Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 102 | 474d | 17 | 43 | ↑0.0/day |
Very Risky
|
ethereum | npm | 1.0.3 | Animoca Brands | — | 🪝 | |
|
Package purpose: Solidity contracts for the Recho project.
Claimed homepage: https://github.com/animoca/recho-ethereum-contracts
Matched naming pattern: node-ethereum-recho-ethereum-contracts
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 474
Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 43 lines, 1.4 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 102 | 901d | 13 | 47 | ↑0.0/day |
Very Risky
|
ethereum | npm | 2.1.1 | Animoca Brands | — | 🪝 | |
|
Package purpose: ## Development
Matched naming pattern: node-ethereum-mocaverse-ethereum-contracts
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 901
Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 47 lines, 1.6 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 102 | 1070d | 57 | 52 | ↑0.1/day |
Very Risky
|
ethereum | npm | 1.6.1 | Animoca Brands | — | 🪝 | |
|
Package purpose: OpenCampus contracts
Matched naming pattern: node-ethereum-opencampus-ethereum-contracts
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1070
Registry downloads: 57/month, 14/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 52 lines, 1.7 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 102 | 1285d | 34 | 28 | ↑0.0/day |
Very Risky
|
ethereum | npm | 1.0.0 | author | — | 🪝 | |
|
Package purpose: description
Claimed homepage: https://github.com/animoca/template-ethereum-contracts#readme
Matched naming pattern: node-ethereum-template-ethereum-contracts
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1285
Registry downloads: 34/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 28 lines, 1.0 kB across 7 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 35h | — | — | — |
Very Risky
|
— | pypi | 5.1.0.1 | NIH MEG Core Facility | — | 🪝 | |
|
Package purpose: Synthetic Aperture Magnetometry Suite Version 5
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 100 | 44h | — | — | — |
Very Risky
|
— | pypi | 0.2.1 | — | — | 🪝 | |
|
Package purpose: Local speech-to-text and text-to-speech service
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 100 | 48h | — | — | — |
Very Risky
|
— | pypi | 0.1.5 | — | — | 🪝 | |
|
Package purpose: Secure Files: share local files and folders through abstractendeavors.com (or your own server) without uploading them. Includes the desktop agent, the shared tar/resume core and the server relay.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 100 | 3d | — | — | — |
Very Risky
|
— | pypi | 1.25.1 | Xinzhe Xie | — | 🪝 | |
|
Package purpose: ZJU campus network (Srun portal) auto-login & keep-alive: CLI + systemd service + PyQt6 GUI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 100 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | gronxb | — | 🪝 🌐 | |
|
Package purpose: Test utilities for Hot Updater packages
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | ShunyaPulse | — | 🪝 🌐 | |
|
Package purpose: Production-grade autonomous AI agent platform optimized for Google Cloud Run, Neon pgvector, and Gemini/Cloudflare
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Dr. John | — | 🪝 🌐 | |
|
Package purpose: TTY web browser using raw CDP and Kitty graphics protocol
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP server for PreSonus Studio One: read songs from .song files, and talk to a running Studio One through an in-app bridge device.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Ghostly for bots and terminals: the app's own engine, headless on Node, behind a daemon and a `ghostly` command with JSON output.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: App Store and Play Store screenshots, preview videos and 49 design tools for coding agents. Drives the real Open Screenshot Generator editor headlessly.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Invertase | — | 🪝 🌐 | |
|
Package purpose: reeval: an eval runner for coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: APE — hybrid-native MCP server with an embedded, user-configurable agent: multi-engine orchestration (Genesis + EVE + ADAM + Skein), declarative connectors, task-graph execution, audit ledger, memory. No 5-repo clone required.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TrustBase 商家本地开店一键安装器: 链节点 trustchaind + 本地索引器 + 卖家后端 (含入驻页), 自动打开入驻页 (原名 @trustbase/shopxo-init, 2026-09-29 改名)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Spotter — embeddable issue capture for Trusplex: screenshots, replay, console, network and environment in every report, plus privacy-first web analytics.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
SUSPICIOUS
|
— | npm | latest | alfredosdpiii | — | 🪝 🌐 | |
|
Package purpose: Terminal coding agent that works through a persistent Python REPL: sub-agents, bounded sub-model calls, background jobs and gated memory. A fork of Pi.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Vite integration for Solid GPUI applications running in Bun or QuickJS.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 夭夭 AI：聊天、多 Agent 团队、文件库与电脑工作空间
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | 0 | 169 | ↑0.0/day |
Very Risky
|
@nightlylabs/electron | npm | 44.4.5-hybrid.1 | — | — | 🪝 🌐 | |
|
Package purpose: Locally built Electron with opt-in native phone passkeys
Claimed homepage: https://github.com/nightly-labs/electron-hybrid#readme
Matched naming pattern: npm-@nightlylabs/electron-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 4
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 169 lines, 9.5 kB across 8 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Evan Bacon | — | 🪝 🌐 | |
|
Package purpose: Fork of @expo/serve-sim with the simstream low-latency video engine (--codec simstream). Experimental.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Bring your own AI to the web: the Leuria engine. Lets websites you approve use the AI on your machine, through tools the page provides.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Jorge Torres | — | 🪝 🌐 | |
|
Package purpose: Rockolita: YouTube sin anuncios y sin patrocinios para televisores Samsung (Tizen). © 2026 Jorge Beduit Torres Sanchez.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | tunaarikaya | — | 🪝 🌐 | |
|
Package purpose: App Store Connect ve Google Play'i tek MCP sunucusunda birleştirir. Yapay zekâ asistanın iki mağazayı da yönetsin.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A repository-aware AI implementation crew for existing and greenfield projects.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Agent Forge contributors | — | 🪝 🌐 | |
|
Package purpose: Coding agent CLI with read, bash, edit, write tools and session management
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Ziroo Code - AI coding agent in your terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Pushary | — | 🪝 🌐 | |
|
Package purpose: Permission hooks for AI coding agents: route tool approvals through Pushary push notifications
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A typechecker for your issue tracker — every checked acceptance criterion must cite a real commit and proof, verified by `ztrack check` (and enforced on coding agents via a loop gate).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Magnolia International Ltd. | — | 🪝 🌐 | |
|
Package purpose: Guided setup for the Magnolia MCP Dev Server: registry access, secrets, AI client registration, and a final health check
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: deliver2.ai CLI — installs telemetry hooks into AI coding agents (Claude Code, Codex, OpenCode, VS Code Copilot) and forwards session events to the deliver2.ai ingestion API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Browse and lint AI context files in a repo via a local web UI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
SUSPICIOUS
|
— | npm | latest | VoidZero Inc. | — | 🪝 🌐 | |
|
Package purpose: The Unified Toolchain for the Web
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Web UI for the pi coding agent
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
Very Risky
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for Visual FoxPro 9 — no Rust or Python required
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | ThyScript Team | — | 🪝 🌐 | |
|
Package purpose: ThyScript v3.0 - A blazing-fast programming language on Node.js with public internet hosting, full npm ecosystem access, JIT compiler, and hundreds of built-in features
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Flatland Labs | — | 🪝 🌐 | |
|
Package purpose: flatland board: an agent whiteboard beside one Claude Code or Codex terminal conversation. From Flatland Labs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: IDE for open-source development
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Johan Lundqvist | — | 🪝 🌐 | |
|
Package purpose: Scaffold a local MicroShift-in-Container (minc) OpenShift/Kubernetes dev cluster, with optional Console, CloudNativePG Postgres, and Argo CD.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local X (Twitter) API v2 twin (post, reply, delete, timelines, user lookup) with an x.com mirror, built on @volter/world-core.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local Supabase twin: the Management API (api.supabase.com/v1) and a project's data plane (<ref>.supabase.co: PostgREST at /rest/v1, Storage at /storage/v1, Auth at /auth/v1) served over the World's own Postgres, which supabase-js talks to unmodified. Buil
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local Sentry twin — a faithful, stateful local Sentry error-monitoring API your real `@sentry/node` SDK talks to unmodified. Ingest captureException events into grouped issues, browse the Web API + dashboard mirror, simulate, and fork. Built on @volter/wo
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local Resend twin — a faithful, stateful local Resend email API your real `resend` SDK talks to unmodified. Send/batch/schedule emails, audiences, contacts, domains, API keys, a deterministic delivery lifecycle, and svix-style signed webhooks. Local inbox
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local Reddit twin (an account's submissions — self, link, image, video with poster — comments, deletion, listings and threads; the media lease with its S3-style signed upload; the password and client-credentials grants) with a reddit.com profile/subreddit
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local Postmark twin — a faithful, stateful local Postmark transactional-email API your real `postmark` SDK talks to unmodified. Plain/templated/batch sends, outbound + inbound message activity, bounces and delivery stats, templates, message streams, suppr
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||