Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | João Gabriel Lozano | — | 🪝 🌐 | |
|
Package purpose: Localhost OpenAI-compatible HTTP proxy that uses your ChatGPT subscription via OAuth — including image generation (gpt-image-2).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Gihan Rangana | — | 🪝 🌐 | |
|
Package purpose: LeptonJS CLI (dev / build / start / pack).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Tangu engine plugin: let agents observe and control macOS, Windows, and Linux desktop apps. Fork of injaneity/pi-computer-use (MIT).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A model-agnostic terminal coding harness with multi-agent collaboration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Navid Moazzez | — | 🪝 🌐 | |
|
Package purpose: Google Search Console MCP server and CLI for Claude Code, Codex and AI agents. 19 tools for search analytics, URL inspection, sitemaps and property verification.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Guido Modarelli | — | 🪝 | |
|
Package purpose: Dependency-free release process shared by the Beez projects: stable version rules, Vercel build gate, commit-based changelog and terminal UI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Manages the Let's Encrypt certificates of an nginx server, on top of certbot
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Dynamic package definition registry, host-half sandbox lifecycle, and invoke handler table for model-mounted dual-half packages
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | L Z | — | 🪝 🌐 | |
|
Package purpose: imp — a small coding agent that runs in your terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | soyunninja | — | 🪝 | |
|
Package purpose: Claude Code plugin that records how long the agent works on each user prompt, in kankaku's worklog format.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Content-aware source retrieval for coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Chris Lasher | — | 🪝 | |
|
Package purpose: Permission enforcement extension for the Pi coding agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A browser interface for Pi with live chat, workspaces, models, and attachments
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Universal Autonomous Coding Cockpit CLI for Get AI Todo
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Very Risky
|
— | npm | latest | WayCup | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | OXVO | — | 🪝 🌐 | |
|
Package purpose: Security scanner for AI coding agents from OXVO Insights. Checks what an agent reads, writes and runs for prompt injection, secret exfiltration, destructive commands, supply-chain attacks and hardcoded secrets.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Taha Shashtari | — | 🪝 🌐 | |
|
Package purpose: Draw a level on paper, describe the game and its rules, and your coding agent builds a 2D game you can share.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Provider-agnostic AI agent framework with skill-based architecture
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The releeze MCP server. Install it in your coding agent and the agent that builds your product launches it on releeze, then posts every update it ships.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Send, fetch, list and revoke Dropvi transfers from the command line
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | tBeltty | — | 🪝 | |
|
Package purpose: Spec-Driven Development governance for AI coding agents: auto-loaded agent rules, specifications with recorded evidence, and a pre-push quality gate
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Relay Server: проектный контекст, планы, задачи, REST API и веб-приложение для людей и AI-агентов
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: security holding package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Agent Constitution Contributors | — | 🪝 | |
|
Package purpose: The Universal Behavioral Contract & Context Engine that turns any AI coding agent into a disciplined senior engineer.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Gerald Chang | — | 🪝 | |
|
Package purpose: Attach a structured decision log from an AI coding agent session to a pull request.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Lore Inc. | — | 🪝 🌐 | |
|
Package purpose: M.E.K.S.U.S. CLI: see what your AI coding agents (Claude Code) and builds are doing, live, and get Discord alerts when they fail or need you. Status only: code, prompts and output never leave your machine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 社区版（非官方）无头服务器 + Web 面板
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | devtools-community | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Masai School | — | 🪝 🌐 | |
|
Package purpose: Server side of Schema Grid: permission-checked Drizzle/MySQL queries, change feed, import/export jobs and HTTP adapters.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Alan Reis | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK for the Plane API (v1 and v2), with an MCP server and a CLI for AI agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Kiki CLI/TUI (Node.js)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | intothederk | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK for the Kalvora network (beta): wallets, transaction builders, signing, and typed gRPC-Web query clients
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Tufail Ahmed Sheikh | — | 🪝 🌐 | |
|
Package purpose: Native Palo Alto support-bundle analyser — browse, trends, and analysis in one binary.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Headless Moka engine: any LLM + MCP servers + skills, with a full event trace.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Moka sandbox — chat with any LLM, plug in any MCP server or skill, and inspect every call. One command: npx @mokalabs/sandbox
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | you | — | 🪝 | |
|
Package purpose: ⬢ The local black-box flight recorder for AI agents. Zero deps, hash-chained session logs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: x402 v2-compatible fetch wrapper for AI agents and apps. payAndFetch() handles the 402 challenge, signs, and retries automatically on Robinhood Chain.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | jiuaiwo | — | 🪝 🌐 | |
|
Package purpose: 给 DeepSeek Harness 打补丁：在任意会话把文件主动投递到 IM（微信）、按 cron 跑定时任务、工作区活动呼吸灯（含折叠未读提示）、会话标题栏活跃指示、对话完成提示音，另有一键重启按钮。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | ibraacode | — | 🪝 | |
|
Package purpose: Static Dashboard Builder — Turn CSV/JSON/YAML into beautiful static dashboards
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: GlassPane Harness — evidence-honest GUI verification harness for macOS apps (opencode fork with GlassPane's native gp_* tool surface)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for the Cloud Foundry V3 API on SAP BTP. Runs locally over stdio using your cf CLI login, or hosted on BTP.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for Priors on Robinhood Chain: pay x402 URLs in USDG, read balances, credit lines and scores, borrow and repay. Key from PRIORS_KEY only.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Numman Ali | — | 🪝 🌐 | |
|
Package purpose: OpenAI ChatGPT (Codex backend) OAuth auth plugin for opencode - use your ChatGPT Plus/Pro subscription instead of API credits
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 50heads MCP: ask fifty verified real people from Claude, ChatGPT, Cursor or your own agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Yeasaleh | — | 🪝 🌐 | |
|
Package purpose: Secure, isomorphic image & video optimizer for Node.js and the browser. Compress photos to WebP/AVIF and videos with H.264/VP9 CRF (typically 70-90% smaller, original dimensions kept) using sharp, fluent-ffmpeg and ffmpeg.wasm. Includes Express & Next.js
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Artyom Churbanov | — | 🪝 | |
|
Package purpose: Deterministic calculation tools for AI agents as a local MCP server. Run `npx @rickrosten/agent-deterministic-tools` to set up Claude, Cursor or OpenAI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||