FlagThis | Sentinel Threat Feed

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference

Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.

Package	Score ▼	Age	Users	Lines	Growth	Verdict	Targeted	Ecosystem	Version	Author	Email domain	Signals
	75	47d	615	15	↑13.1/day	Possible Squatted Stub	claude	npm	latest	—	—
Package purpose: Claude integration providing subscription utility for Dsh Matched naming pattern: dsh-claude-subscription Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 47 Registry downloads: 615/month, 153/week (MODERATE_USAGE) Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'dsh-claude-subscription' matches AI hallucination template [dsh] + [claude] + [subscription]. HIGHClaims critical enterprise brand identity ('CLAUDE'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). HIGHPackage registered recently (45 days ago) during the active AI hallucination slopsquatting wave. HIGHMISSING_SOURCE_REPOSITORY_URL MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes). INFOModerate community usage with 615 monthly downloads. Static code signals: MISSING_SOURCE_REPOSITORY_URL Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	75	48d	50	2,882	↑1.0/day	SUSPICIOUS	seal	pypi	0.12.1.post1	— m@matous.dev	matous.dev	🪝
Package purpose: A tool to perform richness-extent-grain analyses Claimed homepage: https://pypi.org/project/seal-tool/ Matched naming pattern: python-seal-tool Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 48 Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 50/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 2882 lines, 139.2 kB across 12 files (LARGE_CODEBASE) Automated signals flagged: MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (39 days ago) during the active AI hallucination slopsquatting wave. CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in seal_tool-0.12.1.post1/src/bundle.py:23 HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in seal_tool-0.12.1.post1/src/bundle.py:23 INFOSubstantial functional codebase (2882 LOC across 12 file(s)). MEDIUMPackage executes code at install/import time, but no exfiltration destination, credential access, encoded payload, obfuscation, shell cradle, or persistence primitive corroborates a weaponized payload. Downgraded from MALICIOUS to SUSPICIOUS pending manual review. Static code signals: MODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in seal_tool-0.12.1.post1/src/bundle.py:23 SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in seal_tool-0.12.1.post1/src/bundle.py:23 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	48d	23	3	↑0.5/day	Possible Squatted Stub	ledger	pypi	0.0.1	cypwin	—
Package purpose: Session recaps and digests for coding-agent work — consolidates past sessions into what to pick up next. Claimed homepage: https://pypi.org/project/session-ledger/ Matched naming pattern: python-ledger-session Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 48 Registry downloads: 23/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 3 lines, 200 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'session-ledger' matches AI hallucination template [python] + [ledger] + [session]. HIGHClaims critical enterprise brand identity ('LEDGER'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (41 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (3 LOC, 1 file(s), 200 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	50d	13	0	↑0.3/day	Possible Squatted Stub	langgraph	pypi	0.1.0	—	—
Package purpose: LangGraph adapters for tracegc Claimed homepage: https://pypi.org/project/tracegc-langgraph/ Matched naming pattern: python-langgraph-tracegc Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 50 Registry downloads: 13/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 0 lines, 34 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'tracegc-langgraph' matches AI hallucination template [python] + [langgraph] + [tracegc]. HIGHClaims critical enterprise brand identity ('LANGGRAPH'). HIGHPublisher email 'None' is not affiliated with official vendor domain. HIGHPackage registered recently (43 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 34 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	52d	19	3	↑0.4/day	Possible Squatted Stub	langchain	pypi	0.6.1	—	—
Package purpose: LangChain retriever integration for MemStrata Conversational Memory Claimed homepage: https://pypi.org/project/memstrata-langchain-conversational/ Matched naming pattern: memstrata-langchain-conversational Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 52 Registry downloads: 19/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 3 lines, 211 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'memstrata-langchain-conversational' matches AI hallucination template [memstrata] + [langchain] + [conversational]. HIGHClaims critical enterprise brand identity ('LANGCHAIN'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (47 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (3 LOC, 1 file(s), 211 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	52d	28	6	↑0.5/day	Possible Squatted Stub	ollama	pypi	0.0.0	FastPluggy Team	—
Package purpose: Placeholder to reserve this name — not the real package. Claimed homepage: https://pypi.org/project/fastpluggy-ollama-connector/ Matched naming pattern: fastpluggy-ollama-connector Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 52 Registry downloads: 28/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 6 lines, 342 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'fastpluggy-ollama-connector' matches AI hallucination template [fastpluggy] + [ollama] + [connector]. HIGHClaims critical enterprise brand identity ('OLLAMA'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (6 LOC, 1 file(s), 342 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	53d	38	8	↑0.7/day	Possible Squatted Stub	langchain	pypi	0.1.0	Rawson Consulting B.V.	—
Package purpose: Turn a prompt + a field schema into validated, typed JSON (Instructor over Gemini 2.5 Flash on Vertex AI). Claimed homepage: https://pypi.org/project/gosce-structured-output-mcp-agent-langchain-core/ Matched naming pattern: gosce-langchain-output Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 53 Registry downloads: 38/month, 12/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 456 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'gosce-structured-output-mcp-agent-langchain-core' matches AI hallucination template [gosce] + [langchain] + [output]. HIGHClaims critical enterprise brand identity ('LANGCHAIN'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 456 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	55d	33	8	↑0.6/day	Possible Squatted Stub	groq	pypi	0.1.0	Rawson Consulting B.V.	—
Package purpose: Turn a prompt + a field schema into validated, typed JSON (Instructor over Gemini 2.5 Flash on Vertex AI). Claimed homepage: https://pypi.org/project/gosce-traced-structured-output-agent-groq/ Matched naming pattern: gosce-groq-structured Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 55 Registry downloads: 33/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 413 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'gosce-traced-structured-output-agent-groq' matches AI hallucination template [gosce] + [groq] + [structured]. HIGHClaims critical enterprise brand identity ('GROQ'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (54 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 413 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	55d	120	0	↑2.2/day	Possible Squatted Stub	crewai	pypi	0.1.1	SAIHM	—
Package purpose: Compatibility shim — saihm-crewai is now the consolidated saihm-adapters[crewai]. Import from saihm_adapters (was saihm_memory). Claimed homepage: https://pypi.org/project/saihm-crewai/ Matched naming pattern: python-crewai-saihm Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 55 Registry downloads: 120/month, 15/week (MODERATE_USAGE) Codebase size: 0 lines, 0 Bytes across 12 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'saihm-crewai' matches AI hallucination template [python] + [crewai] + [saihm]. HIGHClaims critical enterprise brand identity ('CREWAI'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (36 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (0 LOC, 12 file(s), 0 bytes). INFOModerate community usage with 120 monthly downloads. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	56d	0	0	↑0.0/day	Possible Squatted Stub	langgraph	pypi	0.1.2	SAIHM	—
Package purpose: Compatibility shim — saihm-langgraph is now the consolidated saihm-adapters[langgraph]. Import from saihm_adapters (was saihm_memory). Claimed homepage: https://pypi.org/project/saihm-langgraph/ Matched naming pattern: python-langgraph-saihm Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 56 Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 0 lines, 0 Bytes across 12 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'saihm-langgraph' matches AI hallucination template [python] + [langgraph] + [saihm]. HIGHClaims critical enterprise brand identity ('LANGGRAPH'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (37 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (0 LOC, 12 file(s), 0 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	56d	32	6	↑0.6/day	Possible Squatted Stub	claude	pypi	0.0.0	FastPluggy Team	—
Package purpose: Placeholder to reserve this name — not the real package. Claimed homepage: https://pypi.org/project/fastpluggy-claude-monitor/ Matched naming pattern: fastpluggy-claude-monitor Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 56 Registry downloads: 32/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 6 lines, 338 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'fastpluggy-claude-monitor' matches AI hallucination template [fastpluggy] + [claude] + [monitor]. HIGHClaims critical enterprise brand identity ('CLAUDE'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (39 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (6 LOC, 1 file(s), 338 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	57d	18	15	↑0.3/day	Possible Squatted Stub	ollama	npm	0.1.0	—	—
Package purpose: Ollama integration providing ollama utility for Pi Matched naming pattern: pi-ollama-ollama Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 57 Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'pi-cloud-ollama' matches AI hallucination template [pi] + [ollama] + [ollama]. HIGHClaims critical enterprise brand identity ('OLLAMA'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). HIGHPackage registered recently (48 days ago) during the active AI hallucination slopsquatting wave. HIGHMISSING_SOURCE_REPOSITORY_URL HIGHVERSION_NOT_FOUND MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes). Static code signals: MISSING_SOURCE_REPOSITORY_URL VERSION_NOT_FOUND Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	75	57d	13,077	878	↑229.4/day	Very Risky	donsetch	npm	4.1.1	Bishesh Bhandari	—	🪝 🌐
Package purpose: MCP server that gives AI agents the web: fetch, search, crawl and screenshot from one local Rust binary. Zero API keys, zero accounts, Chrome-true TLS. Claimed homepage: https://github.com/dondai44423/donsetch#readme Matched naming pattern: npm-donsetch-general Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 57 Registry downloads: 13077/month, 3269/week (HIGH_COMMUNITY_ADOPTION) Codebase size: 878 lines, 35.5 kB across 3 files (MODERATE_CODEBASE) Automated signals flagged: INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. HIGHPackage registered recently (45 days ago) during the active AI hallucination slopsquatting wave. HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js' HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/donsetch.js:15 (+1 more occurrence(s) elsewhere) HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/donsetch.js:39 (+2 more occurrence(s) elsewhere) HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:210 (+1 more occurrence(s) elsewhere) HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:19 CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets Static code signals: LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js' SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/donsetch.js:15 (+1 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/donsetch.js:39 (+2 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:210 (+1 more occurrence(s) elsewhere) SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:19 INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	75	60d	0	8	↑0.0/day	Possible Squatted Stub	langchain	pypi	0.2.1	—	—
Package purpose: Fidacy action firewall for LangChain tool calls. Convention-named entry point: the implementation lives in fidacy-langchain, and this package re-exports it unchanged. Claimed homepage: https://pypi.org/project/langchain-fidacy/ Matched naming pattern: python-langchain-fidacy Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 60 Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 483 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'langchain-fidacy' matches AI hallucination template [python] + [langchain] + [fidacy]. HIGHClaims critical enterprise brand identity ('LANGCHAIN'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (44 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 483 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	60d	19	25	↑0.3/day	Possible Squatted Stub	llamaindex	pypi	0.1.0	— hello@trizenx.com	trizenx.com
Package purpose: LlamaIndex integration for viparse — read Vietnamese documents, legacy encodings included Claimed homepage: https://pypi.org/project/viparse-llamaindex/ Matched naming pattern: python-llamaindex-viparse Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 60 Registry downloads: 19/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 25 lines, 1.6 kB across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'viparse-llamaindex' matches AI hallucination template [python] + [llamaindex] + [viparse]. HIGHClaims critical enterprise brand identity ('LLAMAINDEX'). HIGHPublisher email 'hello@trizenx.com' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (44 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (25 LOC, 1 file(s), 1564 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	61d	1,824	5,924	↑29.9/day	Very Risky	jui	npm	2.12.6	—	—	🪝 🌐
Package purpose: MCP server for JsonUI project management - wraps jui and jsonui-doc CLIs plus component spec lookup Matched naming pattern: npm-jui-general Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 61 Registry downloads: 1824/month, 456/week (ACTIVE_COMMUNITY_USE) Codebase size: 5924 lines, 256.7 kB across 104 files (LARGE_CODEBASE) Automated signals flagged: INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave. HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/fetch-definitions.js' HIGHMISSING_SOURCE_REPOSITORY_URL HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cli_runner.js:9 (+7 more occurrence(s) elsewhere) HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/fetch-definitions.js:58 CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/fetch-definitions.js, which makes network calls and executes/decodes/reads secrets INFOSubstantial functional codebase (5924 LOC across 104 file(s)). Static code signals: LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/fetch-definitions.js' MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cli_runner.js:9 (+7 more occurrence(s) elsewhere) SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/fetch-definitions.js:58 INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/fetch-definitions.js, which makes network calls and executes/decodes/reads secrets Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	75	61d	46	0	↑0.8/day	Possible Squatted Stub	gemini	pypi	0.0.1	— teng.lin@gmail.com	gmail.com
Package purpose: Unofficial Python client for Google Gemini Notebook (formerly NotebookLM) - alias of gemini-notebook-py. Claimed homepage: https://pypi.org/project/gemini-notebook/ Matched naming pattern: python-gemini-notebook Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 61 Registry downloads: 46/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 0 lines, 0 Bytes across 4 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'gemini-notebook' matches AI hallucination template [python] + [gemini] + [notebook]. HIGHClaims critical enterprise brand identity ('GEMINI'). HIGHPublisher email 'teng.lin@gmail.com' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (47 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (0 LOC, 4 file(s), 0 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	61d	44	0	↑0.7/day	Possible Squatted Stub	gemini	pypi	0.0.1	— teng.lin@gmail.com	gmail.com
Package purpose: Unofficial Python client for Google Gemini Notebook (formerly NotebookLM) - canonical distribution from 0.9.0. Claimed homepage: https://pypi.org/project/gemini-notebook-py/ Matched naming pattern: gemini-gemini-py Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 61 Registry downloads: 44/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 0 lines, 0 Bytes across 4 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('GEMINI'). HIGHPublisher email 'teng.lin@gmail.com' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (46 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (0 LOC, 4 file(s), 0 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	62d	11,541	568	↑186.1/day	Very Risky	@byteplus/ark	npm	1.0.33	—	—	🪝 🌐
Package purpose: BytePlus Ark command-line interface Claimed homepage: https://github.com/byteplus-sdk/ark-cli#readme Matched naming pattern: npm-@byteplus/ark-general Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 62 Registry downloads: 11541/month, 2885/week (HIGH_COMMUNITY_ADOPTION) Codebase size: 568 lines, 21.3 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave. HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js' HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/postinstall.js:14 (+1 more occurrence(s) elsewhere) HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.js:426 (+1 more occurrence(s) elsewhere) HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/postinstall.js:10 HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.js:55 CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/postinstall.js, which makes network calls and executes/decodes/reads secrets Static code signals: LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js' SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/postinstall.js:14 (+1 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.js:426 (+1 more occurrence(s) elsewhere) SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/postinstall.js:10 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.js:55 INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/postinstall.js, which makes network calls and executes/decodes/reads secrets Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	75	62d	29	8	↑0.5/day	Possible Squatted Stub	openai	pypi	0.1.0	Rawson Consulting B.V.	—
Package purpose: Turn a prompt + a field schema into validated, typed JSON (Instructor over Gemini 2.5 Flash on Vertex AI). Claimed homepage: https://pypi.org/project/gosce-structured-output-agent-openai/ Matched naming pattern: gosce-openai-output Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 62 Registry downloads: 29/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 417 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'gosce-structured-output-agent-openai' matches AI hallucination template [gosce] + [openai] + [output]. HIGHClaims critical enterprise brand identity ('OPENAI'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 417 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	64d	31	2	↑0.5/day	Possible Squatted Stub	hf	pypi	0.0.1	—	—
Package purpose: Placeholder for a work-in-progress tool. Not yet functional. Claimed homepage: https://pypi.org/project/hf-pipe/ Matched naming pattern: python-hf-pipe Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 64 Registry downloads: 31/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 2 lines, 99 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'hf-pipe' matches AI hallucination template [python] + [hf] + [pipe]. HIGHClaims critical enterprise brand identity ('HF'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (54 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 99 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	65d	—	—	—	Unverified Signal	—	npm	latest	—	—	🪝
Package purpose: Real-time tracing and prompt-refinement companion for GitHub Copilot CLI and VS Code Copilot — tracks tokens, AI credits, tool calls, and refined prompts with console and web UI Static code signals: SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/db.js:7 (+2 more occurrence(s) elsewhere) CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/dist/setup.js:196 SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/setup.js:264 (+1 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	75	65d	—	—	—	Unverified Signal	—	npm	latest	Kay Plößer	—	🪝 🌐
Package purpose: Nebius AI Cloud resource providers for Alchemy Static code signals: SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/schemas/google/protobuf/any.ts:217 (+11 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/modules/resources/shared/bind-host.ts:189 (+4 more occurrence(s) elsewhere) SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/modules/resources/ai/v1/bindings.ts:332 (+3 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/modules/resources/compute/v1/hosted.ts:660 CREDENTIAL_PATH_HARVESTING: 'AWS Credentials (~/.aws/credentials)' found in package/modules/auth/secure-credentials.ts:6 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	75	65d	283	23,465	↑4.4/day	Very Risky	alayrasystems	npm	latest	—	—	🪝 🗄️
Package purpose: AI key pool proxy — route Claude, Gemini, GPT through one OpenAI-compatible endpoint Claimed homepage: https://github.com/Alayra-Systems-Pvt-Limited/Alayra-Nexus#readme Matched naming pattern: node-alayrasystems-nexus Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 65 Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 283/month, 70/week (MODERATE_USAGE) Codebase size: 23465 lines, 1.5 MB across 156 files (LARGE_CODEBASE) Automated signals flagged: INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. HIGHPackage registered recently (61 days ago) during the active AI hallucination slopsquatting wave. HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/npm/postinstall.js' HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/services/adminAuth.service.js:86 (+33 more occurrence(s) elsewhere) HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/lib/admission.js:143 (+4 more occurrence(s) elsewhere) HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/services/backupRecovery.service.js:100 (+1 more occurrence(s) elsewhere) HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/cli.js:596 (+3 more occurrence(s) elsewhere) HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/npm/postinstall.js:25 Static code signals: LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/npm/postinstall.js' SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/services/adminAuth.service.js:86 (+33 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/lib/admission.js:143 (+4 more occurrence(s) elsewhere) SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/services/backupRecovery.service.js:100 (+1 more occurrence(s) elsewhere) SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/cli.js:596 (+3 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/npm/postinstall.js:25 SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/npm/postinstall.js:62 CREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in package/dist/lib/safeFetch.js:21 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	75	66d	36	8	↑0.5/day	Possible Squatted Stub	anthropic	pypi	0.1.0	Rawson Consulting B.V.	—
Package purpose: Proxy Gemini (Vertex AI) completions wrapped in OpenTelemetry trace spans; returns the answer plus the trace/span id. Claimed homepage: https://pypi.org/project/gosce-traced-llm-proxy-anthropic/ Matched naming pattern: gosce-anthropic-llm Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 66 Registry downloads: 36/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 431 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'gosce-traced-llm-proxy-anthropic' matches AI hallucination template [gosce] + [anthropic] + [llm]. HIGHClaims critical enterprise brand identity ('ANTHROPIC'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (54 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 431 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	66d	—	—	—	Unverified Signal	—	npm	latest	—	—	🪝 🌐
Package purpose: Agent-ready Univer Workspace automation powered by the Univer SDK. Static code signals: SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/chunks/daemon-identity-BU-V14Lw.js:55 (+1 more occurrence(s) elsewhere) SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/runtime/daemon.js:81 (+1 more occurrence(s) elsewhere) SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/dist/runtime/daemon.js:91 (+1 more occurrence(s) elsewhere) SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/chunks/dist-CG-jSGSu.js:35997 (+1 more occurrence(s) elsewhere) SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/render-runtime/assets/es-DB0BBciv.js:1 SUSPICIOUS_OBFUSCATION: 'Obfuscator Dictionary Lookup Pattern' found in package/dist/chunks/worker-child.mjs:1 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	75	71d	16	12	↑0.2/day	Possible Squatted Stub	openai	pypi	0.1.0	Ramprasad Gaddam	—
Package purpose: Sign OpenAI agent tool calls with Vouch Credentials. Claimed homepage: https://pypi.org/project/vouch-openai/ Matched naming pattern: python-openai-vouch Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 71 Registry downloads: 16/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 12 lines, 431 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'vouch-openai' matches AI hallucination template [python] + [openai] + [vouch]. HIGHClaims critical enterprise brand identity ('OPENAI'). HIGHPublisher email 'None' is not affiliated with official vendor domain. HIGHPackage registered recently (68 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (12 LOC, 1 file(s), 431 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	71d	20	1,057	↑0.3/day	SUSPICIOUS	aws	pypi	0.1.0	—	—	🪝
Package purpose: Safely scan and purge unwanted resources across AWS accounts and regions to eliminate surprise billing. Claimed homepage: https://pypi.org/project/aws-eraser/ Matched naming pattern: python-aws-eraser Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 71 Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 20/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 1057 lines, 62.0 kB across 1 file (LARGE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'aws-eraser' matches AI hallucination template [python] + [aws] + [eraser]. HIGHClaims critical enterprise brand identity ('AWS'). HIGHPublisher email 'None' is not affiliated with official vendor domain. HIGHPackage registered recently (68 days ago) during the active AI hallucination slopsquatting wave. CRITICALMODULE_TOPLEVEL_EXECUTION: 'os.system' executed at module scope (runs on import) in aws_eraser-0.1.0/aws_eraser.py:34 HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in aws_eraser-0.1.0/aws_eraser.py:34 INFOSubstantial functional codebase (1057 LOC across 1 file(s)). MEDIUMPackage executes code at install/import time, but no exfiltration destination, credential access, encoded payload, obfuscation, shell cradle, or persistence primitive corroborates a weaponized payload. Downgraded from MALICIOUS to SUSPICIOUS pending manual review. Static code signals: MODULE_TOPLEVEL_EXECUTION: 'os.system' executed at module scope (runs on import) in aws_eraser-0.1.0/aws_eraser.py:34 SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in aws_eraser-0.1.0/aws_eraser.py:34 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	72d	35	8	↑0.5/day	Possible Squatted Stub	openai	pypi	0.1.0	Rawson Consulting B.V.	—
Package purpose: Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing. Claimed homepage: https://pypi.org/project/gosce-llm-orchestration-agent-openai/ Matched naming pattern: gosce-openai-orchestration Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 72 Registry downloads: 35/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 438 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'gosce-llm-orchestration-agent-openai' matches AI hallucination template [gosce] + [openai] + [orchestration]. HIGHClaims critical enterprise brand identity ('OPENAI'). HIGHPublisher email 'None' is not affiliated with official vendor domain. HIGHPackage registered recently (70 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 438 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	73d	—	—	—	Unverified Signal	—	npm	latest	Stephen Gardner	—	🪝
Package purpose: Keep working across Claude usage limits: run Claude Code through ccx and it transparently switches to another of your accounts when one hits its cap. Static code signals: SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/config/config.js:54 (+13 more occurrence(s) elsewhere) CREDENTIAL_PATH_HARVESTING: 'Browser Vaults & Password Databases' found in package/dist/usage/dead-login-store.js:32 SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/commands/doctor.js:94 (+4 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/dist/launcher/pty-session.js:15 (+1 more occurrence(s) elsewhere) CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/dist/session/session-dir.js:105 (+3 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	75	74d	0	8	↑0.0/day	Possible Squatted Stub	langgraph	pypi	0.1.0	Rawson Consulting B.V.	—
Package purpose: Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing. Claimed homepage: https://pypi.org/project/gosce-llm-orchestration-agent-langgraph/ Matched naming pattern: gosce-langgraph-orchestration Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 74 Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 426 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'gosce-llm-orchestration-agent-langgraph' matches AI hallucination template [gosce] + [langgraph] + [orchestration]. HIGHClaims critical enterprise brand identity ('LANGGRAPH'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 426 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	74d	17	17	↑0.2/day	Possible Squatted Stub	langgraph	pypi	0.1.0	—	—
Package purpose: LangGraph BaseStore backed by inspeximus: drop-in for InMemoryStore, plus queryable value history and receipted erasure. Claimed homepage: https://pypi.org/project/langgraph-store-inspeximus/ Matched naming pattern: langgraph-langgraph-inspeximus Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 74 Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 17 lines, 1.1 kB across 1 file (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('LANGGRAPH'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (50 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (17 LOC, 1 file(s), 1135 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	74d	22	14	↑0.3/day	Possible Squatted Stub	langgraph	pypi	0.1.0	—	—
Package purpose: LangGraph checkpointer backed by inspeximus: durable thread state with queryable value history and receipted erasure. Claimed homepage: https://pypi.org/project/langgraph-checkpoint-inspeximus/ Matched naming pattern: langgraph-langgraph-inspeximus Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 74 Registry downloads: 22/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 14 lines, 925 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('LANGGRAPH'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (50 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (14 LOC, 1 file(s), 925 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	77d	17	8	↑0.2/day	Possible Squatted Stub	langchain	pypi	0.1.0	Rawson Consulting B.V.	—
Package purpose: Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing. Claimed homepage: https://pypi.org/project/gosce-llm-observability-orchestration-agent-langchain-community/ Matched naming pattern: gosce-langchain-observability Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 77 Registry downloads: 17/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 467 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'gosce-llm-observability-orchestration-agent-langchain-community' matches AI hallucination template [gosce] + [langchain] + [observability]. HIGHClaims critical enterprise brand identity ('LANGCHAIN'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (54 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 467 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	77d	—	—	—	Unverified Signal	—	npm	latest	Wolf Logic	—	🪝 🌐
Package purpose: Headless Claude Code runner speaking the Wolfpack agent container contract Static code signals: MISSING_SOURCE_REPOSITORY_URL CREDENTIAL_PATH_HARVESTING: 'Registry / Git Configuration (~/.yarnrc, ~/.gitconfig)' found in package/dist/env.js:11 CREDENTIAL_PATH_HARVESTING: 'Registry / Git Credentials (~/.npmrc, ~/.pypirc)' found in package/dist/env.js:10 (+1 more occurrence(s) elsewhere) SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/env.js:47 (+3 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/env.js:42 (+4 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	75	78d	21	8	↑0.3/day	Possible Squatted Stub	openai	pypi	0.1.0	Rawson Consulting B.V.	—
Package purpose: Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing. Claimed homepage: https://pypi.org/project/gosce-llm-orchestration-agent-langchain-openai/ Matched naming pattern: gosce-openai-orchestration Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 78 Registry downloads: 21/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 448 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'gosce-llm-orchestration-agent-langchain-openai' matches AI hallucination template [gosce] + [openai] + [orchestration]. HIGHClaims critical enterprise brand identity ('OPENAI'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (56 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 448 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	79d	0	8	↑0.0/day	Possible Squatted Stub	openai	pypi	0.1.0	Rawson Consulting B.V.	—
Package purpose: JWT-gated LLM gateway: authenticate (bcrypt/JWT), then run a LangChain-on-Vertex Gemini completion. Unauthenticated calls are rejected. Claimed homepage: https://pypi.org/project/gosce-authenticated-mcp-agent-openai/ Matched naming pattern: gosce-openai-mcp Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 79 Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 414 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'gosce-authenticated-mcp-agent-openai' matches AI hallucination template [gosce] + [openai] + [mcp]. HIGHClaims critical enterprise brand identity ('OPENAI'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (57 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 414 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	81d	18	8	↑0.2/day	Possible Squatted Stub	langchain	pypi	0.1.0	Rawson Consulting B.V.	—
Package purpose: Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing. Claimed homepage: https://pypi.org/project/gosce-llm-orchestration-agent-langchain-core/ Matched naming pattern: gosce-langchain-orchestration Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 81 Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 422 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'gosce-llm-orchestration-agent-langchain-core' matches AI hallucination template [gosce] + [langchain] + [orchestration]. HIGHClaims critical enterprise brand identity ('LANGCHAIN'). HIGHPublisher email 'None' is not affiliated with official vendor domain. HIGHPackage registered recently (60 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 422 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	82d	23	8	↑0.3/day	Possible Squatted Stub	anthropic	pypi	0.1.0	Rawson Consulting B.V.	—
Package purpose: Google-OAuth-gated LLM gateway: verify a Google ID token, then run a Gemini (Vertex AI) completion for the verified caller. Claimed homepage: https://pypi.org/project/gosce-authenticated-llm-agent-anthropic/ Matched naming pattern: gosce-anthropic-llm Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 82 Registry downloads: 23/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 441 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'gosce-authenticated-llm-agent-anthropic' matches AI hallucination template [gosce] + [anthropic] + [llm]. HIGHClaims critical enterprise brand identity ('ANTHROPIC'). HIGHPublisher email 'None' is not affiliated with official vendor domain. HIGHPackage registered recently (62 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 441 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	82d	—	—	—	Unverified Signal	—	npm	latest	Philipp Paulik	—	🪝
Package purpose: Play Tetris in a split pane beside Claude Code — auto-pauses when Claude is done, resumes on your next prompt. Static code signals: SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/game/autoshift.mjs:88 (+7 more occurrence(s) elsewhere) CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/scripts/install.mjs:4 (+1 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/launch.mjs:29 (+2 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	75	82d	19	9	↑0.2/day	Possible Squatted Stub	web3	pypi	1.0.1	—	—
Package purpose: Production Web3 utility library for Ethereum mainnet DeFi operations Claimed homepage: https://pypi.org/project/deckard-web3-utils-v2/ Matched naming pattern: deckard-web3-utils Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 82 Registry downloads: 19/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 9 lines, 321 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'deckard-web3-utils-v2' matches AI hallucination template [deckard] + [web3] + [utils]. HIGHClaims critical enterprise brand identity ('WEB3'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (62 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (9 LOC, 1 file(s), 321 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	84d	0	8	↑0.0/day	Possible Squatted Stub	anthropic	pypi	0.1.1	Rawson Consulting B.V.	—
Package purpose: Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing. Claimed homepage: https://pypi.org/project/gosce-llm-orchestration-agent-langchain-anthropic/ Matched naming pattern: gosce-anthropic-orchestration Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 84 Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 451 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'gosce-llm-orchestration-agent-langchain-anthropic' matches AI hallucination template [gosce] + [anthropic] + [orchestration]. HIGHClaims critical enterprise brand identity ('ANTHROPIC'). HIGHPublisher email 'None' is not affiliated with official vendor domain. HIGHPackage registered recently (64 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 451 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	85d	—	—	—	Unverified Signal	—	npm	latest	—	—	🪝 🌐
Package purpose: Grok Build provider adapter for Demi (reuses ~/.grok OAuth session). Static code signals: SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/index.mjs:289 SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.mjs:225 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.mjs:646 SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/dist/index.mjs:289 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	75	86d	16,478	786	↑191.6/day	Very Risky	@dptech	npm	2.7.5	DP Technology	—	🪝 🌐
Package purpose: CLI tool for Bohrium scientific computing platform Matched naming pattern: npm-@dptech-general Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 86 Registry downloads: 16478/month, 4119/week (HIGH_COMMUNITY_ADOPTION) Codebase size: 786 lines, 38.2 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. HIGHPackage registered recently (72 days ago) during the active AI hallucination slopsquatting wave. HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.js' HIGHMISSING_SOURCE_REPOSITORY_URL HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postinstall.js:9 HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/postinstall.js:23 HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/run.js:2 CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/postinstall.js, which makes network calls and executes/decodes/reads secrets Static code signals: LIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.js' MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postinstall.js:9 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/postinstall.js:23 SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/run.js:2 INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/postinstall.js, which makes network calls and executes/decodes/reads secrets Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	75	86d	0	8	↑0.0/day	Possible Squatted Stub	langchain	pypi	0.1.0	Rawson Consulting B.V.	—
Package purpose: JWT-gated LLM gateway: authenticate (bcrypt/JWT), then run a LangChain-on-Vertex Gemini completion. Unauthenticated calls are rejected. Claimed homepage: https://pypi.org/project/gosce-authenticated-mcp-agent-langchain-core/ Matched naming pattern: gosce-langchain-mcp Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 86 Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 422 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'gosce-authenticated-mcp-agent-langchain-core' matches AI hallucination template [gosce] + [langchain] + [mcp]. HIGHClaims critical enterprise brand identity ('LANGCHAIN'). HIGHPublisher email 'None' is not affiliated with official vendor domain. HIGHPackage registered recently (67 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 422 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	86d	26	15	↑0.3/day	Possible Squatted Stub	claude	npm	0.1.0	—	—
Package purpose: Claude integration providing basecamp utility for Node Matched naming pattern: node-claude-basecamp Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 86 Registry downloads: 26/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'claude-basecamp' matches AI hallucination template [node] + [claude] + [basecamp]. HIGHClaims critical enterprise brand identity ('CLAUDE'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). HIGHPackage registered recently (82 days ago) during the active AI hallucination slopsquatting wave. HIGHMISSING_SOURCE_REPOSITORY_URL HIGHVERSION_NOT_FOUND MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes). Static code signals: MISSING_SOURCE_REPOSITORY_URL VERSION_NOT_FOUND Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	75	87d	—	—	—	Unverified Signal	—	npm	latest	d.bilukcha	d.bilukcha	🪝 🌐
Package purpose: MCP server for Perplexity AI Pro — deep web search, follow-ups, threads and export via your browser session cookie Static code signals: SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/client.js:147 SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/client.js:57 SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/dist/client.js:147 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:6 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	75	87d	27	1	↑0.3/day	Possible Squatted Stub	aws	pypi	0.0.1	Reza Spagnolo	—
Package purpose: Coming soon. Claimed homepage: https://pypi.org/project/aws-benchmark/ Matched naming pattern: python-aws-benchmark Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 87 Registry downloads: 27/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 1 lines, 19 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'aws-benchmark' matches AI hallucination template [python] + [aws] + [benchmark]. HIGHClaims critical enterprise brand identity ('AWS'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). HIGHPackage registered recently (69 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 19 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	87d	0	1	↑0.0/day	Possible Squatted Stub	aws	pypi	0.0.1	Reza Spagnolo	—
Package purpose: Coming soon. Claimed homepage: https://pypi.org/project/aws-bench-utils/ Matched naming pattern: aws-aws-utils Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 87 Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 1 lines, 19 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('AWS'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). HIGHPackage registered recently (69 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 19 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	75	87d	28	1	↑0.3/day	Possible Squatted Stub	aws	pypi	0.0.1	Reza Spagnolo	—
Package purpose: Coming soon. Claimed homepage: https://pypi.org/project/aws-bench-datasets/ Matched naming pattern: aws-aws-datasets Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 87 Registry downloads: 28/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 1 lines, 19 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('AWS'). HIGHPublisher email 'None' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). HIGHPackage registered recently (69 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 19 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →

Package: npm · latest

Author: Unknown

Package purpose: Claude integration providing subscription utility for Dsh

Official vendor account: No

Days since publish: 47

Registry downloads: 615/month

Codebase size: 15 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'dsh-claude-subscription' matches AI hallucination template [dsh] + [claude] + [subscription].
HIGHClaims critical enterprise brand identity ('CLAUDE').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
HIGHPackage registered recently (45 days ago) during the active AI hallucination slopsquatting wave.
HIGHMISSING_SOURCE_REPOSITORY_URL
MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
INFOModerate community usage with 615 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: pypi · 0.12.1.post1

Author: Unknown (m@matous.dev)

Package purpose: A tool to perform richness-extent-grain analyses

Claimed homepage: https://pypi.org/project/seal-tool/

Official vendor account: No

Days since publish: 48

Code-only verdict: Very Risky

Registry downloads: 50/month

Codebase size: 2882 lines (LARGE_CODEBASE)

Automated signals flagged:

MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (39 days ago) during the active AI hallucination slopsquatting wave.
CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in seal_tool-0.12.1.post1/src/bundle.py:23
HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in seal_tool-0.12.1.post1/src/bundle.py:23
INFOSubstantial functional codebase (2882 LOC across 12 file(s)).
MEDIUMPackage executes code at install/import time, but no exfiltration destination, credential access, encoded payload, obfuscation, shell cradle, or persistence primitive corroborates a weaponized payload. Downgraded from MALICIOUS to SUSPICIOUS pending manual review.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.0.1

Author: cypwin

Package purpose: Session recaps and digests for coding-agent work — consolidates past sessions into what to pick up next.

Claimed homepage: https://pypi.org/project/session-ledger/

Official vendor account: No

Days since publish: 48

Registry downloads: 23/month

Codebase size: 3 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'session-ledger' matches AI hallucination template [python] + [ledger] + [session].
HIGHClaims critical enterprise brand identity ('LEDGER').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (41 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (3 LOC, 1 file(s), 200 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Unknown

Package purpose: LangGraph adapters for tracegc

Claimed homepage: https://pypi.org/project/tracegc-langgraph/

Official vendor account: No

Days since publish: 50

Registry downloads: 13/month

Codebase size: 0 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'tracegc-langgraph' matches AI hallucination template [python] + [langgraph] + [tracegc].
HIGHClaims critical enterprise brand identity ('LANGGRAPH').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
HIGHPackage registered recently (43 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 34 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.6.1

Author: Unknown

Package purpose: LangChain retriever integration for MemStrata Conversational Memory

Claimed homepage: https://pypi.org/project/memstrata-langchain-conversational/

Official vendor account: No

Days since publish: 52

Registry downloads: 19/month

Codebase size: 3 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'memstrata-langchain-conversational' matches AI hallucination template [memstrata] + [langchain] + [conversational].
HIGHClaims critical enterprise brand identity ('LANGCHAIN').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (47 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (3 LOC, 1 file(s), 211 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.0.0

Author: FastPluggy Team

Package purpose: Placeholder to reserve this name — not the real package.

Claimed homepage: https://pypi.org/project/fastpluggy-ollama-connector/

Official vendor account: No

Days since publish: 52

Registry downloads: 28/month

Codebase size: 6 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'fastpluggy-ollama-connector' matches AI hallucination template [fastpluggy] + [ollama] + [connector].
HIGHClaims critical enterprise brand identity ('OLLAMA').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (6 LOC, 1 file(s), 342 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Rawson Consulting B.V.

Package purpose: Turn a prompt + a field schema into validated, typed JSON (Instructor over Gemini 2.5 Flash on Vertex AI).

Claimed homepage: https://pypi.org/project/gosce-structured-output-mcp-agent-langchain-core/

Official vendor account: No

Days since publish: 53

Registry downloads: 38/month

Codebase size: 8 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'gosce-structured-output-mcp-agent-langchain-core' matches AI hallucination template [gosce] + [langchain] + [output].
HIGHClaims critical enterprise brand identity ('LANGCHAIN').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 456 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Rawson Consulting B.V.

Package purpose: Turn a prompt + a field schema into validated, typed JSON (Instructor over Gemini 2.5 Flash on Vertex AI).

Claimed homepage: https://pypi.org/project/gosce-traced-structured-output-agent-groq/

Official vendor account: No

Days since publish: 55

Registry downloads: 33/month

Codebase size: 8 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'gosce-traced-structured-output-agent-groq' matches AI hallucination template [gosce] + [groq] + [structured].
HIGHClaims critical enterprise brand identity ('GROQ').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (54 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 413 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.1

Author: SAIHM

Package purpose: Compatibility shim — saihm-crewai is now the consolidated saihm-adapters[crewai]. Import from saihm_adapters (was saihm_memory).

Claimed homepage: https://pypi.org/project/saihm-crewai/

Official vendor account: No

Days since publish: 55

Registry downloads: 120/month

Codebase size: 0 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'saihm-crewai' matches AI hallucination template [python] + [crewai] + [saihm].
HIGHClaims critical enterprise brand identity ('CREWAI').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (36 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (0 LOC, 12 file(s), 0 bytes).
INFOModerate community usage with 120 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.2

Author: SAIHM

Package purpose: Compatibility shim — saihm-langgraph is now the consolidated saihm-adapters[langgraph]. Import from saihm_adapters (was saihm_memory).

Claimed homepage: https://pypi.org/project/saihm-langgraph/

Official vendor account: No

Days since publish: 56

Registry downloads: 0/month

Codebase size: 0 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'saihm-langgraph' matches AI hallucination template [python] + [langgraph] + [saihm].
HIGHClaims critical enterprise brand identity ('LANGGRAPH').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (37 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (0 LOC, 12 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.0.0

Author: FastPluggy Team

Package purpose: Placeholder to reserve this name — not the real package.

Claimed homepage: https://pypi.org/project/fastpluggy-claude-monitor/

Official vendor account: No

Days since publish: 56

Registry downloads: 32/month

Codebase size: 6 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'fastpluggy-claude-monitor' matches AI hallucination template [fastpluggy] + [claude] + [monitor].
HIGHClaims critical enterprise brand identity ('CLAUDE').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (39 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (6 LOC, 1 file(s), 338 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: npm · 0.1.0

Author: Unknown

Package purpose: Ollama integration providing ollama utility for Pi

Official vendor account: No

Days since publish: 57

Registry downloads: 18/month

Codebase size: 15 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'pi-cloud-ollama' matches AI hallucination template [pi] + [ollama] + [ollama].
HIGHClaims critical enterprise brand identity ('OLLAMA').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
HIGHPackage registered recently (48 days ago) during the active AI hallucination slopsquatting wave.
HIGHMISSING_SOURCE_REPOSITORY_URL
HIGHVERSION_NOT_FOUND
MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 4.1.1

Author: Bishesh Bhandari

Package purpose: MCP server that gives AI agents the web: fetch, search, crawl and screenshot from one local Rust binary. Zero API keys, zero accounts, Chrome-true TLS.

Claimed homepage: https://github.com/dondai44423/donsetch#readme

Official vendor account: No

Days since publish: 57

Registry downloads: 13077/month

Codebase size: 878 lines (MODERATE_CODEBASE)

Automated signals flagged:

INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
HIGHPackage registered recently (45 days ago) during the active AI hallucination slopsquatting wave.
HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/donsetch.js:15 (+1 more occurrence(s) elsewhere)
HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/donsetch.js:39 (+2 more occurrence(s) elsewhere)
HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:210 (+1 more occurrence(s) elsewhere)
HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:19
CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: pypi · 0.2.1

Author: Unknown

Package purpose: Fidacy action firewall for LangChain tool calls. Convention-named entry point: the implementation lives in fidacy-langchain, and this package re-exports it unchanged.

Claimed homepage: https://pypi.org/project/langchain-fidacy/

Official vendor account: No

Days since publish: 60

Registry downloads: 0/month

Codebase size: 8 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'langchain-fidacy' matches AI hallucination template [python] + [langchain] + [fidacy].
HIGHClaims critical enterprise brand identity ('LANGCHAIN').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (44 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 483 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Unknown (hello@trizenx.com)

Package purpose: LlamaIndex integration for viparse — read Vietnamese documents, legacy encodings included

Claimed homepage: https://pypi.org/project/viparse-llamaindex/

Official vendor account: No

Days since publish: 60

Registry downloads: 19/month

Codebase size: 25 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'viparse-llamaindex' matches AI hallucination template [python] + [llamaindex] + [viparse].
HIGHClaims critical enterprise brand identity ('LLAMAINDEX').
HIGHPublisher email 'hello@trizenx.com' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (44 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (25 LOC, 1 file(s), 1564 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: npm · 2.12.6

Author: Unknown

Package purpose: MCP server for JsonUI project management - wraps jui and jsonui-doc CLIs plus component spec lookup

Official vendor account: No

Days since publish: 61

Registry downloads: 1824/month

Codebase size: 5924 lines (LARGE_CODEBASE)

Automated signals flagged:

INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave.
HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/fetch-definitions.js'
HIGHMISSING_SOURCE_REPOSITORY_URL
HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cli_runner.js:9 (+7 more occurrence(s) elsewhere)
HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/fetch-definitions.js:58
CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/fetch-definitions.js, which makes network calls and executes/decodes/reads secrets
INFOSubstantial functional codebase (5924 LOC across 104 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: pypi · 0.0.1

Author: Unknown (teng.lin@gmail.com)

Package purpose: Unofficial Python client for Google Gemini Notebook (formerly NotebookLM) - alias of gemini-notebook-py.

Claimed homepage: https://pypi.org/project/gemini-notebook/

Official vendor account: No

Days since publish: 61

Registry downloads: 46/month

Codebase size: 0 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'gemini-notebook' matches AI hallucination template [python] + [gemini] + [notebook].
HIGHClaims critical enterprise brand identity ('GEMINI').
HIGHPublisher email 'teng.lin@gmail.com' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (47 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (0 LOC, 4 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.0.1

Author: Unknown (teng.lin@gmail.com)

Package purpose: Unofficial Python client for Google Gemini Notebook (formerly NotebookLM) - canonical distribution from 0.9.0.

Claimed homepage: https://pypi.org/project/gemini-notebook-py/

Official vendor account: No

Days since publish: 61

Registry downloads: 44/month

Codebase size: 0 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('GEMINI').
HIGHPublisher email 'teng.lin@gmail.com' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (46 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (0 LOC, 4 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: npm · 1.0.33

Author: Unknown

Package purpose: BytePlus Ark command-line interface

Claimed homepage: https://github.com/byteplus-sdk/ark-cli#readme

Official vendor account: No

Days since publish: 62

Registry downloads: 11541/month

Codebase size: 568 lines (MODERATE_CODEBASE)

Automated signals flagged:

INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave.
HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/postinstall.js:14 (+1 more occurrence(s) elsewhere)
HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.js:426 (+1 more occurrence(s) elsewhere)
HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/postinstall.js:10
HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.js:55
CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/postinstall.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: pypi · 0.1.0

Author: Rawson Consulting B.V.

Package purpose: Turn a prompt + a field schema into validated, typed JSON (Instructor over Gemini 2.5 Flash on Vertex AI).

Claimed homepage: https://pypi.org/project/gosce-structured-output-agent-openai/

Official vendor account: No

Days since publish: 62

Registry downloads: 29/month

Codebase size: 8 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'gosce-structured-output-agent-openai' matches AI hallucination template [gosce] + [openai] + [output].
HIGHClaims critical enterprise brand identity ('OPENAI').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 417 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.0.1

Author: Unknown

Package purpose: Placeholder for a work-in-progress tool. Not yet functional.

Claimed homepage: https://pypi.org/project/hf-pipe/

Official vendor account: No

Days since publish: 64

Registry downloads: 31/month

Codebase size: 2 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'hf-pipe' matches AI hallucination template [python] + [hf] + [pipe].
HIGHClaims critical enterprise brand identity ('HF').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (54 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 99 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: npm · latest

Author: Unknown

Package purpose: AI key pool proxy — route Claude, Gemini, GPT through one OpenAI-compatible endpoint

Claimed homepage: https://github.com/Alayra-Systems-Pvt-Limited/Alayra-Nexus#readme

Official vendor account: No

Days since publish: 65

Code-only verdict: Unverified Signal

Registry downloads: 283/month

Codebase size: 23465 lines (LARGE_CODEBASE)

Automated signals flagged:

INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
HIGHPackage registered recently (61 days ago) during the active AI hallucination slopsquatting wave.
HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/npm/postinstall.js'
HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/services/adminAuth.service.js:86 (+33 more occurrence(s) elsewhere)
HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/lib/admission.js:143 (+4 more occurrence(s) elsewhere)
HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/services/backupRecovery.service.js:100 (+1 more occurrence(s) elsewhere)
HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/cli.js:596 (+3 more occurrence(s) elsewhere)
HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/npm/postinstall.js:25

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: pypi · 0.1.0

Author: Rawson Consulting B.V.

Package purpose: Proxy Gemini (Vertex AI) completions wrapped in OpenTelemetry trace spans; returns the answer plus the trace/span id.

Claimed homepage: https://pypi.org/project/gosce-traced-llm-proxy-anthropic/

Official vendor account: No

Days since publish: 66

Registry downloads: 36/month

Codebase size: 8 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'gosce-traced-llm-proxy-anthropic' matches AI hallucination template [gosce] + [anthropic] + [llm].
HIGHClaims critical enterprise brand identity ('ANTHROPIC').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (54 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 431 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Ramprasad Gaddam

Package purpose: Sign OpenAI agent tool calls with Vouch Credentials.

Claimed homepage: https://pypi.org/project/vouch-openai/

Official vendor account: No

Days since publish: 71

Registry downloads: 16/month

Codebase size: 12 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'vouch-openai' matches AI hallucination template [python] + [openai] + [vouch].
HIGHClaims critical enterprise brand identity ('OPENAI').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
HIGHPackage registered recently (68 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (12 LOC, 1 file(s), 431 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Unknown

Package purpose: Safely scan and purge unwanted resources across AWS accounts and regions to eliminate surprise billing.

Claimed homepage: https://pypi.org/project/aws-eraser/

Official vendor account: No

Days since publish: 71

Code-only verdict: Very Risky

Registry downloads: 20/month

Codebase size: 1057 lines (LARGE_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'aws-eraser' matches AI hallucination template [python] + [aws] + [eraser].
HIGHClaims critical enterprise brand identity ('AWS').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
HIGHPackage registered recently (68 days ago) during the active AI hallucination slopsquatting wave.
CRITICALMODULE_TOPLEVEL_EXECUTION: 'os.system' executed at module scope (runs on import) in aws_eraser-0.1.0/aws_eraser.py:34
HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in aws_eraser-0.1.0/aws_eraser.py:34
INFOSubstantial functional codebase (1057 LOC across 1 file(s)).
MEDIUMPackage executes code at install/import time, but no exfiltration destination, credential access, encoded payload, obfuscation, shell cradle, or persistence primitive corroborates a weaponized payload. Downgraded from MALICIOUS to SUSPICIOUS pending manual review.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Rawson Consulting B.V.

Package purpose: Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing.

Claimed homepage: https://pypi.org/project/gosce-llm-orchestration-agent-openai/

Official vendor account: No

Days since publish: 72

Registry downloads: 35/month

Codebase size: 8 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'gosce-llm-orchestration-agent-openai' matches AI hallucination template [gosce] + [openai] + [orchestration].
HIGHClaims critical enterprise brand identity ('OPENAI').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
HIGHPackage registered recently (70 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 438 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Rawson Consulting B.V.

Package purpose: Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing.

Claimed homepage: https://pypi.org/project/gosce-llm-orchestration-agent-langgraph/

Official vendor account: No

Days since publish: 74

Registry downloads: 0/month

Codebase size: 8 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'gosce-llm-orchestration-agent-langgraph' matches AI hallucination template [gosce] + [langgraph] + [orchestration].
HIGHClaims critical enterprise brand identity ('LANGGRAPH').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 426 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Unknown

Package purpose: LangGraph BaseStore backed by inspeximus: drop-in for InMemoryStore, plus queryable value history and receipted erasure.

Claimed homepage: https://pypi.org/project/langgraph-store-inspeximus/

Official vendor account: No

Days since publish: 74

Registry downloads: 17/month

Codebase size: 17 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('LANGGRAPH').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (50 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (17 LOC, 1 file(s), 1135 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Unknown

Package purpose: LangGraph checkpointer backed by inspeximus: durable thread state with queryable value history and receipted erasure.

Claimed homepage: https://pypi.org/project/langgraph-checkpoint-inspeximus/

Official vendor account: No

Days since publish: 74

Registry downloads: 22/month

Codebase size: 14 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('LANGGRAPH').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (50 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (14 LOC, 1 file(s), 925 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Rawson Consulting B.V.

Package purpose: Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing.

Claimed homepage: https://pypi.org/project/gosce-llm-observability-orchestration-agent-langchain-community/

Official vendor account: No

Days since publish: 77

Registry downloads: 17/month

Codebase size: 8 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'gosce-llm-observability-orchestration-agent-langchain-community' matches AI hallucination template [gosce] + [langchain] + [observability].
HIGHClaims critical enterprise brand identity ('LANGCHAIN').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (54 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 467 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Rawson Consulting B.V.

Package purpose: Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing.

Claimed homepage: https://pypi.org/project/gosce-llm-orchestration-agent-langchain-openai/

Official vendor account: No

Days since publish: 78

Registry downloads: 21/month

Codebase size: 8 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'gosce-llm-orchestration-agent-langchain-openai' matches AI hallucination template [gosce] + [openai] + [orchestration].
HIGHClaims critical enterprise brand identity ('OPENAI').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (56 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 448 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Rawson Consulting B.V.

Package purpose: JWT-gated LLM gateway: authenticate (bcrypt/JWT), then run a LangChain-on-Vertex Gemini completion. Unauthenticated calls are rejected.

Claimed homepage: https://pypi.org/project/gosce-authenticated-mcp-agent-openai/

Official vendor account: No

Days since publish: 79

Registry downloads: 0/month

Codebase size: 8 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'gosce-authenticated-mcp-agent-openai' matches AI hallucination template [gosce] + [openai] + [mcp].
HIGHClaims critical enterprise brand identity ('OPENAI').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (57 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 414 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Rawson Consulting B.V.

Package purpose: Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing.

Claimed homepage: https://pypi.org/project/gosce-llm-orchestration-agent-langchain-core/

Official vendor account: No

Days since publish: 81

Registry downloads: 18/month

Codebase size: 8 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'gosce-llm-orchestration-agent-langchain-core' matches AI hallucination template [gosce] + [langchain] + [orchestration].
HIGHClaims critical enterprise brand identity ('LANGCHAIN').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
HIGHPackage registered recently (60 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 422 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Rawson Consulting B.V.

Package purpose: Google-OAuth-gated LLM gateway: verify a Google ID token, then run a Gemini (Vertex AI) completion for the verified caller.

Claimed homepage: https://pypi.org/project/gosce-authenticated-llm-agent-anthropic/

Official vendor account: No

Days since publish: 82

Registry downloads: 23/month

Codebase size: 8 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'gosce-authenticated-llm-agent-anthropic' matches AI hallucination template [gosce] + [anthropic] + [llm].
HIGHClaims critical enterprise brand identity ('ANTHROPIC').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
HIGHPackage registered recently (62 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 441 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 1.0.1

Author: Unknown

Package purpose: Production Web3 utility library for Ethereum mainnet DeFi operations

Claimed homepage: https://pypi.org/project/deckard-web3-utils-v2/

Official vendor account: No

Days since publish: 82

Registry downloads: 19/month

Codebase size: 9 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'deckard-web3-utils-v2' matches AI hallucination template [deckard] + [web3] + [utils].
HIGHClaims critical enterprise brand identity ('WEB3').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (62 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (9 LOC, 1 file(s), 321 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.1

Author: Rawson Consulting B.V.

Package purpose: Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing.

Claimed homepage: https://pypi.org/project/gosce-llm-orchestration-agent-langchain-anthropic/

Official vendor account: No

Days since publish: 84

Registry downloads: 0/month

Codebase size: 8 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'gosce-llm-orchestration-agent-langchain-anthropic' matches AI hallucination template [gosce] + [anthropic] + [orchestration].
HIGHClaims critical enterprise brand identity ('ANTHROPIC').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
HIGHPackage registered recently (64 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 451 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: npm · 2.7.5

Author: DP Technology

Package purpose: CLI tool for Bohrium scientific computing platform

Official vendor account: No

Days since publish: 86

Registry downloads: 16478/month

Codebase size: 786 lines (MODERATE_CODEBASE)

Automated signals flagged:

INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
HIGHPackage registered recently (72 days ago) during the active AI hallucination slopsquatting wave.
HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.js'
HIGHMISSING_SOURCE_REPOSITORY_URL
HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postinstall.js:9
HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/postinstall.js:23
HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/run.js:2
CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/postinstall.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: pypi · 0.1.0

Author: Rawson Consulting B.V.

Package purpose: JWT-gated LLM gateway: authenticate (bcrypt/JWT), then run a LangChain-on-Vertex Gemini completion. Unauthenticated calls are rejected.

Claimed homepage: https://pypi.org/project/gosce-authenticated-mcp-agent-langchain-core/

Official vendor account: No

Days since publish: 86

Registry downloads: 0/month

Codebase size: 8 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'gosce-authenticated-mcp-agent-langchain-core' matches AI hallucination template [gosce] + [langchain] + [mcp].
HIGHClaims critical enterprise brand identity ('LANGCHAIN').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
HIGHPackage registered recently (67 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 422 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: npm · 0.1.0

Author: Unknown

Package purpose: Claude integration providing basecamp utility for Node

Official vendor account: No

Days since publish: 86

Registry downloads: 26/month

Codebase size: 15 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'claude-basecamp' matches AI hallucination template [node] + [claude] + [basecamp].
HIGHClaims critical enterprise brand identity ('CLAUDE').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
HIGHPackage registered recently (82 days ago) during the active AI hallucination slopsquatting wave.
HIGHMISSING_SOURCE_REPOSITORY_URL
HIGHVERSION_NOT_FOUND
MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: pypi · 0.0.1

Author: Reza Spagnolo

Package purpose: Coming soon.

Claimed homepage: https://pypi.org/project/aws-benchmark/

Official vendor account: No

Days since publish: 87

Registry downloads: 27/month

Codebase size: 1 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'aws-benchmark' matches AI hallucination template [python] + [aws] + [benchmark].
HIGHClaims critical enterprise brand identity ('AWS').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
HIGHPackage registered recently (69 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 19 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

SHARE INTELLIGENCE WIRE