🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
75 87d 32 1 ↑0.4/day
Possible Squatted Stub
aws pypi 0.0.2 Reza Spagnolo —
Package purpose: Coming soon.
Claimed homepage: https://pypi.org/project/aws-bench/
Matched naming pattern: python-aws-bench
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 87
Registry downloads: 32/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 19 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'aws-bench' matches AI hallucination template [python] + [aws] + [bench].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (69 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 19 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 88d 0 8 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.0 Rawson Consulting B.V. —
Package purpose: Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing.
Claimed homepage: https://pypi.org/project/gosce-llm-orchestration-agent-langchain/
Matched naming pattern: gosce-langchain-orchestration
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 88
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 8 lines, 441 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'gosce-llm-orchestration-agent-langchain' matches AI hallucination template [gosce] + [langchain] + [orchestration].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (71 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 441 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 90d 9 8 ↑0.1/day
Possible Squatted Stub
langgraph pypi 0.1.0 Ramprasad Gaddam —
Package purpose: Sign LangGraph tool calls and graph nodes with Vouch Credentials.
Claimed homepage: https://pypi.org/project/vouch-langgraph/
Matched naming pattern: python-langgraph-vouch
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 90
Registry downloads: 9/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 8 lines, 404 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'vouch-langgraph' matches AI hallucination template [python] + [langgraph] + [vouch].
  • HIGHClaims critical enterprise brand identity ('LANGGRAPH').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (75 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 404 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 91d 0 0 ↑0.0/day
Possible Squatted Stub
tether pypi 0.12.0 — romirj@gmail.com gmail.com
Package purpose: Tether by FastCrest — deployment infrastructure for VLA robot policies. Meta-package for fastcrest-tether.
Claimed homepage: https://pypi.org/project/tether-cli/
Matched naming pattern: python-tether-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 91
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 11 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'tether-cli' matches AI hallucination template [python] + [tether] + [cli].
  • HIGHClaims critical enterprise brand identity ('TETHER').
  • HIGHPublisher email 'romirj@gmail.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (75 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 11 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 93d 16 15 ↑0.2/day
Possible Squatted Stub
aws npm 0.1.0 — —
Package purpose: Aws integration providing onboarding utility for Meyi
Matched naming pattern: meyi-aws-onboarding
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 93
Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'meyi-aws-onboarding-ui-dev' matches AI hallucination template [meyi] + [aws] + [onboarding].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (73 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 95d 7,907 241 ↑83.2/day
Very Risky
@onescience/onecode npm 1.14.50-202609201758 — — 🪝 📡
Package purpose: OneScience AI coding agent for the terminal.
Matched naming pattern: npm-@onescience/onecode-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 95
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7907/month, 1976/week (ACTIVE_COMMUNITY_USE)
Codebase size: 241 lines, 9.1 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (82 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node ./postinstall.mjs'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/platform-bootstrap.mjs:16
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/platform-bootstrap.mjs:203
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/platform-bootstrap.mjs:92
  • INFOActive community usage with 7,907 monthly downloads.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node ./postinstall.mjs'
  • MISSING_SOURCE_REPOSITORY_URL
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/platform-bootstrap.mjs:16
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/platform-bootstrap.mjs:203
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/platform-bootstrap.mjs:92

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 96d 208 5 ↑2.2/day
Possible Squatted Stub
crewai pypi 0.1.2 — —
Package purpose: CrewAI logging helpers for ZizkaDB causal agent memory
Claimed homepage: https://pypi.org/project/zizkadb-crewai/
Matched naming pattern: python-crewai-zizkadb
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 96
Registry downloads: 208/month, 7/week (MODERATE_USAGE)
Codebase size: 5 lines, 269 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'zizkadb-crewai' matches AI hallucination template [python] + [crewai] + [zizkadb].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (83 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (5 LOC, 2 file(s), 269 bytes).
  • INFOModerate community usage with 208 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 97d 4 3 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 Tanmay Devare —
Package purpose: LangChain adapter for Snubber
Claimed homepage: https://pypi.org/project/snubber-langchain/
Matched naming pattern: python-langchain-snubber
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 97
Registry downloads: 4/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 3 lines, 34 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'snubber-langchain' matches AI hallucination template [python] + [langchain] + [snubber].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (84 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (3 LOC, 1 file(s), 34 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 97d 9 3 ↑0.1/day
Possible Squatted Stub
crewai pypi 0.1.1 Tanmay Devare —
Package purpose: CrewAI adapter for Snubber
Claimed homepage: https://pypi.org/project/snubber-crewai/
Matched naming pattern: python-crewai-snubber
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 97
Registry downloads: 9/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 3 lines, 31 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'snubber-crewai' matches AI hallucination template [python] + [crewai] + [snubber].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (84 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (3 LOC, 1 file(s), 31 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 98d 0 14,176 ↑0.0/day
SUSPICIOUS
x pypi 1.1.4 — hanrh@connect.hku.hk connect.hku.hk 🪝
Package purpose: IR-SIM with C++ accelerated LiDAR, collision detection, and kinematics
Claimed homepage: https://pypi.org/project/irsim-x/
Matched naming pattern: python-x-irsim
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 98
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14176 lines, 619.1 kB across 71 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (72 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALINSTALL_TIME_EXECUTION: 'subprocess.run' executed at top-level in irsim_x-1.1.4/setup.py:37
  • CRITICALINSTALL_TIME_EXECUTION: 'subprocess.run' executed at top-level in irsim_x-1.1.4/setup.py:52
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: Call to os.environ.get() in irsim_x-1.1.4/setup.py:38
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: Access to os.environ in irsim_x-1.1.4/setup.py:38
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: Call to os.environ.get() in irsim_x-1.1.4/setup.py:53
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in irsim_x-1.1.4/setup.py:39
Static code signals:
  • INSTALL_TIME_EXECUTION: 'subprocess.run' executed at top-level in irsim_x-1.1.4/setup.py:37
  • INSTALL_TIME_EXECUTION: 'subprocess.run' executed at top-level in irsim_x-1.1.4/setup.py:52
  • SOURCE_CODE_ENV_VARS_ACCESS: Call to os.environ.get() in irsim_x-1.1.4/setup.py:38
  • SOURCE_CODE_ENV_VARS_ACCESS: Access to os.environ in irsim_x-1.1.4/setup.py:38
  • SOURCE_CODE_ENV_VARS_ACCESS: Call to os.environ.get() in irsim_x-1.1.4/setup.py:53
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in irsim_x-1.1.4/setup.py:39
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in irsim_x-1.1.4/setup.py:40

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 100d 33 15 ↑0.3/day
Possible Squatted Stub
claude npm 0.1.0 — —
Package purpose: Claude integration providing agent utility for Claude
Matched naming pattern: claude-claude-agent
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 100
Registry downloads: 33/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (81 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 102d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: Contract-first Copilot scaffolding and workspace bootstrap scripts for Edenred repositories.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/mcp/context-hub/providers/azure-devops-provider.js:172 (+3 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/mcp/context-hub/providers/azure-devops-provider.js:13 (+18 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/indexer/knowledge-pack/pdf-parser.js:47 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.js:147 (+3 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 103d 5 15 ↑0.0/day
Possible Squatted Stub
claude npm 0.1.0 — —
Package purpose: Claude integration providing claude utility for Dotrino
Matched naming pattern: dotrino-claude-claude
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 103
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'dotrino-telegram-claude-bot' matches AI hallucination template [dotrino] + [claude] + [claude].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (99 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHVERSION_NOT_FOUND
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • VERSION_NOT_FOUND

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 104d 0 7 ↑0.0/day
Possible Squatted Stub
crewai pypi 0.1.0 iWedmak —
Package purpose: Namespace alias for `crewai-ceki` — install that for the real package.
Claimed homepage: https://pypi.org/project/ceki-crewai/
Matched naming pattern: python-crewai-ceki
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 346 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ceki-crewai' matches AI hallucination template [python] + [crewai] + [ceki].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (93 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 346 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 104d 43 0 ↑0.4/day
Possible Squatted Stub
claude pypi 1.0.1 lohn —
Package purpose: Sync CLAUDE.md with AGENTS.md for AI coding agents
Claimed homepage: https://pypi.org/project/sync-claude-md/
Matched naming pattern: sync-claude-md
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 43/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 4 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'sync-claude-md' matches AI hallucination template [sync] + [claude] + [md].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (94 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 4 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 104d 16 7 ↑0.2/day
Possible Squatted Stub
langchain pypi 0.1.0 iWedmak —
Package purpose: Namespace alias for `langchain-ceki` — install the real package.
Claimed homepage: https://pypi.org/project/ceki-langchain/
Matched naming pattern: python-langchain-ceki
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 16/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 361 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ceki-langchain' matches AI hallucination template [python] + [langchain] + [ceki].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (93 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 361 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 104d 1,212 3,639 ↑11.7/day
Very Risky
@central npm 1.1.321 Iconists — 🪝 🌐
Package purpose: A collection of round outlined Svelte icons with 3px radius and 2px stroke width, designed for use in Svelte applications.
Claimed homepage: https://iconists.co/central
Matched naming pattern: npm-@central-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 1212/month, 303/week (ACTIVE_COMMUNITY_USE)
Codebase size: 3639 lines, 2.2 MB across 2112 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (92 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets
  • INFOSubstantial functional codebase (3639 LOC across 2112 file(s)).
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • INSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 104d 2,382 3,639 ↑22.9/day
Very Risky
@central npm 1.1.320 Iconists — 🪝 🌐
Package purpose: A collection of round outlined Svelte icons with 2px radius and 2px stroke width, designed for use in Svelte applications.
Claimed homepage: https://iconists.co/central
Matched naming pattern: npm-@central-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 2382/month, 595/week (ACTIVE_COMMUNITY_USE)
Codebase size: 3639 lines, 2.1 MB across 2112 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (92 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets
  • INFOSubstantial functional codebase (3639 LOC across 2112 file(s)).
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • INSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 104d 1,222 3,640 ↑11.8/day
Very Risky
@central npm 1.1.321 Iconists — 🪝 🌐
Package purpose: A collection of round filled Svelte icons with 3px radius and 2px stroke width, designed for use in Svelte applications.
Claimed homepage: https://iconists.co/central
Matched naming pattern: npm-@central-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 1222/month, 305/week (ACTIVE_COMMUNITY_USE)
Codebase size: 3640 lines, 280.7 kB across 2112 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (92 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets
  • INFOSubstantial functional codebase (3640 LOC across 2112 file(s)).
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • INSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 104d 1,116 3,640 ↑10.7/day
Very Risky
@central npm 1.1.321 Iconists — 🪝 🌐
Package purpose: A collection of round filled Svelte icons with 3px radius and 1px stroke width, designed for use in Svelte applications.
Claimed homepage: https://iconists.co/central
Matched naming pattern: npm-@central-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 1116/month, 279/week (ACTIVE_COMMUNITY_USE)
Codebase size: 3640 lines, 280.7 kB across 2112 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (92 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets
  • INFOSubstantial functional codebase (3640 LOC across 2112 file(s)).
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • INSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 104d 1,245 3,640 ↑12.0/day
Very Risky
@central npm 1.1.321 Iconists — 🪝 🌐
Package purpose: A collection of round filled Svelte icons with 3px radius and 1.5px stroke width, designed for use in Svelte applications.
Claimed homepage: https://iconists.co/central
Matched naming pattern: npm-@central-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 1245/month, 311/week (ACTIVE_COMMUNITY_USE)
Codebase size: 3640 lines, 280.7 kB across 2112 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (92 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets
  • INFOSubstantial functional codebase (3640 LOC across 2112 file(s)).
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • INSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 104d 1,009 3,640 ↑9.7/day
Very Risky
@central npm 1.1.321 Iconists — 🪝 🌐
Package purpose: A collection of round filled Svelte icons with 2px radius and 2px stroke width, designed for use in Svelte applications.
Claimed homepage: https://iconists.co/central
Matched naming pattern: npm-@central-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 1009/month, 252/week (ACTIVE_COMMUNITY_USE)
Codebase size: 3640 lines, 280.7 kB across 2112 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (92 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets
  • INFOSubstantial functional codebase (3640 LOC across 2112 file(s)).
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • INSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 104d 2,224 2,034 ↑21.4/day
Very Risky
@central npm 1.1.320 Iconists — 🪝 🌐
Package purpose: A collection of square filled Solid icons with 0px radius and 2px stroke width, designed for use in Solid applications.
Claimed homepage: https://iconists.co/central
Matched naming pattern: npm-@central-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 2224/month, 556/week (ACTIVE_COMMUNITY_USE)
Codebase size: 2034 lines, 105.9 kB across 2110 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (92 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets
  • INFOSubstantial functional codebase (2034 LOC across 2110 file(s)).
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • INSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 104d 2,681 2,034 ↑25.8/day
Very Risky
@central npm 1.1.320 Iconists — 🪝 🌐
Package purpose: A collection of square filled Solid icons with 0px radius and 1.5px stroke width, designed for use in Solid applications.
Claimed homepage: https://iconists.co/central
Matched naming pattern: npm-@central-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 2681/month, 670/week (ACTIVE_COMMUNITY_USE)
Codebase size: 2034 lines, 105.9 kB across 2110 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (92 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets
  • INFOSubstantial functional codebase (2034 LOC across 2110 file(s)).
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • INSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 104d 1,195 2,034 ↑11.5/day
Very Risky
@central npm 1.1.321 Iconists — 🪝 🌐
Package purpose: A collection of round filled Solid icons with 3px radius and 2px stroke width, designed for use in Solid applications.
Claimed homepage: https://iconists.co/central
Matched naming pattern: npm-@central-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 1195/month, 298/week (ACTIVE_COMMUNITY_USE)
Codebase size: 2034 lines, 105.9 kB across 2110 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (92 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets
  • INFOSubstantial functional codebase (2034 LOC across 2110 file(s)).
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • INSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 104d 1,186 2,034 ↑11.4/day
Very Risky
@central npm 1.1.321 Iconists — 🪝 🌐
Package purpose: A collection of round filled Solid icons with 3px radius and 1px stroke width, designed for use in Solid applications.
Claimed homepage: https://iconists.co/central
Matched naming pattern: npm-@central-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 1186/month, 296/week (ACTIVE_COMMUNITY_USE)
Codebase size: 2034 lines, 105.9 kB across 2110 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (92 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets
  • INFOSubstantial functional codebase (2034 LOC across 2110 file(s)).
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • INSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 104d 1,199 2,034 ↑11.5/day
Very Risky
@central npm 1.1.321 Iconists — 🪝 🌐
Package purpose: A collection of round filled Solid icons with 3px radius and 1.5px stroke width, designed for use in Solid applications.
Claimed homepage: https://iconists.co/central
Matched naming pattern: npm-@central-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 1199/month, 299/week (ACTIVE_COMMUNITY_USE)
Codebase size: 2034 lines, 105.9 kB across 2110 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (92 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets
  • INFOSubstantial functional codebase (2034 LOC across 2110 file(s)).
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • INSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 104d 1,137 1,036 ↑10.9/day
Very Risky
@central npm 1.1.321 Iconists — 🪝 🌐
Package purpose: A collection of round outlined Qwik icons with 3px radius and 1.5px stroke width, designed for use in Qwik applications.
Claimed homepage: https://iconists.co/central
Matched naming pattern: npm-@central-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 1137/month, 284/week (ACTIVE_COMMUNITY_USE)
Codebase size: 1036 lines, 861.8 kB across 4220 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (92 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets
  • INFOSubstantial functional codebase (1036 LOC across 4220 file(s)).
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • INSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 104d 2,167 1,036 ↑20.8/day
Very Risky
@central npm 1.1.320 Iconists — 🪝 🌐
Package purpose: A collection of round filled Qwik icons with 1px radius and 2px stroke width, designed for use in Qwik applications.
Claimed homepage: https://iconists.co/central
Matched naming pattern: npm-@central-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 2167/month, 541/week (ACTIVE_COMMUNITY_USE)
Codebase size: 1036 lines, 898.4 kB across 4220 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (92 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets
  • INFOSubstantial functional codebase (1036 LOC across 4220 file(s)).
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • INSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 104d 2,426 1,036 ↑23.3/day
Very Risky
@central npm 1.1.320 Iconists — 🪝 🌐
Package purpose: A collection of round filled Qwik icons with 1px radius and 1.5px stroke width, designed for use in Qwik applications.
Claimed homepage: https://iconists.co/central
Matched naming pattern: npm-@central-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 2426/month, 606/week (ACTIVE_COMMUNITY_USE)
Codebase size: 1036 lines, 925.9 kB across 4220 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (92 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets
  • INFOSubstantial functional codebase (1036 LOC across 4220 file(s)).
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • INSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 104d 2,138 1,036 ↑20.6/day
Very Risky
@central npm 1.1.320 Iconists — 🪝 🌐
Package purpose: A collection of round filled Qwik icons with 0px radius and 1.5px stroke width, designed for use in Qwik applications.
Claimed homepage: https://iconists.co/central
Matched naming pattern: npm-@central-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 104
Registry downloads: 2138/month, 534/week (ACTIVE_COMMUNITY_USE)
Codebase size: 1036 lines, 906.6 kB across 4220 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (92 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets
  • INFOSubstantial functional codebase (1036 LOC across 4220 file(s)).
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node ./license-check.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/license-check.js:14
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/license-check.js:1
  • INSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/license-check.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 105d 11 7 ↑0.1/day
Possible Squatted Stub
stripe pypi 0.1.0 Timur Isachenko —
Package purpose: Editorial &#x2F; book-grade. Cream paper, ink-brown strokes, editorial sans&#x2F;serif. Proven on 77 diagrams.
Claimed homepage: https://pypi.org/project/excalidraw-skill-pack-theme-stripe-press/
Matched naming pattern: excalidraw-stripe-pack
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 105
Registry downloads: 11/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 323 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'excalidraw-skill-pack-theme-stripe-press' matches AI hallucination template [excalidraw] + [stripe] + [pack].
  • HIGHClaims critical enterprise brand identity ('STRIPE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (95 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 323 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 106d 0 1 ↑0.0/day
Possible Squatted Stub
aws pypi 0.0.1 — —
Package purpose: Placeholder reserving the aws_sdk_rds name. Not yet functional.
Claimed homepage: https://pypi.org/project/aws_sdk_rds/
Matched naming pattern: aws-aws-rds
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 106
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 22 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (95 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 22 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 106d 0 0 ↑0.0/day
Possible Squatted Stub
vllm pypi 1.0.3 — —
Package purpose: Metapackage redirect: Please use open-vllm instead.
Claimed homepage: https://pypi.org/project/open-vllm-sdk/
Matched naming pattern: open-vllm-sdk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 106
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 5 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'open-vllm-sdk' matches AI hallucination template [open] + [vllm] + [sdk].
  • HIGHClaims critical enterprise brand identity ('VLLM').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (96 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 5 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 107d 15 7 ↑0.1/day
Possible Squatted Stub
workspace pypi 0.2.1 — —
Package purpose: Renamed to 'index-graph' — pip install index-graph (CLI: index).
Claimed homepage: https://pypi.org/project/workspace-repo-map/
Matched naming pattern: workspace-workspace-map
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 107
Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 217 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (96 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 217 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 109d 0 0 ↑0.0/day
Possible Squatted Stub
ledger pypi 1.1.1 — —
Package purpose: This package has transitioned. Please install sovereign-sdk-ledger instead.
Claimed homepage: https://pypi.org/project/sovereign-ledger/
Matched naming pattern: python-ledger-sovereign
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 109
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 11 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'sovereign-ledger' matches AI hallucination template [python] + [ledger] + [sovereign].
  • HIGHClaims critical enterprise brand identity ('LEDGER').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (98 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 11 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 110d 8 0 ↑0.1/day
Possible Squatted Stub
crewai pypi 0.1.0 — mashle@geasslabs.xyz geasslabs.xyz
Package purpose: CrewAI long-term memory adapter for the Mnemosyne memory substrate. Implements the LongTermMemory protocol via duck typing, with per-agent and per-task scoping, hybrid BM25+vector recall, idempotent writes.
Claimed homepage: https://pypi.org/project/mnemosyne-crewai/
Matched naming pattern: python-crewai-mnemosyne
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 110
Registry downloads: 8/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 16 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'mnemosyne-crewai' matches AI hallucination template [python] + [crewai] + [mnemosyne].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • HIGHPublisher email 'mashle@geasslabs.xyz' is not affiliated with official vendor domain.
  • INFOLegitimate documentation effort (206 chars with homepage link).
  • HIGHPackage registered recently (99 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 16 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 111d 5 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.0 — mashle@geasslabs.xyz geasslabs.xyz
Package purpose: LangChain and LangGraph integration for the Mnemosyne memory substrate. BaseChatMessageHistory, BaseMemory, and BaseRetriever adapters with hybrid BM25+vector recall, per-session thread tracking, automatic redaction, TTL support.
Claimed homepage: https://pypi.org/project/mnemosyne-langchain/
Matched naming pattern: python-langchain-mnemosyne
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 111
Registry downloads: 5/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 16 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'mnemosyne-langchain' matches AI hallucination template [python] + [langchain] + [mnemosyne].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'mashle@geasslabs.xyz' is not affiliated with official vendor domain.
  • INFOLegitimate documentation effort (229 chars with homepage link).
  • HIGHPackage registered recently (100 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 16 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 111d 19 1 ↑0.2/day
Possible Squatted Stub
aws pypi 0.0.1 — —
Package purpose: Placeholder reserving the aws_sdk_security_ir name. Not yet functional.
Claimed homepage: https://pypi.org/project/aws_sdk_security_ir/
Matched naming pattern: aws-aws-security
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 111
Registry downloads: 19/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 22 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (100 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 22 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 111d 14 1 ↑0.1/day
Possible Squatted Stub
aws pypi 0.0.1 — —
Package purpose: Placeholder reserving the aws_sdk_rum name. Not yet functional.
Claimed homepage: https://pypi.org/project/aws_sdk_rum/
Matched naming pattern: aws-aws-rum
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 111
Registry downloads: 14/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 22 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (100 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 22 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 111d 13 1 ↑0.1/day
Possible Squatted Stub
aws pypi 0.0.1 — —
Package purpose: Placeholder reserving the aws_sdk_partnercentral_selling name. Not yet functional.
Claimed homepage: https://pypi.org/project/aws_sdk_partnercentral_selling/
Matched naming pattern: aws-aws-partnercentral
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 111
Registry downloads: 13/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 22 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (100 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 22 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 111d 18 1 ↑0.2/day
Possible Squatted Stub
aws pypi 0.0.1 — —
Package purpose: Placeholder reserving the aws_sdk_codeguruprofiler name. Not yet functional.
Claimed homepage: https://pypi.org/project/aws_sdk_codeguruprofiler/
Matched naming pattern: aws-aws-codeguruprofiler
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 111
Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 22 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (100 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 22 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 111d 12 8 ↑0.1/day
Possible Squatted Stub
crewai pypi 0.1.0 Ramprasad Gaddam —
Package purpose: CrewAI tool that issues Vouch Credentials to authorize multi-agent tool calls.
Claimed homepage: https://pypi.org/project/vouch-crewai/
Matched naming pattern: python-crewai-vouch
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 111
Registry downloads: 12/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 8 lines, 400 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'vouch-crewai' matches AI hallucination template [python] + [crewai] + [vouch].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (94 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 400 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 111d 0 8 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.0 Ramprasad Gaddam —
Package purpose: LangChain tool that issues Vouch Credentials to authorize AI agent tool calls.
Claimed homepage: https://pypi.org/project/vouch-langchain/
Matched naming pattern: python-langchain-vouch
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 111
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 8 lines, 422 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'vouch-langchain' matches AI hallucination template [python] + [langchain] + [vouch].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (94 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 422 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 111d 13 0 ↑0.1/day
Possible Squatted Stub
claude pypi 0.0.1 — —
Package purpose: Defensive package-name reservation notice for a potential supply-chain risk.
Claimed homepage: https://pypi.org/project/nixtla-claude-skills-installer/
Matched naming pattern: nixtla-claude-skills
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 111
Registry downloads: 13/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 11 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'nixtla-claude-skills-installer' matches AI hallucination template [nixtla] + [claude] + [skills].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (100 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 11 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 111d 25 0 ↑0.2/day
Possible Squatted Stub
claude pypi 0.0.1 — —
Package purpose: Defensive package-name reservation notice for a potential supply-chain risk.
Claimed homepage: https://pypi.org/project/claude-parallel-orchestrator/
Matched naming pattern: claude-claude-orchestrator
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 111
Registry downloads: 25/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 11 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (101 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 11 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 111d 11 1 ↑0.1/day
Possible Squatted Stub
langchain pypi 0.0.1 — opensource@agiledefense.com agiledefense.com
Package purpose: Reserved for Garrison, Agile Defense's secure agentic AI platform. Placeholder release.
Claimed homepage: https://pypi.org/project/garrison-adapters-langchain/
Matched naming pattern: garrison-langchain-langchain
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 111
Registry downloads: 11/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 100 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'garrison-adapters-langchain' matches AI hallucination template [garrison] + [langchain] + [langchain].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'opensource@agiledefense.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (100 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 100 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 111d 18 1 ↑0.2/day
Possible Squatted Stub
claude pypi 0.0.1 — opensource@agiledefense.com agiledefense.com
Package purpose: Reserved for Garrison, Agile Defense's secure agentic AI platform. Placeholder release.
Claimed homepage: https://pypi.org/project/garrison-adapters-claude/
Matched naming pattern: garrison-claude-claude
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 111
Registry downloads: 18/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 97 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'garrison-adapters-claude' matches AI hallucination template [garrison] + [claude] + [claude].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'opensource@agiledefense.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (100 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 97 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 113d 131 0 ↑1.2/day
Possible Squatted Stub
google pypi 0.2.15 — —
Package purpose: Interactive DataFrame visualization widget powered by the Google Data Studio charting engine with anywidget.
Claimed homepage: https://pypi.org/project/google-colabsqlviz/
Matched naming pattern: python-google-colabsqlviz
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 113
Registry downloads: 131/month, 31/week (MODERATE_USAGE)
Codebase size: 0 lines, 0 Bytes across 11 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'google-colabsqlviz' matches AI hallucination template [python] + [google] + [colabsqlviz].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (102 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 11 file(s), 0 bytes).
  • INFOModerate community usage with 131 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 114d 5 0 ↑0.0/day
Possible Squatted Stub
workspace pypi 0.1.0 tabzkid —
Package purpose: A local-first knowledge graph CLI, browse your files and graph with a unified navigation language.
Claimed homepage: https://pypi.org/project/workspace-semantic/
Matched naming pattern: python-workspace-semantic
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 114
Registry downloads: 5/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 33 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'workspace-semantic' matches AI hallucination template [python] + [workspace] + [semantic].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (103 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 33 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
« Prev Next »
LINK COPIED TO CLIPBOARD