🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
80 1154d 10 109 ↑0.0/day
SUSPICIOUS
circle npm 0.0.92 elf-framework —
Package purpose: Circle integration providing progress-circle utility for Node
Matched naming pattern: node-circle-progress-circle
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1154
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 109 lines, 4.6 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@react-elf/progress-circle' matches AI hallucination template [node] + [circle] + [progress-circle].
  • HIGHClaims critical enterprise brand identity ('CIRCLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1128 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1172d 5 148 ↑0.0/day
SUSPICIOUS
google npm 1.0.0 — —
Package purpose: Google integration providing xcharts utility for Node
Matched naming pattern: node-google-xcharts
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1172
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 148 lines, 62.5 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'xcharts-google' matches AI hallucination template [node] + [google] + [xcharts].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1146 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1192d 0 0 ↑0.0/day
SUSPICIOUS
eth pypi 0.1.3 Vitalii Encod —
Package purpose: Eth integration providing encoder utility for Python
Claimed homepage: https://pypi.org/project/eth-encoder/
Matched naming pattern: python-eth-encoder
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1192
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 0 files (UNKNOWN)
Automated signals flagged:
  • MEDIUMPackage name 'eth-encoder' matches AI hallucination template [python] + [eth] + [encoder].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1181 days ago (predates modern AI hallucination waves).
  • HIGHMETADATA_UNAVAILABLE_OR_NO_SDIST
Static code signals:
  • METADATA_UNAVAILABLE_OR_NO_SDIST

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 1243d 6 9 ↑0.0/day
SUSPICIOUS
google npm 1.0.0 kamal —
Package purpose: you will get google reviews
Matched naming pattern: demo-google-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1243
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 9 lines, 233 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'demo-get-google-reviews' matches AI hallucination template [demo] + [google] + [google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1217 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1284d 5 28 ↑0.0/day
SUSPICIOUS
together npm 1.0.0 danielmitchell99ij —
Package purpose: Download vbhbthe
Matched naming pattern: availab-together-alb
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1284
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 28 lines, 1.1 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'availab-le-alb-um-zip-104733-two-parts-together-i62ds-bhbthe' matches AI hallucination template [availab] + [together] + [alb].
  • HIGHClaims critical enterprise brand identity ('TOGETHER').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1258 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1290d 5 54 ↑0.0/day
SUSPICIOUS
amazon npm 2.3.5 jamesmartinez4935 —
Package purpose: New Updated tool v-mlsvw8
Matched naming pattern: without-amazon-amazon
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1290
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 54 lines, 2.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'without-verify-amazon-codes-mlsvw8' matches AI hallucination template [without] + [amazon] + [amazon].
  • HIGHClaims critical enterprise brand identity ('AMAZON').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1264 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1300d 7 4 ↑0.0/day
SUSPICIOUS
web3 npm 0.0.8 — — 🪝
Package purpose: web3-link is a bridge linking the blockchain to any.
Matched naming pattern: node-web3-link
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1300
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 69.0 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'web3-link' matches AI hallucination template [node] + [web3] + [link].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 1274 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/index.js:2
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/index.js:2

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1322d 10 7 ↑0.0/day
SUSPICIOUS
workspace npm 1.0.0 — —
Package purpose: Workspace integration providing b utility for Node
Matched naming pattern: node-workspace-b
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1322
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 163 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@npm-workspace-test/b' matches AI hallucination template [node] + [workspace] + [b].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1296 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1329d 22 124 ↑0.0/day
SUSPICIOUS
eth pypi 0.1.3 — gtrent@gmail.com gmail.com 🪝
Package purpose: Predict ETH challenges
Claimed homepage: https://pypi.org/project/predict-eth/
Matched naming pattern: python-eth-predict
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1329
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 22/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 124 lines, 5.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'predict-eth' matches AI hallucination template [python] + [eth] + [predict].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • HIGHPublisher email 'gtrent@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1319 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in predict_eth-0.1.3/predict_eth/helpers.py:104
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in predict_eth-0.1.3/predict_eth/helpers.py:30
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in predict_eth-0.1.3/predict_eth/helpers.py:104
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in predict_eth-0.1.3/predict_eth/helpers.py:30

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 1337d 17 82 ↑0.0/day
SUSPICIOUS
binance pypi 1.0.0.dev0 pyted pyted@outlook.com outlook.com 🪝
Package purpose: start project
Claimed homepage: https://github.com/pyted/binance_um
Matched naming pattern: python-binance-um
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1337
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 17/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 82 lines, 3.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'binance-um' matches AI hallucination template [python] + [binance] + [um].
  • HIGHClaims critical enterprise brand identity ('BINANCE').
  • HIGHPublisher email 'pyted@outlook.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1326 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in binance_um-1.0.0.dev0/setup.py:75
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in binance_um-1.0.0.dev0/setup.py:75

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 1337d 28 82 ↑0.0/day
SUSPICIOUS
binance pypi 1.0.0.dev0 pyted pyted@outlook.com outlook.com 🪝
Package purpose: start project
Claimed homepage: https://github.com/pyted/binance_spot
Matched naming pattern: python-binance-spot
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1337
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 28/month, 13/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 82 lines, 3.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'binance-spot' matches AI hallucination template [python] + [binance] + [spot].
  • HIGHClaims critical enterprise brand identity ('BINANCE').
  • HIGHPublisher email 'pyted@outlook.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1326 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in binance_spot-1.0.0.dev0/setup.py:75
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in binance_spot-1.0.0.dev0/setup.py:75

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 1337d 18 82 ↑0.0/day
SUSPICIOUS
binance pypi 1.0.0.dev0 pyted pyted@outlook.com outlook.com 🪝
Package purpose: start project
Claimed homepage: https://github.com/pyted/binance_eo
Matched naming pattern: python-binance-eo
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1337
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 18/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 82 lines, 3.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'binance-eo' matches AI hallucination template [python] + [binance] + [eo].
  • HIGHClaims critical enterprise brand identity ('BINANCE').
  • HIGHPublisher email 'pyted@outlook.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1326 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in binance_eo-1.0.0.dev0/setup.py:75
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in binance_eo-1.0.0.dev0/setup.py:75

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 1337d 4 82 ↑0.0/day
SUSPICIOUS
okx pypi 1.0.0.dev0 pyted pyted@outlook.com outlook.com 🪝
Package purpose: start project
Claimed homepage: https://github.com/pyted/okx_swap
Matched naming pattern: python-okx-swap
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1337
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 4/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 82 lines, 3.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'okx-swap' matches AI hallucination template [python] + [okx] + [swap].
  • HIGHClaims critical enterprise brand identity ('OKX').
  • HIGHPublisher email 'pyted@outlook.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1326 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in okx_swap-1.0.0.dev0/setup.py:75
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in okx_swap-1.0.0.dev0/setup.py:75

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 1337d 5 82 ↑0.0/day
SUSPICIOUS
okx pypi 1.0.0.dev0 pyted pyted@outlook.com outlook.com 🪝
Package purpose: start project
Claimed homepage: https://github.com/pyted/okx_spot
Matched naming pattern: python-okx-spot
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1337
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 82 lines, 3.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'okx-spot' matches AI hallucination template [python] + [okx] + [spot].
  • HIGHClaims critical enterprise brand identity ('OKX').
  • HIGHPublisher email 'pyted@outlook.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1325 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in okx_spot-1.0.0.dev0/setup.py:75
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in okx_spot-1.0.0.dev0/setup.py:75

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 1337d 3 82 ↑0.0/day
SUSPICIOUS
okx pypi 1.0.0.dev0 pyted pyted@outlook.com outlook.com 🪝
Package purpose: start project
Claimed homepage: https://github.com/pyted/okx_option
Matched naming pattern: python-okx-option
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1337
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 3/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 82 lines, 3.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'okx-option' matches AI hallucination template [python] + [okx] + [option].
  • HIGHClaims critical enterprise brand identity ('OKX').
  • HIGHPublisher email 'pyted@outlook.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1326 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in okx_option-1.0.0.dev0/setup.py:75
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in okx_option-1.0.0.dev0/setup.py:75

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 1337d 0 82 ↑0.0/day
SUSPICIOUS
okx pypi 1.0.0.dev0 pyted pyted@outlook.com outlook.com 🪝
Package purpose: start project
Claimed homepage: https://github.com/pyted/okx_margin
Matched naming pattern: python-okx-margin
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1337
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 82 lines, 3.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'okx-margin' matches AI hallucination template [python] + [okx] + [margin].
  • HIGHClaims critical enterprise brand identity ('OKX').
  • HIGHPublisher email 'pyted@outlook.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1325 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in okx_margin-1.0.0.dev0/setup.py:75
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in okx_margin-1.0.0.dev0/setup.py:75

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 1337d 6 82 ↑0.0/day
SUSPICIOUS
okx pypi 1.0.0.dev0 pyted pyted@outlook.com outlook.com 🪝
Package purpose: start project
Claimed homepage: https://github.com/pyted/okx_futures
Matched naming pattern: python-okx-futures
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1337
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 82 lines, 3.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'okx-futures' matches AI hallucination template [python] + [okx] + [futures].
  • HIGHClaims critical enterprise brand identity ('OKX').
  • HIGHPublisher email 'pyted@outlook.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1326 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in okx_futures-1.0.0.dev0/setup.py:75
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in okx_futures-1.0.0.dev0/setup.py:75

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 1382d 14 149 ↑0.0/day
SUSPICIOUS
google npm 0.3.1 — —
Package purpose: Google integration providing drive utility for Anatomic
Matched naming pattern: anatomic-google-drive
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1382
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 149 lines, 4.5 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'anatomic-google-drive' matches AI hallucination template [anatomic] + [google] + [drive].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1356 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1395d 41 71 ↑0.0/day
SUSPICIOUS
walletconnect npm 0.3.0 — —
Package purpose: ## Background
Matched naming pattern: node-walletconnect-web3modal-walletconnect-v2
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1395
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 41/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 71 lines, 6.3 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@tokenscript/web3modal-walletconnect-v2' matches AI hallucination template [node] + [walletconnect] + [web3modal-walletconnect-v2].
  • HIGHClaims critical enterprise brand identity ('WALLETCONNECT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1369 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1442d 4 85 ↑0.0/day
SUSPICIOUS
okx pypi 1.0.0.dev1 pyted pyted@outlook.com outlook.com 🪝
Package purpose: trader_okx
Claimed homepage: https://github.com/pyted/trader_okx
Matched naming pattern: python-okx-trader
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1442
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 4/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 85 lines, 3.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'trader-okx' matches AI hallucination template [python] + [okx] + [trader].
  • HIGHClaims critical enterprise brand identity ('OKX').
  • HIGHPublisher email 'pyted@outlook.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1431 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in trader_okx-1.0.0.dev1/setup.py:71
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in trader_okx-1.0.0.dev1/setup.py:71

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 1442d 0 85 ↑0.0/day
SUSPICIOUS
okx pypi 1.0.0.dev1 pyted pyted@outlook.com outlook.com 🪝
Package purpose: finance_okx
Claimed homepage: https://github.com/pyted/finance_okx
Matched naming pattern: python-okx-finance
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1442
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 85 lines, 3.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'finance-okx' matches AI hallucination template [python] + [okx] + [finance].
  • HIGHClaims critical enterprise brand identity ('OKX').
  • HIGHPublisher email 'pyted@outlook.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1431 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in finance_okx-1.0.0.dev1/setup.py:71
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in finance_okx-1.0.0.dev1/setup.py:71

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 1442d 0 85 ↑0.0/day
SUSPICIOUS
binance pypi 1.0.0.dev1 pyted pyted@outlook.com outlook.com 🪝
Package purpose: trader_binance
Claimed homepage: https://github.com/pyted/trader_binance
Matched naming pattern: python-binance-trader
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1442
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 85 lines, 3.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'trader-binance' matches AI hallucination template [python] + [binance] + [trader].
  • HIGHClaims critical enterprise brand identity ('BINANCE').
  • HIGHPublisher email 'pyted@outlook.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1431 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in trader_binance-1.0.0.dev1/setup.py:71
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in trader_binance-1.0.0.dev1/setup.py:71

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 1442d 13 81 ↑0.0/day
SUSPICIOUS
binance pypi 1.0.0.dev1 pyted pyted@outlook.com outlook.com 🪝
Package purpose: finance_binance
Claimed homepage: https://github.com/pyted/finance_binance
Matched naming pattern: python-binance-finance
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1442
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 13/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 81 lines, 3.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'finance-binance' matches AI hallucination template [python] + [binance] + [finance].
  • HIGHClaims critical enterprise brand identity ('BINANCE').
  • HIGHPublisher email 'pyted@outlook.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1431 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in finance_binance-1.0.0.dev1/setup.py:67
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in finance_binance-1.0.0.dev1/setup.py:67

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 1474d — — —
Unverified Signal
— npm latest Applitools Team — 🪝
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/nlp-service.js:78
  • SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/dist/nlp-service.js:78
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/sdk-log-streaming.js:17 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1480d 13 41 ↑0.0/day
SUSPICIOUS
google pypi 0.0.3 Jean Maximilien Cadic git@cadic.jp cadic.jp 🪝
Package purpose: Google DNS
Claimed homepage: https://github.com/JeanMaximilienCadic/ntt_google_dns
Matched naming pattern: python-google-dns
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1480
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 13/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 41 lines, 1.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'google-dns' matches AI hallucination template [python] + [google] + [dns].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'git@cadic.jp' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1468 days ago (predates modern AI hallucination waves).
  • HIGHANTI_ANALYSIS_EVASION: 'Extended Scanner Timeout Stall' found in google_dns/__main__.py:42
Static code signals:
  • ANTI_ANALYSIS_EVASION: 'Extended Scanner Timeout Stall' found in google_dns/__main__.py:42

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 1483d 5 7 ↑0.0/day
SUSPICIOUS
infura npm 1.0.1 — —
Package purpose: Infura integration providing test utility for Node
Matched naming pattern: node-infura-test
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1483
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 298 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'infura-test' matches AI hallucination template [node] + [infura] + [test].
  • HIGHClaims critical enterprise brand identity ('INFURA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1457 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1508d — — —
Unverified Signal
— npm latest zhaoyh — 🪝 🌐
Package purpose: fmui移动端组件
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/lib/poppage/check.js:254 (+7 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/lib/signature/draw.js:225
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/lib/form/form.js:1905 (+7 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/db/variables.js:7

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1556d 35 69 ↑0.0/day
SUSPICIOUS
web3 npm 2.0.0 — —
Package purpose: Web3 integration providing checker utility for Node
Matched naming pattern: node-web3-checker
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1556
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 35/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 69 lines, 2.5 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'web3-checker' matches AI hallucination template [node] + [web3] + [checker].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1530 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1567d 20 11 ↑0.0/day
SUSPICIOUS
uniswap npm 1.4.8 Uniswap —
Package purpose: Uniswap integration providing v2 utility for Node
Matched naming pattern: node-uniswap-v2
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1567
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 20/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 457 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'uniswap-v2' matches AI hallucination template [node] + [uniswap] + [v2].
  • HIGHClaims critical enterprise brand identity ('UNISWAP').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1541 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1578d 26 31 ↑0.0/day
SUSPICIOUS
workspace npm 1.0.10 Xaoni —
Package purpose: Xaoni Workspace
Matched naming pattern: node-workspace-xaoni
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1578
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 26/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 31 lines, 900 Bytes across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'xaoni-workspace' matches AI hallucination template [node] + [workspace] + [xaoni].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1552 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1591d 46 106 ↑0.0/day
SUSPICIOUS
sol npm 1.2.0 — —
Package purpose: Gauntlet Serum Multisig
Matched naming pattern: node-sol-gauntlet-serum-multisig
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1591
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 46/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 106 lines, 4.3 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@chainlink-sol-fork/gauntlet-serum-multisig' matches AI hallucination template [node] + [sol] + [gauntlet-serum-multisig].
  • HIGHClaims critical enterprise brand identity ('SOL').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1565 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1622d 2 1 ↑0.0/day
SUSPICIOUS
web3 npm 1.0.2 — —
Package purpose: Web3 integration providing wrapper utility for Node
Matched naming pattern: node-web3-wrapper
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1622
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 2/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 15 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'web3-wrapper' matches AI hallucination template [node] + [web3] + [wrapper].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1597 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1696d 44 23 ↑0.0/day
SUSPICIOUS
circle npm 6.0.1 brccq —
Package purpose: echarts 旭日图 sunburst 圆形菜单
Matched naming pattern: sunburst-circle-menu
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1696
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 44/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 23 lines, 627 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'sunburst-circle-menu' matches AI hallucination template [sunburst] + [circle] + [menu].
  • HIGHClaims critical enterprise brand identity ('CIRCLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1670 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1713d 9 64 ↑0.0/day
SUSPICIOUS
sol npm 1.2.0 James Prestwich — 🪝
Package purpose: Nomad contracts
Matched naming pattern: node-sol-nomad-core-sol
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1713
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 64 lines, 1.7 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@nomad-xyz/nomad-core-sol' matches AI hallucination template [node] + [sol] + [nomad-core-sol].
  • HIGHClaims critical enterprise brand identity ('SOL').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1687 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/hardhat.config.ts:12
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/hardhat.config.ts:12

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 1727d 10 5 ↑0.0/day
SUSPICIOUS
opensea npm 1.0.0 yunxiaoyao —
Package purpose: Opensea integration providing contract utility for Node
Matched naming pattern: node-opensea-contract
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1727
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 118 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'opensea-contract' matches AI hallucination template [node] + [opensea] + [contract].
  • HIGHClaims critical enterprise brand identity ('OPENSEA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1701 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
80 4453d — — —
Very Risky
— npm latest Rui Marinho — 🪝 🌐
Package purpose: The up-to-date and reliable Google's libphonenumber package for node.js.
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/libphonenumber.js:38
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/libphonenumber.js:41
  • SOURCE_CODE_DYNAMIC_CODE_LOADER: execution primitive combined with decode/network/obfuscation call in package/dist/libphonenumber.js

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
77 28d 1,655 109 ↑59.1/day
Very Risky
svipall npm 1.0.6 ilien code@ilien.dev ilien.dev 🪝 🌐
Package purpose: Local-first web scraping and captcha MCP server for AI agents. Downloads the release build for your platform.
Claimed homepage: https://github.com/ilien-dev/svipall
Matched naming pattern: npm-svipall-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 28
Registry downloads: 1655/month, 413/week (ACTIVE_COMMUNITY_USE)
Codebase size: 109 lines, 5.4 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (19 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:73 (+2 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:28
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets
  • INFOActive community usage with 1,655 monthly downloads.
  • INFOPackage affiliated with trusted vendor 'ilien.dev' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (105 -> 52) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:73 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:28
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
77 32d 1,219 117 ↑38.1/day
Very Risky
xavier npm 0.2.3 — — 🪝 🌐
Package purpose: Agent candidat Cerebro (Xavier) — installe le binaire natif correspondant à votre plateforme.
Claimed homepage: https://github.com/CODA-SCHOOL-FRANCE/cerebro#readme
Matched naming pattern: node-xavier-agent
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 32
Registry downloads: 1219/month, 304/week (ACTIVE_COMMUNITY_USE)
Codebase size: 117 lines, 5.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (30 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/postinstall.js:35
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.js:77
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/xavier.js:10
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/postinstall.js, which makes network calls and executes/decodes/reads secrets
  • INFOActive community usage with 1,219 monthly downloads.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/postinstall.js:35
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.js:77
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/xavier.js:10
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/postinstall.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
77 33d 1,946 3,223 ↑59.0/day
Very Risky
onepatch npm latest — — 🪝 🌐 🗄️
Package purpose: OnePatch CLI: query your telemetry, chats, and incidents from a terminal or a coding agent
Claimed homepage: https://onepatch.dev
Matched naming pattern: node-onepatch-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 33
Registry downloads: 1946/month, 486/week (ACTIVE_COMMUNITY_USE)
Codebase size: 3223 lines, 127.8 kB across 21 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (22 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node bin/onepatch.cjs --postinstall'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/onepatch.cjs:110 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/bin/onepatch.cjs:81 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/onepatch.cjs:20 (+7 more occurrence(s) elsewhere)
  • HIGHCREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/src/install.ts:121 (+1 more occurrence(s) elsewhere)
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/bin/onepatch.cjs, which makes network calls and executes/decodes/reads secrets
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node bin/onepatch.cjs --postinstall'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/onepatch.cjs:110 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/bin/onepatch.cjs:81 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/onepatch.cjs:20 (+7 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/src/install.ts:121 (+1 more occurrence(s) elsewhere)
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/bin/onepatch.cjs, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
77 35d 3,703 94 ↑105.8/day
Very Risky
f npm 1.1.5 — — 🪝 🌐
Package purpose: FUCK - a terminal-native offensive security agent. Single file, zero dependencies. Windows/Linux/macOS.
Claimed homepage: https://github.com/zxzhaojunyao/fuck#readme
Matched naming pattern: f-f-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 35
Registry downloads: 3703/month, 925/week (ACTIVE_COMMUNITY_USE)
Codebase size: 94 lines, 4.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (31 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node bin/install.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/install.js:69
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/bin/install.js:58
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/install.js:10
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/bin/install.js, which makes network calls and executes/decodes/reads secrets
  • INFOActive community usage with 3,703 monthly downloads.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node bin/install.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/install.js:69
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/bin/install.js:58
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/install.js:10
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/bin/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
77 37d 2,484 305 ↑67.1/day
Very Risky
@layers/cli npm 2.1.18 — — 🪝 🌐
Package purpose: Layers CLI: connect a repo to the Layers Growth MCP from the terminal.
Claimed homepage: https://layers.com
Matched naming pattern: node-@layers/cli-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 37
Registry downloads: 2484/month, 621/week (ACTIVE_COMMUNITY_USE)
Codebase size: 305 lines, 12.4 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (35 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:4
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:43 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/run.js:1
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets
  • INFOActive community usage with 2,484 monthly downloads.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:4
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:43 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/run.js:1
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
77 43d 4,433 1,758 ↑103.1/day
Very Risky
@tera npm 0.2.26 — — 🪝 🌐
Matched naming pattern: npm-@tera-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 43
Registry downloads: 4433/month, 1108/week (ACTIVE_COMMUNITY_USE)
Codebase size: 1758 lines, 71.6 kB across 12 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (32 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/install.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/install.js:286 (+3 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/install.js:60 (+7 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/build.mjs:84
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/install.js, which makes network calls and executes/decodes/reads secrets
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/install.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/install.js:286 (+3 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/install.js:60 (+7 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/build.mjs:84
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
77 48d 2,590 82 ↑54.0/day
Very Risky
@hodstack/hod npm 0.0.1-edge.0 Nuno Maduro enunomaduro@gmail.com gmail.com 🪝 🌐
Package purpose: Run a Hodstack skill with a coding agent from your terminal.
Claimed homepage: https://github.com/hodstack/hodstack
Matched naming pattern: npm-@hodstack/hod-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 48
Registry downloads: 2590/month, 647/week (ACTIVE_COMMUNITY_USE)
Codebase size: 82 lines, 3.0 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (38 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/hod.js:14 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:33
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:8
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets
  • INFOActive community usage with 2,590 monthly downloads.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/hod.js:14 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:33
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:8
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
77 48d 2,605 82 ↑54.3/day
Very Risky
@hodstack/cli npm 0.0.1-edge.0 Nuno Maduro enunomaduro@gmail.com gmail.com 🪝 🌐
Package purpose: Run a Hodstack skill with a coding agent from your terminal.
Claimed homepage: https://github.com/hodstack/hodstack
Matched naming pattern: npm-@hodstack/cli-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 48
Registry downloads: 2605/month, 651/week (ACTIVE_COMMUNITY_USE)
Codebase size: 82 lines, 3.0 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (38 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/hod.js:14 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:33
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:8
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets
  • INFOActive community usage with 2,605 monthly downloads.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/hod.js:14 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:33
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:8
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
77 48d 2,482 82 ↑51.7/day
Very Risky
hodstack npm 0.0.1-edge.0 Nuno Maduro enunomaduro@gmail.com gmail.com 🪝 🌐
Package purpose: Run a Hodstack skill with a coding agent from your terminal.
Claimed homepage: https://github.com/hodstack/hodstack
Matched naming pattern: npm-hodstack-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 48
Registry downloads: 2482/month, 620/week (ACTIVE_COMMUNITY_USE)
Codebase size: 82 lines, 3.0 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (38 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/hod.js:14 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:33
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:8
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets
  • INFOActive community usage with 2,482 monthly downloads.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/hod.js:14 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:33
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:8
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
77 49d 182 8,473 ↑3.7/day
Very Risky
tera npm 2.5.0 Tera Pilot Contributors — 🪝 🗄️
Package purpose: Tera Pilot — TUI-first, local-first coding agent with multi-provider support, Web UI, and a controlled backend
Claimed homepage: https://github.com/ilyaosovskoi/tera-pilot#readme
Matched naming pattern: npm-tera-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 49
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 182/month, 45/week (MODERATE_USAGE)
Codebase size: 8473 lines, 483.9 kB across 10 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (42 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • HIGHLIFECYCLE_SCRIPT: 'preuninstall' -> 'node scripts/preuninstall.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/_resolve-python.js:16 (+6 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/_resolve-python.js:34 (+2 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/_resolve-python.js:19 (+6 more occurrence(s) elsewhere)
  • HIGHCREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in package/tera_pilot/web/app.js:3113
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • LIFECYCLE_SCRIPT: 'preuninstall' -> 'node scripts/preuninstall.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/_resolve-python.js:16 (+6 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/_resolve-python.js:34 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/_resolve-python.js:19 (+6 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in package/tera_pilot/web/app.js:3113
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/tera_pilot/web/app.js:805 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
77 54d 6,079 46,101 ↑112.6/day
Very Risky
larkin npm 0.5.9 — — 🪝 🌐
Claimed homepage: https://github.com/eddiearc/larkin#readme
Matched naming pattern: npm-larkin-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 54
Registry downloads: 6079/month, 1519/week (ACTIVE_COMMUNITY_USE)
Codebase size: 46101 lines, 2.6 MB across 155 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (43 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/npm/install-binary.mjs'
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/agent/agent-transport.cjs:31 (+55 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/platform/config.cjs:764 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/feishu/document-comment.cjs:67 (+4 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/runtime/pi-tmux.bundle.js:82 (+13 more occurrence(s) elsewhere)
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/npm/install-binary.mjs, which makes network calls and executes/decodes/reads secrets
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/npm/install-binary.mjs'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/agent/agent-transport.cjs:31 (+55 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/platform/config.cjs:764 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/feishu/document-comment.cjs:67 (+4 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/runtime/pi-tmux.bundle.js:82 (+13 more occurrence(s) elsewhere)
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/npm/install-binary.mjs, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
77 54d 1,278 716 ↑23.7/day
Very Risky
claude npm 0.1.7 — — 🪝
Package purpose: Scheduled, unattended Claude Code CLI jobs. Runs on your Claude subscription via the local CLI — no ANTHROPIC_API_KEY.
Claimed homepage: https://github.com/vinhnguyenthanhdn/claude-jobs#readme
Matched naming pattern: node-claude-jobs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 54
Registry downloads: 1278/month, 319/week (ACTIVE_COMMUNITY_USE)
Codebase size: 716 lines, 27.1 kB across 7 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'claude-jobs' matches AI hallucination template [node] + [claude] + [jobs].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (52 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/commands.js:33 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/commands.js:117 (+2 more occurrence(s) elsewhere)
  • HIGHSYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/src/schedulers.js:83
  • CRITICALSOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/src/schedulers.js
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/commands.js:33 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/commands.js:117 (+2 more occurrence(s) elsewhere)
  • SYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in package/src/schedulers.js:83
  • SOURCE_CODE_PERSISTENT_BACKDOOR: persistence mechanism combined with execution/network in package/src/schedulers.js

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
77 55d 2,572 542 ↑46.8/day
Very Risky
spynel npm 0.12.13 — — 🪝 🌐
Package purpose: A non-AI orchestration layer connecting one human to many coding agents
Claimed homepage: https://github.com/agent0ai/spynel#readme
Matched naming pattern: npm-spynel-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 55
Registry downloads: 2572/month, 643/week (ACTIVE_COMMUNITY_USE)
Codebase size: 542 lines, 23.9 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (52 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node npm/install.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/npm/install.js:7 (+2 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/npm/install.js:94 (+2 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/npm/install.js:5 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/npm/install.js:126 (+2 more occurrence(s) elsewhere)
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/npm/install.js, which makes network calls and executes/decodes/reads secrets
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node npm/install.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/npm/install.js:7 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/npm/install.js:94 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/npm/install.js:5 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/npm/install.js:126 (+2 more occurrence(s) elsewhere)
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/npm/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
77 84d 9,376 191 ↑111.6/day
Very Risky
@paulnsorensen/hallouminate npm 0.0.0-experimental.206.1 — — 🪝 🌐
Package purpose: EXPERIMENTAL rolling build of paulnsorensen/hallouminate off main — NOT the official `hallouminate` package
Claimed homepage: https://github.com/paulnsorensen/hallouminate#readme
Matched naming pattern: npm-@paulnsorensen/hallouminate-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 84
Registry downloads: 9376/month, 2344/week (ACTIVE_COMMUNITY_USE)
Codebase size: 191 lines, 7.6 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (73 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/install.js:9 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:5
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets
  • INFOActive community usage with 9,376 monthly downloads.
  • INFOPackage affiliated with trusted vendor '@paulnsorensen/hallouminate' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (105 -> 52) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/install.js:9 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:5
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
« Prev Next »
LINK COPIED TO CLIPBOARD