Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | tickernelz | — | 🪝 🌐 | |
|
Package purpose: OpenCode plugin for AWS Kiro (CodeWhisperer) providing access to Claude models
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Embeddable UI for the EQUS Developer Toolkit. Add credential issuance and verification flows to your website.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Bria.ai | bria.ai | 🪝 🌐 | |
|
Package purpose: Bria.ai TypeScript/JavaScript SDK for the Bria Engine API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Very Risky
|
— | npm | latest | Aspose | — | 🪝 | |
|
Package purpose: Document parsing API to extract text, metadata, images, tables, barcodes, hyperlinks and structured data from PDF, DOCX, XLSX, PPTX, emails, archives and other popular document formats using JavaScript.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: PocketBase backend for kankaku: canonical clients/projects/tasks and synced task_entries/work_records.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Ikhwan | — | 🪝 🌐 | |
|
Package purpose: Customized distribution of WhatsApp Web API library with enhanced button sets and stability layers built for Ryo-baileys.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | orlin24 | — | 🪝 🌐 | |
|
Package purpose: Auto-upload video ke YouTube dengan jadwal publish. Installer lintas-platform (Windows/macOS/Linux) + auto-start.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Louward Labs | — | 🪝 🌐 | |
|
Package purpose: Blipit error monitoring SDK for browsers. Know your app broke before your users tell you.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | StudioRaming | — | 🪝 | |
|
Package purpose: MCP server and CLI that let AI agents (Claude, Codex and other MCP clients) inspect and control a running WARUDO: scene, assets, camera, character pose and IK, expressions, blueprints and captures.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Privado Networks LLC | — | 🪝 🌐 | |
|
Package purpose: Local MCP server that signs x402 USDC payments (Solana, EVM) to buy PrivadoVPN access
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Convert HTML to PPTX or PNG presentations (Free / Licensed / Cloud)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Nikita Skovoroda | — | 🪝 🌐 | |
|
Package purpose: Minimal npm, crates.io and Soldeer registry clients, a GitHub client, and a git checkout reader: the calls we use, nothing more
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: AtlasCloud.ai image and video generation nodes for NodeTool
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Anthony Fu | — | 🪝 🌐 | |
|
Package purpose: Review pull requests with grouped, summarized, and beautiful diffs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Very Risky
|
— | npm | latest | Aspose | — | 🪝 | |
|
Package purpose: Document automation and report generation API to build DOCX, XLSX, PPTX, PDF, HTML, email and other documents from templates and JSON, XML, CSV or database data using JavaScript.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Martin Trojer | — | 🪝 | |
|
Package purpose: Agent state across every machine you work on, in one view.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Standalone macOS fleet node telemetry agent
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Stefan Sommer | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | ciinkwia | — | 🪝 🌐 | |
|
Package purpose: MCP server for Polymarket + Kalshi prediction-market odds, movers, history, gaps, and X/Twitter sentiment — no API key, no subscription. Pays per call in USDC on Base via x402 from your own wallet.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local Temporal frontend twin: WorkflowService over gRPC (HTTP/2) on loopback — task queues, workflow and activity tasks, timers on the World clock, signals, queries, children, continue-as-new, visibility; unserved RPCs answer UNIMPLEMENTED. Built on @volt
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ZCode Web + Agent runtime: browser UI with a local agent backend.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 中瑞世联工作台 / CRWU audit workbench for DeepSeek Harness: pick a pending audit report, dispatch one AI audit subagent, watch and stop/restart it, auto-upload deliverables to Aliyun OSS.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Thomas | — | 🪝 🌐 | |
|
Package purpose: Experimental Rust-powered runtime for Next.js apps, React and npm
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local AWS twin — ONE faithful, stateful local AWS API your unmodified AWS SDKs talk to, across six service areas over a single shared SigV4/error/credential core: S3 / R2 object storage (`@aws-sdk/client-s3` — buckets/objects with real bytes + md5 ETags,
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local PayPal twin - batch payouts with a deterministic offline lifecycle, really signed webhook notifications, the OAuth 2.0 token endpoint, the Identity userinfo read and the Log in with PayPal consent screen. Built on @volter/twin.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local Twilio twin for the messaging/telephony surface (Messages send + delivery-status lifecycle, Verify start/check, Lookup, IncomingPhoneNumbers, X-Twilio-Signature-signed webhooks) built on @volter/world-core.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local Upstash Redis (REST API) twin: a real stateful Redis command core (strings/counters/TTL/hashes/sets/sorted-sets/keyspace) served over Upstash's per-database REST protocol — single-command POST /, path-style GET /get/key, POST /pipeline, POST /multi-
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | a1ecbr0wn | — | 🪝 🌐 | |
|
Package purpose: MCP server exposing Obsidian vaults to remote clients (Claude Code, Claude Desktop) with OAuth discovery and path-level access control
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for Base L2 token safety: bytecode scans, swap simulations, approval and liquidity risk, and the live new-pool channel — six paid x402 surfaces plus x402 infrastructure tools, with payment handled server-side.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Your agent works all night. You get the funnies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local-first topic exploration CLI with a Fastify server and React UI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Retrospectives for your coding-agent sessions: reads local Claude Code, Codex, pi, opencode, Continue, Zed and Cursor logs, finds what you work on and where tokens, time and failures go, and recommends concrete changes. Local dashboard, versioned export,
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | N11X Collective | — | 🪝 🌐 | |
|
Package purpose: Hecate — encrypted mesh network client by the N11X Collective
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for x402receipts: record the x402 purchases an agent makes as reconciled, auditable receipts, and verify any receipt against the public ledger.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Governance kernel: typed config loader, the CaissonError model, security primitives (constant-time compare, SSRF guard), and the standards gate.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Turn any MCP server (stdio/SSE/HTTP) or OpenAPI spec into an agent-friendly CLI, with built-in OAuth2 browser login.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Northlatch Labs LLC | — | 🪝 | |
|
Package purpose: Dynamic package definition registry, host-half sandbox lifecycle, and invoke handler table for model-mounted dual-half packages
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | alberthost | — | 🪝 🌐 | |
|
Package purpose: WhatsApp Web API Library
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Unofficial Instagram Chat API for Node.js ? fca-style. Login, send messages, listen to events.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Connect your CPU/GPU machine to the Sovereign optimization website. All solving runs locally on your computer.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | GENESIS Agent Tools | — | 🪝 🌐 | |
|
Package purpose: Detect breaking API/OpenAPI/GraphQL/schema/MCP changes in CI and with a single CLI command. Free scope preview; full SAFE/REVIEW/BLOCK verdict for 0.001 USDC on Base (gasless EIP-3009). No account, no API key.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Core process: MCP endpoints, Admin API, plugin host, permission gate
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | askdkc | — | 🪝 | |
|
Package purpose: Interactive terminal interface for DeepSeek Harness agents, sessions and tools.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Optivian CLI — deploy GitHub repos, watch builds and read logs from your terminal, CI or an AI agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | rajaaltus | — | 🪝 🌐 | |
|
Package purpose: Read a web page as data instead of a screenshot: what is on screen, what broke behind it, and layout defects at phone and desktop widths. For developers and AI coding agents; installs itself as a skill for Claude Code, Codex, Gemini CLI, Cursor, Windsurf,
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Open Source Community | — | 🪝 🌐 | |
|
Package purpose: Universal file download library for Next.js, React, and browser with automatic CORS fallback, proxy streaming route, and progress tracking.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | ProfesSkills | — | 🪝 🌐 | |
|
Package purpose: Provider-agnostic authentication and authorization module for NestJS with Keycloak support.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Pairon Runner — securely connect local AI agents to a shared Pairon session
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Toni Tralice | — | 🪝 | |
|
Package purpose: Manage your agent skills like dependencies. One library for all your skills; each repo gets only the ones it needs, and every agent can see them. Works with Claude Code, Cursor, Codex and Zed.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Keyless OpenAI-compatible API (Chat Completions + Responses) for OpenCode's free Zen models, served through the real OpenCode CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||