-runtimes-ollama' matches AI hallucination template [corex] + [ollama] + [runtimes].
  • HIGHClaims critical enterprise brand identity ('OLLAMA').
  • HIGHPublisher email 'js@intelligent-intern.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 553d 45 11 ↑0.1/day
SUSPICIOUS
ethereum pypi 0.4.2 — —
Package purpose: Add your description here
Claimed homepage: https://pypi.org/project/ethereum-mcp/
Matched naming pattern: python-ethereum-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 553
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 45/month, 29/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 454 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'ethereum-mcp' matches AI hallucination template [python] + [ethereum] + [mcp].
  • HIGHClaims critical enterprise brand identity ('ETHEREUM').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
« Prev Next »
LINK COPIED TO CLIPBOARD