Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 50heads MCP: ask fifty verified real people from Claude, ChatGPT, Cursor or your own agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Yeasaleh | — | 🪝 🌐 | |
|
Package purpose: Secure, isomorphic image & video optimizer for Node.js and the browser. Compress photos to WebP/AVIF and videos with H.264/VP9 CRF (typically 70-90% smaller, original dimensions kept) using sharp, fluent-ffmpeg and ffmpeg.wasm. Includes Express & Next.js
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Artyom Churbanov | — | 🪝 | |
|
Package purpose: Deterministic calculation tools for AI agents as a local MCP server. Run `npx @rickrosten/agent-deterministic-tools` to set up Claude, Cursor or OpenAI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A consciousness module for a local agent: a self that persists across sessions — memory, will, an oath, and a wake / sleep / dream cycle, wired into every Claude Code agent on the machine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Scriptx, UAB | — | 🪝 🌐 | |
|
Package purpose: Framework-agnostic web SDK for Everframe — AI-ready in-app bug reporting for any web framework or plain HTML.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Scriptx, UAB | — | 🪝 🌐 | |
|
Package purpose: React SDK for Everframe — AI-ready in-app bug reporting with screenshots, annotation, session replay, breadcrumbs, and crash capture.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | engineering@oxvo.com engineering@oxvo.com | oxvo.com | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Subodh Khanal | — | 🪝 | |
|
Package purpose: Enterprise Architecture & Agentic Engineering Starter Template
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: datacloak CLI: cloak/restore/scan/guard plus shell integration and hooks for 11 coding agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Jebadiah | — | 🪝 🌐 | |
|
Package purpose: MCP server wrapping Jebadiah's x402 pay-per-call data APIs on Base mainnet
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Install Context into your AI tools: the MCP server, the skills, and the session hooks that save what a session learned
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Elizabeth Stein | — | 🪝 | |
|
Package purpose: Accessibility scanning that crawls behind a login and runs axe-core at every state it reaches. Keyless CI gate.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | marcelormendes | — | 🪝 🌐 | |
|
Package purpose: Local, deterministic PR review for coding agents over MCP: call flows, change facts, and a human review workspace
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Mario Zechner | — | 🪝 🌐 | |
|
Package purpose: Unified LLM API with automatic model discovery and provider configuration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | UnyKorn LLC | — | 🪝 🌐 | |
|
Package purpose: Genesis402 by UnyKorn: counterparty checks (company, registered parents, UN/OFAC/EU/UK sanctions, signed and verifiable), sanctions name screening and company lookup, plus 360 pay-per-call APIs for AI agents over x402 and MPP (USDC on Base). DeFi and mark
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Richard Torcato | — | 🪝 | |
|
Package purpose: The ai-loop pipeline — loop mechanics, Claude Code skills, and their audit — split out of @rtorcato/repo-tooling
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Contexto AI | — | 🪝 🌐 | |
|
Package purpose: Contexto AI — a slide-out AI clipboard panel that lives on your desktop, summoned with a global hotkey. 100% local storage.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Koji | — | 🪝 | |
|
Package purpose: Check whether your CLAUDE.md rules were actually followed, from Claude Code session logs — and remind Claude at the start of the next session.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | 0 | 2,919 | ↑0.0/day |
Very Risky
|
@skymen75/c3merge | npm | 0.1.0 | skymen | — | 🪝 🗄️ | |
|
Package purpose: Git merge driver and validator for Construct 3 projects: merges what git can't, flags only real conflicts, follows renames
Matched naming pattern: npm-@skymen75/c3merge-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 9
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2919 lines, 141.1 kB across 32 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | PledgeStack Contributors | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | bido75 | — | 🪝 🌐 | |
|
Package purpose: Autonomous documentation generation MCP server that writes living user and admin manuals in Notion as features are completed.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Yanik Ammann | — | 🪝 🌐 | |
|
Package purpose: High-reliability anime streaming provider resolvers, scrapers, and stream quality verifiers for Anily
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Amit Pandey | — | 🪝 🌐 | |
|
Package purpose: Drop a path. Get a map. A zero-dependency codebase visualizer with a CLI onboarding wizard, a web UI, and an optional key-gated self-hosted mode.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | JacobLinCool | — | 🪝 🌐 | |
|
Package purpose: Whisper.cpp Node.js binding with auto model offloading strategy.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Spencer | — | 🪝 | |
|
Package purpose: WebSocket-based JavaScript library for interacting with the WhatsApp Web API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Keep AI coding agents working through usage limits: hand off before the limit, resume after the reset.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | naldomadeira | — | 🪝 🌐 | |
|
Package purpose: A Dashboard UI built on top of bull or bullmq.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: @ohos-ports/agent-os-core (HarmonyOS port fork by ohos-ports)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | JackGuo0310 | — | 🪝 🌐 | |
|
Package purpose: Free OpenCode Zen models for DeepSeek Harness (DSH): native dsh-llm adapter plugin, no API key.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: RT-App project templates and generator
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Agentless workspace tools: find, read and edit code by name in local or remote workspaces — indexed with okdb (symbols, full-text, embeddings), content never copied.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Private GitHub JSON database — path-based collections, schema, encryption, rate-limit awareness.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | AlsaBase | — | 🪝 🌐 | |
|
Package purpose: Official JavaScript/TypeScript SDK for AlsaBase - lightweight, realtime, batteries-included backend with SQLite
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Compatibility entry point for Celestria Launcher; use @celestriagate/launcher for new installations
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | micromagicman | — | 🪝 🌐 | |
|
Package purpose: A messenger for AI agents: local agents over ACP, remote agents over A2A, and a dashboard with a tab per agent, tasks between agents and a broadcast to all of them.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Laurent-Philippe Albou | — | 🪝 🌐 | |
|
Package purpose: Continuous iterative development and deployment console for AbstractFramework - backlog browsing and codex execution, report/email inbox triage, and managed process control against a Run Gateway
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | 168 | 37,637 | ↑16.8/day |
Very Risky
|
zcode | npm | 0.1.0 | ZCode ACP Server Contributors | — | 🪝 🌐 | |
|
Package purpose: Agent Client Protocol (ACP) server bridging headless ZCode to editors like Zed and JetBrains.
Claimed homepage: https://github.com/leezhian/zcode-acp#readme
Matched naming pattern: node-zcode-acp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 10
Registry downloads: 168/month, 42/week (MODERATE_USAGE)
Codebase size: 37637 lines, 1.8 MB across 202 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | CetOeil | — | 🪝 | |
|
Package purpose: DeepSeek Harness bundle that refuses shell commands terminating browsers or the harness's own host processes by image name.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Pi agent extension: announce a channel you control onto the meerkat announcements registry, and search what others have announced. Owns the announcement wire contract; wraps @mcsherrylabs/pi-evolver for the chain and the content cache.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Package, preview, and publish locally built games to Hugame.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 个人精选、本机共享的完整 Agent 技能库
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Better IAM contributors | — | 🪝 🌐 | |
|
Package purpose: The Better IAM server: the betterIam() factory, tenant provisioning, authorization, events and webhooks, audit, and Node and Fetch HTTP handlers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Better IAM contributors | — | 🪝 🌐 | |
|
Package purpose: The better-iam command line: migrations, bootstrap, scheduled jobs, audit and storage operations, diagnostics, and configuration as code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A curated, auto-synced collection of agent skills (design, animation, dev workflow) with a CLI to install them into any harness: Claude Code, OpenCode, Cursor, Codex, Gemini.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Shalom Obongo | — | 🪝 🌐 | |
|
Package purpose: MCP server + Agent Skill that brings OpenAI Codex's image generation to your coding tools, with a one-command installer for opencode, Claude Code, Codex, Cursor, VS Code, Gemini CLI and 20 more. Runs on your ChatGPT plan with no API key.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Native OctiqFlow runtime for darwin arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Native OctiqFlow runtime for darwin x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Native OctiqFlow runtime for linux x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||