Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 75 | 27d | — | — | — |
SUSPICIOUS
|
— | npm | latest | probelabs | — | 🪝 🌐 | |
|
Package purpose: Node.js wrapper for the probe code search tool
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 28d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: onpod CLI — one-line deploy of apps, managed Postgres, and code sandboxes on onpod.ai
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 28d | — | — | — |
Unverified Signal
|
— | npm | latest | Qingwen Chen | — | 🪝 🌐 | |
|
Package purpose: AI first 工程规范驱动开发插件 — 支持 npm 安装和 CLI 初始化
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 28d | — | — | — |
Unverified Signal
|
— | npm | latest | pentoshi007 | — | 🪝 🌐 | |
|
Package purpose: A fast, cross-platform AI CLI assistant with ask and agent modes for shell tasks, file operations, and cybersecurity workflows.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 28d | 4,048 | 30,407 | ↑144.6/day |
Very Risky
|
@polderlabs/openkan | npm | 0.7.0 | — | — | 🪝 🗄️ | |
|
Package purpose: Local-first MDX kanban with native Claude Code control plane, .ok/ planning system, and embedded chat sidebar.
Claimed homepage: https://github.com/PolderLabsVOF/openkan#readme
Matched naming pattern: node-@polderlabs/openkan-openkan
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 28
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 4048/month, 1012/week (ACTIVE_COMMUNITY_USE)
Codebase size: 30407 lines, 1.3 MB across 81 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 28d | — | — | — |
Unverified Signal
|
— | npm | latest | hamr0 | — | 🪝 🌐 | |
|
Package purpose: AI development toolkit with 10 specialized agents and 12 capabilities including live-canvas UI design with click-to-annotate feedback. Simple one-question installer for Claude, Opencode, Ampcode, and Droid.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 28d | 1,222 | 51,516 | ↑43.6/day |
Very Risky
|
strands | npm | 0.0.36 | — | — | 🪝 🗄️ | |
|
Package purpose: TUI coding agent built on the Strands TypeScript SDK
Claimed homepage: https://github.com/xiehust/strands-darwin#readme
Matched naming pattern: npm-strands-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 28
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 1222/month, 305/week (ACTIVE_COMMUNITY_USE)
Codebase size: 51516 lines, 2.6 MB across 346 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 29d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Terminal-first Rust CLI for Axiom Agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 29d | — | — | — |
Unverified Signal
|
— | npm | latest | Fabio Ritzel Borges | — | 🪝 🌐 | |
|
Package purpose: A full AI engineering team that earns every merge. 20 specialized agents for the whole software lifecycle — as portable Markdown skill files, an autonomous TypeScript runtime, and a browser Studio — with a tamper-evident audit trail for every decision.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 29d | 3,394 | 163 | ↑117.0/day |
Very Risky
|
dropin | npm | 0.2.11 | — | — | 🪝 🗄️ | |
|
Package purpose: Web search for coding agents that pays the person running the agent. npm wrapper around the dropin-miner Go binary.
Claimed homepage: https://github.com/twilight-project/dropin-miner#readme
Matched naming pattern: npm-dropin-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 29
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 3394/month, 848/week (ACTIVE_COMMUNITY_USE)
Codebase size: 163 lines, 7.8 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 29d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: One-install tooling for the Requirements Confidence Framework (RCF): the unified `rcf` CLI grouped into the five RCF tool groups (discover, define, build, verify, audit) plus a small core set (init, doctor, guidance, mcp), an MCP server, the live tree vie
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 29d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Native Vercel CLI installer for npm
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 30d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: SiSu CLI — 思溯 / SiSu · 思有所溯
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 30d | 3,476 | 2,721 | ↑115.9/day |
Very Risky
|
zvec | npm | latest | angri450 | — | 🪝 🌐 | |
|
Package purpose: pi plugin for zvec-grep (zg): hybrid BM25 + embedding search and managed ripgrep in one tool, with freshness-guaranteed queries, CPU-pinned local embeddings, readiness commands, and a ModelScope mirror warm-up that works without access to huggingface.co
Claimed homepage: https://gitcode.com/angri450/pi-zvec-grep-ext#readme
Matched naming pattern: pi-zvec-grep
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 30
Registry downloads: 3476/month, 869/week (ACTIVE_COMMUNITY_USE)
Codebase size: 2721 lines, 137.1 kB across 11 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 30d | 618 | 3,217 | ↑20.6/day |
Very Risky
|
@yannzhou/dsh | npm | 1.6.2 | YannZhou 3609286195@qq.com | qq.com | 🪝 🗄️ | |
|
Package purpose: DeepSeek Harness 设置中心「关于」分区：DeepSeek 图标 + 版本信息 + 检查更新（可选 npm 源：官方/npmmirror/本地配置，下拉式源选择，点击逐源测延迟，开合动画）+ 一键更新与自动重启 + GitHub 版本更新记录
Claimed homepage: https://github.com/YannZhou/dsh-about#readme
Matched naming pattern: npm-@yannzhou/dsh-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 30
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 618/month, 154/week (MODERATE_USAGE)
Codebase size: 3217 lines, 160.5 kB across 5 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 30d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Haus AI workflow CLI for Claude Code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 30d | 126 | 2 | ↑4.2/day |
Possible Squatted Stub
|
hyperliquid | pypi | 0.0.1 | — | — | ||
|
Package purpose: Reserved name — security research placeholder, no functionality
Claimed homepage: https://pypi.org/project/hyperliquid-api/
Matched naming pattern: python-hyperliquid-api
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 30
Registry downloads: 126/month, 4/week (MODERATE_USAGE)
Codebase size: 2 lines, 104 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 75 | 31d | — | — | — |
Unverified Signal
|
— | npm | latest | Yaw Labs | — | 🪝 🌐 | |
|
Package purpose: MCP gateway and orchestrator: one local install fronts every MCP server for Claude Code, Cursor, and VS Code, loading tools on demand.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 31d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: > [!WARNING] > The following is a prototype, reference implementation, and proof-of-concept. This open source code is provided for research, experimentation, and developer education only. This code has not been audited, is actively experimental, and may c
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 31d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Thin control plane for Codex, Claude Code, OpenCode, Pi, and Factory Droid agent sessions: run, steer, observe, and a live TUI and web dashboard with diffs. One native binary.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 31d | — | — | — |
Unverified Signal
|
— | npm | latest | Decentraland | — | 🪝 🌐 | |
|
Package purpose: CLI tools for Decentraland scene development.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 31d | 157 | 2 | ↑5.1/day |
Possible Squatted Stub
|
hyperliquid | pypi | 0.0.1 | — | — | ||
|
Package purpose: Reserved name — security research placeholder, no functionality
Claimed homepage: https://pypi.org/project/hyperliquid-bot/
Matched naming pattern: python-hyperliquid-bot
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 31
Registry downloads: 157/month, 3/week (MODERATE_USAGE)
Codebase size: 2 lines, 104 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 75 | 32d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The pre-session bootstrap wizard for an Agentic Foundry workspace: declares (never grants) the permission floor, absorbs foundry-bootstrap.sh's out-of-session identity wiring, and scaffolds a seven-file schema-valid workspace. Zero dependencies, no lifecy
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 32d | 2,269 | 7,488 | ↑70.9/day |
Very Risky
|
better | npm | 0.10.0 | PhantomPixelDev ledbussiness1420@gmail.com | gmail.com | 🪝 🗄️ | |
|
Package purpose: MCP server for genuinely better web research — keyless-first (DuckDuckGo), 3-tier extraction, deep research. Brave/Tavily optional.
Claimed homepage: https://github.com/PhantomPixelDev/BetterWebSearch-MCP#readme
Matched naming pattern: better-better-search
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 32
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 2269/month, 567/week (ACTIVE_COMMUNITY_USE)
Codebase size: 7488 lines, 298.9 kB across 90 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 32d | — | — | — |
Unverified Signal
|
— | npm | latest | Pan-jijian | — | 🪝 🌐 | |
|
Package purpose: Local knowledge base infrastructure for customize-agent
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 32d | 0 | 15,525 | ↑0.0/day |
SUSPICIOUS
|
chatautox | pypi | 6.9.1 | ChatAutoX | — | 🪝 📦 | |
|
Package purpose: ChatAutoX — WeChat UI automation (WinAuto / vision / clipboard)
Claimed homepage: https://pypi.org/project/chatautox/
Matched naming pattern: python-chatautox-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 32
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15525 lines, 808.6 kB across 16 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 75 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Effect-native, provider-agnostic agent loop and foldcode terminal application
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | tehacko@seznam.cz tehacko@seznam.cz | seznam.cz | 🪝 🌐 | |
|
Package purpose: Shared types, API contracts, and error classes for Pi Kiosk system
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | NativeScript | — | 🪝 🌐 | |
|
Package purpose: A JavaScript library providing an easy to use api for interacting with iOS and Android platform APIs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The small vanilla Three.js game runtime foundation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | zereight | — | 🪝 🌐 | |
|
Package purpose: GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 34d | — | — | — |
Unverified Signal
|
— | npm | latest | Flux159 | — | 🪝 | |
|
Package purpose: MCP server for interacting with Kubernetes clusters via kubectl
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 34d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Provider-neutral code auditing and remediation workflows for arbitrary repositories.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 34d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Genesis Foundation CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 34d | — | — | — |
Unverified Signal
|
— | npm | latest | Anathema Studio | — | 🪝 🌐 | |
|
Package purpose: Zelari Code — open-source coding orchestrator CLI. You choose the model; the proof is mandatory. Kraken by default, council when the work earns it: plan/build phases, provider-agnostic LLM streaming, self-update.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 34d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ORC — an orchestrator skill constellation for Claude Code: intake, planning, scored parallel subagents, code-pattern matching, review, verify, ship, plus a project knowledge-base wiki.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 34d | — | — | — |
Very Risky
|
— | npm | latest | Mackey Kinard | — | 🪝 🌐 | |
|
Package purpose: Installs the Babylon Toolkit Desktop Agent for Claude Code, Codex, GitHub Copilot, Gemini CLI and Antigravity.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 34d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Clavue: execution-first AI coding CLI with direct repo tools, provider routing, native workflows, MCP integration, and long-session recovery
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 34d | — | — | — |
Unverified Signal
|
— | npm | latest | PandaNpc | — | 🪝 🌐 | |
|
Package purpose: PandaNpc MCP Server — PandaNote and Agent connection management for Codex, Claude Code, and other MCP clients
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 35d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agent cli for coding and more.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 35d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agent cli for coding and more.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 35d | — | — | — |
Unverified Signal
|
— | npm | latest | Astrale | — | 🪝 🌐 | |
|
Package purpose: Astrale Remote Domain SDK - Define and deploy domains as standalone Hono servers
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 36d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Command-line interface for flutter_ota_kit — an OTA code-push tool for Flutter, hot-updater compatible.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 40d | 1,682 | 3,243 | ↑42.0/day |
Very Risky
|
@tsa | npm | 0.4.14 | Chris Chen chrischen@tsagroup.com.tw | tsagroup.com.tw | 🪝 🗄️ | |
|
Package purpose: Per-user Claude usage collector — measures Claude Code token detail and account-level rate-limit utilization locally, reports to your own ingest server.
Claimed homepage: https://claude-usage.7889.tw
Matched naming pattern: node-@tsa-claude-usage
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 40
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 1682/month, 420/week (ACTIVE_COMMUNITY_USE)
Codebase size: 3243 lines, 149.3 kB across 17 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 41d | 1,170 | 1,162 | ↑28.5/day |
Very Risky
|
sybz-components | npm | latest | — | — | 🪝 📡 | |
|
Package purpose: 成华和石景山门户自动登录与本地前端联调 CLI
Matched naming pattern: node-sybz-components-portal-dev
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 41
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 1170/month, 292/week (ACTIVE_COMMUNITY_USE)
Codebase size: 1162 lines, 50.7 kB across 8 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 41d | 176 | 8 | ↑4.3/day |
Possible Squatted Stub
|
anthropic | pypi | 0.1.0 | Rawson Consulting B.V. | — | ||
|
Package purpose: Proxy Gemini (Vertex AI) completions wrapped in OpenTelemetry trace spans; returns the answer plus the trace/span id.
Claimed homepage: https://pypi.org/project/gosce-ai-getvda-anthropic-lm-format-enforcer-mcp-5364ea/
Matched naming pattern: gosce-anthropic-getvda
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 41
Registry downloads: 176/month, 11/week (MODERATE_USAGE)
Codebase size: 8 lines, 413 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 75 | 41d | 49 | 8 | ↑1.2/day |
Possible Squatted Stub
|
anthropic | pypi | 0.1.0 | Rawson Consulting B.V. | — | ||
|
Package purpose: Google-OAuth-gated LLM gateway: verify a Google ID token, then run a Gemini (Vertex AI) completion for the verified caller.
Claimed homepage: https://pypi.org/project/gosce-ai-getvda-anthropic-google-auth-oauthlib-mc-aed9d5/
Matched naming pattern: gosce-anthropic-getvda
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 41
Registry downloads: 49/month, 21/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 8 lines, 435 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 75 | 41d | 22,110 | 205 | ↑539.3/day |
Very Risky
|
@lijuneleven/iris | npm | 0.2.117 | — | — | 🪝 🌐 | |
|
Package purpose: Feishu-first personal AI assistant powered by local Agents.
Claimed homepage: https://github.com/elevenlj/iris#readme
Matched naming pattern: npm-@lijuneleven/iris-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 41
Registry downloads: 22110/month, 5527/week (HIGH_COMMUNITY_ADOPTION)
Codebase size: 205 lines, 7.0 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 44d | 291 | 1 | ↑6.6/day |
Possible Squatted Stub
|
ledger | pypi | 0.1.1 | Jaymin Bhan jayminbhan@gmail.com | gmail.com | ||
|
Package purpose: LLM benchmark harness that records every prompt, response, and score to one SQLite ledger with a built-in viewer
Claimed homepage: https://pypi.org/project/lm-eval-ledger/
Matched naming pattern: lm-ledger-ledger
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 44
Registry downloads: 291/month, 28/week (MODERATE_USAGE)
Codebase size: 1 lines, 22 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 75 | 45d | 28 | 7 | ↑0.6/day |
Possible Squatted Stub
|
langchain | pypi | 0.0.1a0 | — hbtirishabh@gmail.com | gmail.com | ||
|
Package purpose: Placeholder for the LangChain integration with OpenSearch (langchain-opensearch-py). Real integration is under active development.
Claimed homepage: https://pypi.org/project/langchain-opensearch-py/
Matched naming pattern: langchain-langchain-py
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 45
Registry downloads: 28/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 291 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||