Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 75 | 49h | — | — | — |
Unverified Signal
|
— | npm | latest | pooraddyy | — | 🪝 🌐 | |
|
Package purpose: Unified multi-provider LLM client: model discovery, auth, and streaming across OpenAI, Anthropic, Google, and more.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 50h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 一个面向 DeepSeek Harness 的长篇角色扮演插件，支持角色卡、世界线、长期记忆、混合检索和 SillyTavern 兼容。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 54h | — | — | — |
Unverified Signal
|
— | npm | latest | Emiliano 'pixu1980' Pisu | — | 🪝 🌐 | |
|
Package purpose: Web-based remote control for the pi coding agent - drive pi from your phone browser via an install-free PWA with notifications, no App Store required
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 54h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run end-to-end tests written as intentions, not selectors. CLI and MCP server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 55h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: braai: a desktop app for Claude Code conversations in the sandbox
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | Amitt K Sharma | — | 🪝 🌐 | |
|
Package purpose: Flags dependencies (direct or transitive, across npm/yarn/pnpm lockfiles) matching OSV.dev's known-malicious-package advisories.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | AstraCollab | — | 🪝 🌐 | |
|
Package purpose: nah — not another harness, the CLI. A fast, minimal coding-agent terminal (Pi-style): streaming agent loop, capped tools, JSONL sessions, slash commands.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 57h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Regal Compass theme CLI — DigiShop-style pull, sync, publish, pages, assets, and catalog submit from the terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 58h | — | — | — |
Unverified Signal
|
— | npm | latest | Sarv Projects | — | 🪝 🌐 | |
|
Package purpose: Universal Package & Capability Manager for AI Coding Agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cline CLI binary for darwin x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cline CLI binary for linux arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cline CLI binary for linux x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 62h | — | — | — |
Unverified Signal
|
— | npm | latest | Clothsy AI | — | 🪝 🌐 | |
|
Package purpose: MCP server that helps AI coding agents add Clothsy AI virtual try-on to a store: stack detection, integration plans, docs, error help and a live key check.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 64h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Outbound local inference discovery and tunnel node for Propel Router
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 65h | — | — | — |
Unverified Signal
|
— | npm | latest | Lucas Raineri | — | 🪝 | |
|
Package purpose: Emite a NFS-e do MEI no Emissor Nacional (nfse.gov.br) pelo terminal: preenche, confere e só emite com seu OK.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 68h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI for Malapos (part of the Forjio commerce suite).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 68h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: LaunchReel for Claude Code: Claude designs and writes a launch video for the app in your repo; you edit it on a timeline in a local Studio.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 69h | — | — | — |
Unverified Signal
|
— | npm | latest | diegoalgg88 | — | 🪝 🌐 | |
|
Package purpose: MCP server for Material 3 design system - provides AI agents with access to components, themes, and design tokens
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 70h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 70h | — | — | — |
Unverified Signal
|
— | npm | latest | Péter Vívó | — | 🪝 🌐 | |
|
Package purpose: Native win32-x64 compiler for the TypeScript unary pipeline POC
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 70h | — | — | — |
Unverified Signal
|
— | npm | latest | Péter Vívó | — | 🪝 🌐 | |
|
Package purpose: Native win32-arm64 compiler for the TypeScript unary pipeline POC
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 3d | 0 | 4,084 | ↑0.0/day |
Very Risky
|
@smjr3/mermaid | npm | 0.1.0 | smjr3 | — | 🪝 📡 | |
|
Package purpose: Customizable distribution of Mermaid Live Editor, delivered as an npm package and buildable into a static site. Unofficial derivative of mermaid-js/mermaid-live-editor.
Claimed homepage: https://github.com/smjr3/mermaid-editor#readme
Matched naming pattern: npm-@smjr3/mermaid-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4084 lines, 143.8 kB across 59 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | One Click Era | — | 🪝 | |
|
Package purpose: A hard, real-time dollar cap on Claude Code sessions, so a runaway agent can't burn an unexpected bill.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | UiPath | — | 🪝 🌐 | |
|
Package purpose: SDK for the UiPath AOps Governance API — policy management and deployment.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Rnify Limited | — | 🪝 🌐 | |
|
Package purpose: Katman MCP: makes your vibe-coded site readable, quotable and recommendable by ChatGPT, Claude, Gemini and Perplexity. Scans your codebase, audits your live site like AI crawlers do, measures AI visibility with your own OpenRouter key.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Herald CLI — Agent Commerce Protocol tools to discover, negotiate, hire, transact and pay with another agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Dane Brown | — | 🪝 🌐 | |
|
Package purpose: Model Context Protocol (stdio) server for the Xahau network: offline Hook WASM inspection, a Hooks-specific static-analysis rule engine, and read-only ledger, codec, governance and unsigned-transaction tooling. Never signs or submits.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI tool for VibeEverything — manage projects, codebases, and tasks from terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Taifoon | — | 🪝 | |
|
Package purpose: taifoon: the Taifoon coordination layer in the terminal. An interactive shell and one-shot commands to register agents and resources, collaborate with scoped keys, onboard Moonbeam and generic pools on every chain we maintain, and reach every marketplace
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: DSH tool plugin: delegate a self-contained task to your local Claude Code subscription (official Agent SDK). Fork of zhangjunjesse/dsh-claude-code, with a live output channel, resume and a monitor panel.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: One voice-first chat that controls all your coding agents. Hands-free, full duplex.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | elegant001 | — | 🪝 | |
|
Package purpose: 本地 AI agent 请求日志面板：聚合 atomcode / codebuddy / workbuddy / claude / codex / codearts / gemini / cursor / kimi / dsh 等本地日志，看每轮耗时、token、缓存、上下文与工具调用
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run local .uma models in Pi through the Sipp Warp runtime
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | jiangxd | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local SSH tunnel and HTTP proxy manager with a web dashboard
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Ishaan Sinha | — | 🪝 | |
|
Package purpose: Your coding agent does the work. You watch from the chair. A cinematic ANSI intro for Claude Code, Codex, Cursor, Gemini and every other terminal agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TypeSafe's Jev decisions for coding agents: a Claude Code hook that keeps the relevant parts of large MCP results, and a Codex app-server adapter that runs reviewed operations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||