Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | dingminhua | — | 🪝 🌐 | |
|
Package purpose: 将本机已登录的 Trae（国内版 / 国际版）模型接入 Pi coding agent，国内版与国际版双供应商并行；附额度查看与每日签到命令，复用 DSH 插件的协议与凭据逻辑。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Connect a coding agent to a Futuvara project: adds the Futuvara MCP server, installs every Futuvara skill and applies the project config.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Andrew Dillon | — | 🪝 | |
|
Package purpose: Font engine for Node and the browser (forked from znacloud/pdf-fontkit@1.8.9: CFF subset charset nLeft clamp + encodeStream error propagation)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Bria | — | 🪝 🌐 | |
|
Package purpose: Bria Studio — a pretty CLI wizard to set up Bria's BYOC bundles, MCP server, and agent skills.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | qriib developer team | — | 🪝 🌐 | |
|
Package purpose: React UI kit SDK for the Qriib v4 REST API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | XDTrees | — | 🪝 🌐 | |
|
Package purpose: Run OpenCode Zen's free models inside DeepSeek Harness through a managed, isolated OpenCode runtime.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | YangHeng | — | 🪝 🌐 | |
|
Package purpose: Remote workspace for DeepSeek Harness: SSH host vault (groups, jump chains, proxy, encrypted credentials), interactive SSH terminal, SFTP explorer, remote workspace binding, and session-scoped remote agent tools.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Joshua | — | 🪝 | |
|
Package purpose: Guardrails for Node.js apps, whether a person or an AI wrote the code: a typed .env guard with a secret-leak scanner, a MERN-aware Express error toolkit, and an edge-case prober that finds the inputs that crash your functions. Zero dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Public bootstrap for Callimacus: `callimacus login` configures the private SDK registry (.npmrc) + API access. The full tool is the private @callimacus/callimacus-cli.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Leidenfrost | — | 🪝 🌐 | |
|
Package purpose: SDK Oficial de Leidenfrost Platform para autenticación M2M y gestión Multi-Tenant
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
SUSPICIOUS
|
— | npm | latest | TJ Holowaychuk | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
SUSPICIOUS
|
— | npm | latest | TJ Holowaychuk | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
SUSPICIOUS
|
— | npm | latest | TJ Holowaychuk | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | HeavenSky | — | 🪝 | |
|
Package purpose: Fast npm installer forked from npminstall, with npm@6 style --dedup hoisting, npm workspaces fixes and node 16 support
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | HeavenSky | — | 🪝 | |
|
Package purpose: Fast npm installer forked from npminstall 6.8.0, with flat _name@version@name layout, latest-version hoisting and node 16 support
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
SUSPICIOUS
|
— | npm | latest | TJ Holowaychuk | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
SUSPICIOUS
|
— | npm | latest | TJ Holowaychuk | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
SUSPICIOUS
|
— | npm | latest | TJ Holowaychuk | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
SUSPICIOUS
|
— | npm | latest | TJ Holowaychuk | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Your local interactive shell in AgentOnWeb
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Aex | — | 🪝 | |
|
Package purpose: 个人 SSH 组网：v6 直连优先、relay 兜底、关机有界重试后静默
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | felixmosh | — | 🪝 🌐 | |
|
Package purpose: A Dashboard UI built on top of bull or bullmq.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Test network latency, download and upload speed
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | 云图智核 Yuntucore | — | 🪝 | |
|
Package purpose: 即做（JIZUO）一键接入 + 给 AI Agent 用的命令行：stdio 启动器、各 MCP 客户端配置写入、OAuth 2.1 PKCE 登录、请小即审阅交付物（review request / status）。Thin stdio launcher for the JIZUO remote MCP server, one-shot client setup, and the agent-facing CLI (OAuth PKCE login, ask 小即 to review a deliver
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | ForgeMesh Labs | — | 🪝 🌐 | |
|
Package purpose: ShopScout: product search, variant offers and shipping-plan comparison for agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: SDK for Queek installable apps: webhook signature verification, install handlers, typed Merchant API client, webhook dispatch, encrypted installation store.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Connect Claude Code and Codex to your team's Ciresa workspace: CLI + MCP server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Gustavo Gretter | — | 🪝 🌐 | |
|
Package purpose: Enterprise-grade AI agent orchestration for Node.js: build, run and govern production AI agents with built-in ACL, audit, human-in-the-loop, RAG and multi-provider LLMs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Runtime control plane and SaaS governance layer for AI agent tool execution
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | ProofState | — | 🪝 🌐 | |
|
Package purpose: Core functions and utilities for ProofState packages
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | John Lenard Requina | — | 🪝 | |
|
Package purpose: Pi (π) coding-agent extension: project-aware system prompt for any repo (stack, commands, conventions, AGENTS.md/CLAUDE.md rules) plus a gate that runs the project's own typecheck/lint/tests after every agent turn, with self-repair and diff review.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local, metadata-only token and cost telemetry for Claude Code, Codex CLI, and GitHub Copilot CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | CGSec | — | 🪝 🌐 | |
|
Package purpose: Local npm proxy that checks each new package version against that package's own release history
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||