🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
75 116d 18 22 ↑0.2/day
Possible Squatted Stub
langchain pypi 1.2.0 — —
Package purpose: FiGuard pre-flight spend authorization for LangChain agents
Claimed homepage: https://pypi.org/project/figuard-langchain/
Matched naming pattern: python-langchain-figuard
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 116
Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 22 lines, 924 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'figuard-langchain' matches AI hallucination template [python] + [langchain] + [figuard].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (105 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (22 LOC, 1 file(s), 924 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 116d 11 2 ↑0.1/day
Possible Squatted Stub
qdrant pypi 0.0.0 Michael Pilosov consistentbayes@gmail.com gmail.com
Package purpose: Utilities for managing a Qdrant-back vector search service.
Claimed homepage: https://pypi.org/project/qdrant-api/
Matched naming pattern: python-qdrant-api
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 116
Registry downloads: 11/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 56 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'qdrant-api' matches AI hallucination template [python] + [qdrant] + [api].
  • HIGHClaims critical enterprise brand identity ('QDRANT').
  • HIGHPublisher email 'consistentbayes@gmail.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (105 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 56 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 117d 38 15 ↑0.3/day
Possible Squatted Stub
tron npm 0.1.0 — —
Package purpose: Tron integration providing distribu utility for Node
Matched naming pattern: node-tron-distribu
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 117
Registry downloads: 38/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'distribu-tron' matches AI hallucination template [node] + [tron] + [distribu].
  • HIGHClaims critical enterprise brand identity ('TRON').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (105 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHVERSION_NOT_FOUND
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • VERSION_NOT_FOUND

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 118d 17 8 ↑0.1/day
Possible Squatted Stub
google pypi 0.1.0 Rawson Consulting B.V. —
Package purpose: Google-OAuth-gated LLM gateway: verify a Google ID token, then run a Gemini (Vertex AI) completion for the verified caller.
Claimed homepage: https://pypi.org/project/gosce-authenticated-llm-agent-google-auth-oauthlib/
Matched naming pattern: gosce-google-llm
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 118
Registry downloads: 17/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 8 lines, 452 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'gosce-authenticated-llm-agent-google-auth-oauthlib' matches AI hallucination template [gosce] + [google] + [llm].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (107 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 452 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 118d 50 7 ↑0.4/day
Possible Squatted Stub
solana pypi 0.1.0 — —
Package purpose: Decode Anchor 0.30+ program events from Solana transaction logs, using only the IDL.
Claimed homepage: https://pypi.org/project/solana-anchor-events/
Matched naming pattern: solana-solana-events
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 118
Registry downloads: 50/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 317 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('SOLANA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (108 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 317 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 118d 19 8 ↑0.2/day
Possible Squatted Stub
langchain pypi 0.1.0 Rawson Consulting B.V. —
Package purpose: Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing.
Claimed homepage: https://pypi.org/project/gosce-llm-observability-orchestration-agent-langchain/
Matched naming pattern: gosce-langchain-observability
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 118
Registry downloads: 19/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 8 lines, 457 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'gosce-llm-observability-orchestration-agent-langchain' matches AI hallucination template [gosce] + [langchain] + [observability].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (107 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 457 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 118d 8 1 ↑0.1/day
Possible Squatted Stub
gemini pypi 0.1.0 Fazal Qadir —
Package purpose: Remove Gemini sparkle watermark from videos
Claimed homepage: https://pypi.org/project/remove-gemini-logo/
Matched naming pattern: remove-gemini-logo
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 118
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 21 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'remove-gemini-logo' matches AI hallucination template [remove] + [gemini] + [logo].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (108 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 2 file(s), 21 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 120d 19 0 ↑0.2/day
Possible Squatted Stub
openai pypi 0.1.0 GGN_2015 —
Package purpose: A tiny CLI that checks whether an OpenAI API key can call Chat Completions.
Claimed homepage: https://pypi.org/project/openai-api-availability-test/
Matched naming pattern: openai-openai-availability
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 120
Registry downloads: 19/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 6 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (109 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 6 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 121d — — —
Unverified Signal
— npm latest — — 🪝
Static code signals:
  • CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/dist/index.js:111 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/index.js:135 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:76 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 122d — — —
Unverified Signal
— npm latest Leechael — 🪝 🌐
Package purpose: Claude (Anthropic OAuth/subscription) compatibility layer for pi-coding-agent — keeps ALL extension tools usable under the Claude subscription by mapping unknown flat tool names to mcp__pi__<name> on the wire instead of dropping them, plus optional multi-
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/index.ts:280 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/oauth.ts:18
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/oauth.ts:121
  • SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/oauth.ts:18

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 131d 165 7 ↑1.3/day
Possible Squatted Stub
langgraph pypi 1.5.2 AgentLedger Contributors —
Package purpose: LangGraph-compatible adapter package for AgentLedger
Claimed homepage: https://pypi.org/project/agentledger-langgraph/
Matched naming pattern: python-langgraph-agentledger
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 131
Registry downloads: 165/month, 53/week (MODERATE_USAGE)
Codebase size: 7 lines, 215 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'agentledger-langgraph' matches AI hallucination template [python] + [langgraph] + [agentledger].
  • HIGHClaims critical enterprise brand identity ('LANGGRAPH').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (120 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 215 bytes).
  • INFOModerate community usage with 165 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 132d — — —
Unverified Signal
— npm latest axcel — 🪝
Package purpose: Workflow PT-BR para Claude Code: refina ideias com memória e executa sempre com Superpowers (motor) + BMAD (disciplina) integrados — TDD, subagents isolados e dois reviewers por task.
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/auto-update.js:86 (+3 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/bin/cli.js:38 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/cli.js:78 (+6 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 133d 19 3 ↑0.1/day
Possible Squatted Stub
binance pypi 1.0.0 — —
Package purpose: Binance Authenticator下载对比评测：安全验证工具的选择指南
Claimed homepage: https://binance-fans.com
Matched naming pattern: binance-binance-obvgdd
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 133
Registry downloads: 19/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 3 lines, 121 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('BINANCE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (121 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (3 LOC, 2 file(s), 121 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 135d — — —
Unverified Signal
— npm latest — — 🪝
Package purpose: Sync Claude Code config (~/.claude/) across machines via a private Git repo, with path remapping and per-host settings overrides.
Static code signals:
  • CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/dist/nomad.mjs:2605
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/nomad.mjs:289
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/nomad.mjs:239

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 135d 10,061 135 ↑74.5/day
Very Risky
@regsorm/code npm 1.2.0 — — 🪝 🌐
Package purpose: Rust code index MCP server (BSL/1C-aware). Static binary auto-downloaded for your OS. Tree-sitter AST, federation, sub-ms search.
Claimed homepage: https://github.com/Regsorm/code-index-mcp
Matched naming pattern: npm-@regsorm/code-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 135
Registry downloads: 10061/month, 2515/week (HIGH_COMMUNITY_ADOPTION)
Codebase size: 135 lines, 6.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (123 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/cli.js:18 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.js:114
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/postinstall.js:26
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.js:111
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/postinstall.js, which makes network calls and executes/decodes/reads secrets
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/cli.js:18 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/postinstall.js:114
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/postinstall.js:26
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.js:111
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/postinstall.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 136d 359,319 604 ↑2642.1/day
Very Risky
@alibaba npm 1.12.7 — — 🪝 🌐
Package purpose: OpenCodeReview CLI — AI-powered code review tool
Claimed homepage: https://github.com/alibaba/open-code-review#readme
Matched naming pattern: npm-@alibaba-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 136
Registry downloads: 359319/month, 89829/week (HIGH_COMMUNITY_ADOPTION)
Codebase size: 604 lines, 18.9 kB across 5 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (123 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/install.js'
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/install.js:10 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/install.js:76 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/ocr.js:8 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/update.js:66
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/install.js, which makes network calls and executes/decodes/reads secrets
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/install.js'
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/scripts/install.js:10 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/install.js:76 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/ocr.js:8 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/update.js:66
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/scripts/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 139d 3,453 813 ↑24.8/day
Very Risky
@team npm 0.5.94 — — 🪝 🗄️
Package purpose: npx installer for Team Agent
Claimed homepage: https://github.com/Florious95/team-agent#readme
Matched naming pattern: npm-@team-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 139
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 3453/month, 863/week (ACTIVE_COMMUNITY_USE)
Codebase size: 813 lines, 31.3 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (127 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node npm/bincheck.mjs'
  • HIGHCREDENTIAL_PATH_HARVESTING: 'Registry / Git Credentials (~/.npmrc, ~/.pypirc)' found in package/npm/bincheck.mjs:47
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/npm/bincheck.mjs:6 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/npm/install.mjs:216
  • INFOSubstantial functional codebase (813 LOC across 2 file(s)).
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node npm/bincheck.mjs'
  • CREDENTIAL_PATH_HARVESTING: 'Registry / Git Credentials (~/.npmrc, ~/.pypirc)' found in package/npm/bincheck.mjs:47
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/npm/bincheck.mjs:6 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/npm/install.mjs:216

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 144d 6 2 ↑0.0/day
Possible Squatted Stub
azure pypi 0.1.1 anupamas0x1 —
Package purpose: anupamas0x1
Claimed homepage: https://pypi.org/project/specs-azure-core-traits/
Matched naming pattern: specs-azure-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 144
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 41 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'specs-azure-core-traits' matches AI hallucination template [specs] + [azure] + [core].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (134 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 41 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 145d 9 5 ↑0.1/day
Possible Squatted Stub
claude npm 0.0.0 — —
Package purpose: Claude integration providing pi utility for Node
Matched naming pattern: node-claude-pi
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 145
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 68 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'claude-pi' matches AI hallucination template [node] + [claude] + [pi].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (119 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 68 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 147d 7 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.0 — partnerships@dclifemagazine.com dclifemagazine.com
Package purpose: LangChain tools for Life Diverse Network (LDN) AI-powered media services
Claimed homepage: https://pypi.org/project/langchain-ldn/
Matched naming pattern: python-langchain-ldn
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 147
Registry downloads: 7/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 11 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-ldn' matches AI hallucination template [python] + [langchain] + [ldn].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'partnerships@dclifemagazine.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (136 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 11 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 149d 12 0 ↑0.1/day
Possible Squatted Stub
langchain pypi 1.0.0 — —
Package purpose: LangChain Retriever - NEAR Staking Data
Claimed homepage: https://pypi.org/project/langchain-retriever-near-staking-data/
Matched naming pattern: langchain-langchain-near
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 149
Registry downloads: 12/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 11 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (138 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 11 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 149d 1,314 6,347 ↑8.8/day
Very Risky
tapflow npm 0.24.0 — — 🪝 🗄️
Package purpose: Self-hosted iOS/Android simulator streaming for the whole team
Claimed homepage: https://github.com/jo-duchan/tapflow
Matched naming pattern: npm-tapflow-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 149
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 1314/month, 328/week (ACTIVE_COMMUNITY_USE)
Codebase size: 6347 lines, 320.7 kB across 66 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (141 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node bin/postinstall.js'
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/commands/admin-init.js:41 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/commands/agent-start.js:25 (+6 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/commands/boot.js:7 (+7 more occurrence(s) elsewhere)
  • HIGHCREDENTIAL_PATH_HARVESTING: 'SSH Private Keys (~/.ssh)' found in package/dist/commands/init.js:133
  • HIGHCREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in package/dist/commands/init.js:133
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node bin/postinstall.js'
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/commands/admin-init.js:41 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/commands/agent-start.js:25 (+6 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/commands/boot.js:7 (+7 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'SSH Private Keys (~/.ssh)' found in package/dist/commands/init.js:133
  • CREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in package/dist/commands/init.js:133

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 149d 21 447 ↑0.1/day
SUSPICIOUS
google pypi 1.1.0 unrealandychan — 🪝
Package purpose: Interactive one-command scaffold for Google ADK (Agent Development Kit) projects
Claimed homepage: https://github.com/unrealandychan/create-adk-agent
Matched naming pattern: create-google-adk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 149
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 21/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 447 lines, 19.3 kB across 13 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'create-google-adk-agent' matches AI hallucination template [create] + [google] + [adk].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (123 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALMODULE_TOPLEVEL_EXECUTION: 'os.system' executed at module scope (runs on import) in create_google_adk_agent-1.1.0/create_adk_agent/cli.py:13
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in create_google_adk_agent-1.1.0/create_adk_agent/cli.py:13
  • HIGHSYNTAX_ERROR_IN_create_google_adk_agent-1.1.0/create_adk_agent/template/agentic_rag/{{PROJECT_NAME}}/agent.py: invalid syntax (<unknown>, line 6)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in create_google_adk_agent-1.1.0/create_adk_agent/template/tools/code.py:27
Static code signals:
  • MODULE_TOPLEVEL_EXECUTION: 'os.system' executed at module scope (runs on import) in create_google_adk_agent-1.1.0/create_adk_agent/cli.py:13
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in create_google_adk_agent-1.1.0/create_adk_agent/cli.py:13
  • SYNTAX_ERROR_IN_create_google_adk_agent-1.1.0/create_adk_agent/template/agentic_rag/{{PROJECT_NAME}}/agent.py: invalid syntax (<unknown>, line 6)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in create_google_adk_agent-1.1.0/create_adk_agent/template/tools/code.py:27
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in create_google_adk_agent-1.1.0/create_adk_agent/template/tools/code.py:30
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in create_google_adk_agent-1.1.0/create_adk_agent/template/tools/web.py:12

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 151d 14 1 ↑0.1/day
Possible Squatted Stub
stripe pypi 0.0.1 — —
Package purpose: Stripe integration package for better-auth-py.
Claimed homepage: https://pypi.org/project/better-auth-stripe/
Matched naming pattern: better-stripe-stripe
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 151
Registry downloads: 14/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 36 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'better-auth-stripe' matches AI hallucination template [better] + [stripe] + [stripe].
  • HIGHClaims critical enterprise brand identity ('STRIPE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (140 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 36 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 152d 0 0 ↑0.0/day
Possible Squatted Stub
google pypi 0.0.6 — you@example.com example.com
Package purpose: Python package to scrape Google search results using an API
Claimed homepage: https://pypi.org/project/google-serp-scraper/
Matched naming pattern: google-google-scraper
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 152
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (141 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 153d 24 6 ↑0.2/day
Possible Squatted Stub
ledger pypi 0.0.1 — hello@zyvra.studio zyvra.studio
Package purpose: Audit ledger for AI agents.
Claimed homepage: https://pypi.org/project/ai-audit-ledger/
Matched naming pattern: ai-ledger-ledger
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 153
Registry downloads: 24/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 6 lines, 172 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ai-audit-ledger' matches AI hallucination template [ai] + [ledger] + [ledger].
  • HIGHClaims critical enterprise brand identity ('LEDGER').
  • HIGHPublisher email 'hello@zyvra.studio' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (142 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (6 LOC, 1 file(s), 172 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 158d 2 4 ↑0.0/day
Possible Squatted Stub
polygon pypi 0.0.0 pyd3 contributors —
Package purpose: Python port of d3-polygon
Claimed homepage: https://pypi.org/project/pyd3js-polygon/
Matched naming pattern: python-polygon-pyd3js
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 158
Registry downloads: 2/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 77 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'pyd3js-polygon' matches AI hallucination template [python] + [polygon] + [pyd3js].
  • HIGHClaims critical enterprise brand identity ('POLYGON').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (147 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 77 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 159d 3 15 ↑0.0/day
Possible Squatted Stub
cursor npm 0.1.0 — —
Package purpose: Cursor integration providing cursor utility for Xjs
Matched naming pattern: xjs-cursor-cursor
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 159
Registry downloads: 3/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'xjs-ppt-cursor' matches AI hallucination template [xjs] + [cursor] + [cursor].
  • HIGHClaims critical enterprise brand identity ('CURSOR').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (133 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 160d 8 3 ↑0.1/day
Possible Squatted Stub
coinbase pypi 1.0.0 — —
Package purpose: 币安vs Coinbase：两大加密货币交易所深度对比分析
Claimed homepage: https://gklnv.cn
Matched naming pattern: vs-coinbase-byr6kx
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 160
Registry downloads: 8/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 3 lines, 111 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'vs-coinbase-byr6kx' matches AI hallucination template [vs] + [coinbase] + [byr6kx].
  • HIGHClaims critical enterprise brand identity ('COINBASE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (148 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (3 LOC, 2 file(s), 111 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 160d — — —
Unverified Signal
— npm latest — — 🪝
Package purpose: Run multiple Claude Desktop and Claude Code accounts side by side on macOS, fully isolated.
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/commands/add.js:395 (+11 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/cli.js:175 (+3 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/src/permissions.js:41

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 164d 7 4 ↑0.0/day
Possible Squatted Stub
crewai pypi 0.0.1 Hivework —
Package purpose: Placeholder. See https://hivework.xyz.
Claimed homepage: https://pypi.org/project/hivework-crewai/
Matched naming pattern: python-crewai-hivework
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 164
Registry downloads: 7/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 139 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'hivework-crewai' matches AI hallucination template [python] + [crewai] + [hivework].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (153 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 139 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 164d 0 10 ↑0.0/day
Possible Squatted Stub
llama pypi 0.1.0 vecr contributors —
Package purpose: LlamaIndex postprocessor for vecr-compress: deterministic retention-guaranteed node compression.
Claimed homepage: https://pypi.org/project/llama-index-postprocessor-vecr/
Matched naming pattern: llama-llama-postprocessor
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 164
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 512 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (153 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 3 file(s), 512 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 164d 12 9 ↑0.1/day
Possible Squatted Stub
langchain pypi 0.1.0 vecr contributors —
Package purpose: LangChain integration for vecr-compress: deterministic retention-guaranteed LLM context compression.
Claimed homepage: https://pypi.org/project/langchain-vecr-compress/
Matched naming pattern: langchain-langchain-compress
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 164
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 9 lines, 436 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (153 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (9 LOC, 1 file(s), 436 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 165d 14 20 ↑0.1/day
Possible Squatted Stub
langchain pypi 0.1.0 — dev@hugen.tokyo hugen.tokyo
Package purpose: LangChain toolkit for 2,400+ x402 pay-per-call APIs — discover, call, and manage with no wallet setup
Claimed homepage: https://pypi.org/project/langchain-x402-toolkit/
Matched naming pattern: langchain-langchain-toolkit
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 165
Registry downloads: 14/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 858 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'dev@hugen.tokyo' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (154 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (20 LOC, 1 file(s), 858 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 167d 801 3 ↑4.8/day
Possible Squatted Stub
anthropic pypi 0.2.14 — 01@meta-agents.ai meta-agents.ai
Package purpose: Drop-in Anthropic client with MADB causal memory. One import, every turn persisted.
Claimed homepage: https://pypi.org/project/madb-anthropic/
Matched naming pattern: python-anthropic-madb
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 167
Registry downloads: 801/month, 43/week (MODERATE_USAGE)
Codebase size: 3 lines, 198 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'madb-anthropic' matches AI hallucination template [python] + [anthropic] + [madb].
  • HIGHClaims critical enterprise brand identity ('ANTHROPIC').
  • HIGHPublisher email '01@meta-agents.ai' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (157 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (3 LOC, 1 file(s), 198 bytes).
  • INFOModerate community usage with 801 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 169d 10 1 ↑0.1/day
Possible Squatted Stub
vllm pypi 0.0.0 — woosuk@inferact.ai inferact.ai
Package purpose: vLLM mini.
Claimed homepage: https://pypi.org/project/vllm-mini/
Matched naming pattern: python-vllm-mini
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 169
Registry downloads: 10/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 22 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'vllm-mini' matches AI hallucination template [python] + [vllm] + [mini].
  • HIGHClaims critical enterprise brand identity ('VLLM').
  • HIGHPublisher email 'woosuk@inferact.ai' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (158 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 22 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 169d 12 2 ↑0.1/day
Possible Squatted Stub
copilot pypi 0.0.1 — —
Package purpose: Enables GitHub Copilot as the only LLM provider for Mito AI (enterprise/admin install).
Claimed homepage: https://pypi.org/project/mito-ai-helper-github-copilot/
Matched naming pattern: mito-copilot-helper
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 169
Registry downloads: 12/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 223 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'mito-ai-helper-github-copilot' matches AI hallucination template [mito] + [copilot] + [helper].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (159 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 223 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 171d 12 15 ↑0.1/day
Possible Squatted Stub
claude npm 0.1.0 — —
Package purpose: Claude integration providing cowork utility for Node
Matched naming pattern: node-claude-cowork
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 171
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'claude-cowork' matches AI hallucination template [node] + [claude] + [cowork].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (163 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHVERSION_NOT_FOUND
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • VERSION_NOT_FOUND

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 175d 33 0 ↑0.2/day
Possible Squatted Stub
groq pypi 1.0.0 — —
Package purpose: Ask AI anything, right from your terminal — powered by Groq
Claimed homepage: https://pypi.org/project/groq-ai-cli/
Matched naming pattern: groq-groq-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 175
Registry downloads: 33/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 11 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('GROQ').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (163 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 11 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 177d 2 0 ↑0.0/day
Possible Squatted Stub
aws pypi 0.1.0 — —
Package purpose: Reusable Pulumi AWS primitive modules for Onii infrastructure.
Claimed homepage: https://pypi.org/project/pulumi-aws-modules/
Matched naming pattern: pulumi-aws-modules
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 177
Registry downloads: 2/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 12 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'pulumi-aws-modules' matches AI hallucination template [pulumi] + [aws] + [modules].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (167 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 12 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 178d 27 0 ↑0.2/day
Possible Squatted Stub
azure pypi 3.16.0.20260408 — —
Package purpose: Type stubs for pulumi-azure-native Python SDK
Claimed homepage: https://pypi.org/project/pulumi-azure-native-stubs/
Matched naming pattern: pulumi-azure-native
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 178
Registry downloads: 27/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'pulumi-azure-native-stubs' matches AI hallucination template [pulumi] + [azure] + [native].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (168 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 178d 5 0 ↑0.0/day
Possible Squatted Stub
gcp pypi 9.16.0.20260408 — —
Package purpose: Type stubs for pulumi-gcp Python SDK
Claimed homepage: https://pypi.org/project/pulumi-gcp-stubs/
Matched naming pattern: pulumi-gcp-stubs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 178
Registry downloads: 5/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'pulumi-gcp-stubs' matches AI hallucination template [pulumi] + [gcp] + [stubs].
  • HIGHClaims critical enterprise brand identity ('GCP').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (167 days ago) during the active AI hallucination slopsquatting wave.
  • MEDIUMPackage registered with suspiciously high major version (v9.16.0.20260408, major 9) despite recent registration (167 days ago, 1 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 178d 33 0 ↑0.2/day
Possible Squatted Stub
aws pypi 7.23.0.20260408 — —
Package purpose: Type stubs for pulumi-aws Python SDK
Claimed homepage: https://pypi.org/project/pulumi-aws-stubs/
Matched naming pattern: pulumi-aws-stubs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 178
Registry downloads: 33/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'pulumi-aws-stubs' matches AI hallucination template [pulumi] + [aws] + [stubs].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (167 days ago) during the active AI hallucination slopsquatting wave.
  • MEDIUMPackage registered with suspiciously high major version (v7.23.0.20260408, major 7) despite recent registration (167 days ago, 1 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 180d 1 5 ↑0.0/day
Possible Squatted Stub
workspace npm 0.0.0 — —
Package purpose: Workspace integration providing workspace utility for Revola
Matched naming pattern: revola-workspace-workspace
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 180
Registry downloads: 1/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 111 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'revola-plugin-workspace' matches AI hallucination template [revola] + [workspace] + [workspace].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (154 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 111 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 181d 0 0 ↑0.0/day
Possible Squatted Stub
gcp pypi 2026.4.5.1318 Praveen HA praveen.balla41@gmail.com gmail.com
Package purpose: GCP onboarding automation agent for gitops
Claimed homepage: https://pypi.org/project/ocp-gcp-project-git-merge-requester/
Matched naming pattern: ocp-gcp-project
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 181
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 8 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ocp-gcp-project-git-merge-requester' matches AI hallucination template [ocp] + [gcp] + [project].
  • HIGHClaims critical enterprise brand identity ('GCP').
  • HIGHPublisher email 'praveen.balla41@gmail.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (171 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 8 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 182d — — —
Unverified Signal
— npm latest — — 🪝
Package purpose: Claude Code development standards — rules, hooks, agents, commands, and skills
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/cde.mjs:62 (+6 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/cde.mjs:224 (+7 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/bin/install.mjs:1774
  • CREDENTIAL_PATH_HARVESTING: 'Registry / Git Configuration (~/.yarnrc, ~/.gitconfig)' found in package/scripts/ci/installer-lifecycle.mjs:160

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 185d 0 0 ↑0.0/day
Possible Squatted Stub
google pypi 1.0.20260401 — —
Package purpose: Python type stubs for com.google.guava:listenablefuture:1.0 generated with chaquopy-stubgen
Claimed homepage: https://pypi.org/project/chaquopy-stubs-com-google-guava-listenablefuture/
Matched naming pattern: chaquopy-google-com
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 185
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 17 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'chaquopy-stubs-com-google-guava-listenablefuture' matches AI hallucination template [chaquopy] + [google] + [com].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (174 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 17 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 185d 0 0 ↑0.0/day
Possible Squatted Stub
google pypi 1.13.0.20260401 — —
Package purpose: Python type stubs for com.google.android.material:material:1.13.0 generated with chaquopy-stubgen
Claimed homepage: https://pypi.org/project/chaquopy-stubs-com-google-android-material-material/
Matched naming pattern: chaquopy-google-com
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 185
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 129 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'chaquopy-stubs-com-google-android-material-material' matches AI hallucination template [chaquopy] + [google] + [com].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (173 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 129 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 185d 64 0 ↑0.3/day
Possible Squatted Stub
google pypi 2.48.0.20260401 — —
Package purpose: Python type stubs for com.google.errorprone:error_prone_annotations:2.48.0 generated with chaquopy-stubgen
Claimed homepage: https://pypi.org/project/chaquopy-stubs-com-google-errorprone-error-prone-annotations/
Matched naming pattern: chaquopy-google-com
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 185
Registry downloads: 64/month, 55/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 22 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'chaquopy-stubs-com-google-errorprone-error-prone-annotations' matches AI hallucination template [chaquopy] + [google] + [com].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (174 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 22 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 186d 14 1 ↑0.1/day
Possible Squatted Stub
aws pypi 0.0.0 HH-MWB h.hong@mail.com mail.com
Package purpose: Powertools for AWS Glue is a developer toolkit to implement best practices and increase developer velocity.
Claimed homepage: https://pypi.org/project/aws-glue-powertools/
Matched naming pattern: aws-aws-powertools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 186
Registry downloads: 14/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 67 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'h.hong@mail.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (175 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 67 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
« Prev Next »
LINK COPIED TO CLIPBOARD