🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
75 231d 0 5 ↑0.0/day
Possible Squatted Stub
claude pypi 0.0.1 Faust Eriksen —
Package purpose: Herd execution adapter for Claude Code CLI.
Claimed homepage: https://pypi.org/project/herd-agent-claude/
Matched naming pattern: herd-claude-claude
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 231
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 170 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'herd-agent-claude' matches AI hallucination template [herd] + [claude] + [claude].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 220 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 170 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 242d 87 4 ↑0.4/day
Possible Squatted Stub
vllm pypi 0.1.0 KoalaVault Team —
Package purpose: KoalaVault Key Provider for CryptoTensors - Secure key management for encrypted model deployment with vLLM
Claimed homepage: https://koalavault.com
Matched naming pattern: cryptotensors-vllm-vllm
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 242
Registry downloads: 87/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 98 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'cryptotensors-koalavault-vllm' matches AI hallucination template [cryptotensors] + [vllm] + [vllm].
  • HIGHClaims critical enterprise brand identity ('VLLM').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 232 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 98 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 244d 7 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.0 — grandpaej@example.com example.com
Package purpose: A low-cost, cross-language LangChain implementation in Rust
Claimed homepage: https://pypi.org/project/mini-langchain/
Matched naming pattern: python-langchain-mini
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 244
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 32 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'mini-langchain' matches AI hallucination template [python] + [langchain] + [mini].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'grandpaej@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 234 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 32 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 245d 257 0 ↑1.0/day
Possible Squatted Stub
eth pypi 0.1.8 — —
Package purpose: # Eth-Lake A Python library for extracting Ethereum blockchain data directly into Parquet. ## Installation ```bash pip install eth-lake ``` ## Usage ### Bulk Extraction (Pipeline) Fetch a range of blocks concurrently and write them as Parquet files to a specific directory. ```python import et
Claimed homepage: https://pypi.org/project/eth-lake/
Matched naming pattern: python-eth-lake
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 245
Registry downloads: 257/month, 36/week (MODERATE_USAGE)
Codebase size: 0 lines, 0 Bytes across 11 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'eth-lake' matches AI hallucination template [python] + [eth] + [lake].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 234 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 11 file(s), 0 bytes).
  • INFOModerate community usage with 257 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 250d 10 4 ↑0.0/day
Possible Squatted Stub
bitcoin pypi 0.0.1 — —
Package purpose: Taproot-compatible PQ signatures
Claimed homepage: https://pypi.org/project/pq-bitcoin-taproot/
Matched naming pattern: pq-bitcoin-taproot
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 250
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 113 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'pq-bitcoin-taproot' matches AI hallucination template [pq] + [bitcoin] + [taproot].
  • HIGHClaims critical enterprise brand identity ('BITCOIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 240 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 113 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 250d 8 4 ↑0.0/day
Possible Squatted Stub
solana pypi 0.0.1 — —
Package purpose: Solana transaction signing with PQ
Claimed homepage: https://pypi.org/project/pq-solana-signer/
Matched naming pattern: pq-solana-signer
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 250
Registry downloads: 8/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 113 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'pq-solana-signer' matches AI hallucination template [pq] + [solana] + [signer].
  • HIGHClaims critical enterprise brand identity ('SOLANA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 239 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 113 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 250d 5 4 ↑0.0/day
Possible Squatted Stub
eth pypi 0.0.1 — —
Package purpose: Ethereum transaction signing with PQ
Claimed homepage: https://pypi.org/project/pq-eth-signer/
Matched naming pattern: pq-eth-signer
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 250
Registry downloads: 5/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 112 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'pq-eth-signer' matches AI hallucination template [pq] + [eth] + [signer].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 239 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 112 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 253d 20 2 ↑0.1/day
Possible Squatted Stub
claude pypi 0.1.0 — your.email@example.com example.com
Package purpose: Metapackage for Jupyter AI Claude Code experience
Claimed homepage: https://pypi.org/project/jupyter-ai-claude-code-experience/
Matched naming pattern: jupyter-claude-claude
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 253
Registry downloads: 20/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 76 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'jupyter-ai-claude-code-experience' matches AI hallucination template [jupyter] + [claude] + [claude].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 242 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 76 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 266d — — —
Unverified Signal
— npm latest Jimoh Ovbiagele — 🪝 🌐
Package purpose: Claude Code CLI with Termux/Android compatibility fixes - a wrapper that patches issues with Sharp, ripgrep, and path resolution on ARM64 Android
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node postinstall.js'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/patches/apply-all.js:63 (+13 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/src/auto-update.js:3 (+3 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/auto-update.js:94 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/src/auto-update.js:6

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 267d — — —
Unverified Signal
— npm latest ADAC 1001 — 🪝
Package purpose: Intelligent, self-configuring setup for Claude Code. One command analyzes your project, configures Claude, and shows you what it did — plus smart terminal titles and status beeps for running multiple sessions at once.
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/.claude/hooks/arcade-beeps.js:48 (+6 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/.claude/hooks/arcade-beeps.js:95 (+6 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/.claude/hooks/arcade-beeps.js:54 (+8 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in package/.claude/hooks/auto-guard.js:66
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/.claude/scripts/docs-previews.js:65

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 268d 49 4 ↑0.2/day
Possible Squatted Stub
openai pypi 0.5.0 — —
Package purpose: Openai integration providing websocket utility for Dora
Claimed homepage: https://pypi.org/project/dora-openai-websocket/
Matched naming pattern: dora-openai-websocket
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 268
Registry downloads: 49/month, 14/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 167 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'dora-openai-websocket' matches AI hallucination template [dora] + [openai] + [websocket].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 258 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 167 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 270d 15 2 ↑0.1/day
Possible Squatted Stub
openai pypi 0.0.1 Shepherd Team —
Package purpose: OpenAI-compatible protocol types and utilities
Claimed homepage: https://pypi.org/project/openai-protocol/
Matched naming pattern: python-openai-protocol
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 270
Registry downloads: 15/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 76 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'openai-protocol' matches AI hallucination template [python] + [openai] + [protocol].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 260 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 76 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 271d 9 14 ↑0.0/day
Possible Squatted Stub
aws pypi 0.1.0 Smit Vekariya —
Package purpose: Custom AWS SDK wrapper over boto3
Claimed homepage: https://pypi.org/project/email-aws-sdk/
Matched naming pattern: email-aws-sdk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 271
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 410 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'email-aws-sdk' matches AI hallucination template [email] + [aws] + [sdk].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 262 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (14 LOC, 2 file(s), 410 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 272d 19 2,020 ↑0.1/day
SUSPICIOUS
claude pypi 0.7.3 TheTank10 — 🪝
Package purpose: A CLI and API for interacting with Claude
Claimed homepage: https://github.com/TheTank10/claude-cli
Matched naming pattern: unofficial-claude-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 272
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 19/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2020 lines, 100.4 kB across 12 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'unofficial-claude-cli' matches AI hallucination template [unofficial] + [claude] + [cli].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 246 days ago within the 1-year AI tool proliferation window.
  • CRITICALMODULE_TOPLEVEL_EXECUTION: 'os.system' executed at module scope (runs on import) in unofficial_claude_cli-0.7.3/src/cli/__init__.py:10
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in unofficial_claude_cli-0.7.3/src/cli/__init__.py:10
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in unofficial_claude_cli-0.7.3/src/helpers.py:12
  • INFOSubstantial functional codebase (2020 LOC across 12 file(s)).
Static code signals:
  • MODULE_TOPLEVEL_EXECUTION: 'os.system' executed at module scope (runs on import) in unofficial_claude_cli-0.7.3/src/cli/__init__.py:10
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in unofficial_claude_cli-0.7.3/src/cli/__init__.py:10
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in unofficial_claude_cli-0.7.3/src/helpers.py:12

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 278d 15 0 ↑0.1/day
Possible Squatted Stub
claude pypi 0.1.1 — —
Package purpose: Add your description here
Claimed homepage: https://pypi.org/project/iflow-mcp_adstastic_claude-code-approval/
Matched naming pattern: iflow-claude-adstastic
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 278
Registry downloads: 15/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 5 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'iflow-mcp-adstastic-claude-code-approval' matches AI hallucination template [iflow] + [claude] + [adstastic].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 267 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 5 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 278d 12 21,447 ↑0.0/day
SUSPICIOUS
vllm pypi 0.5.1 MindSpore Team — 🪝
Package purpose: A high-throughput and memory-efficient inference and serving engine for LLMs
Claimed homepage: https://gitee.com/mindspore/vllm-mindspore
Matched naming pattern: python-vllm-mindspore
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 278
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21447 lines, 1.1 MB across 123 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'vllm-mindspore' matches AI hallucination template [python] + [vllm] + [mindspore].
  • HIGHClaims critical enterprise brand identity ('VLLM').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 252 days ago within the 1-year AI tool proliferation window.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_mindspore/scripts.py:56
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_mindspore/transformers_patch.py:23
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in vllm_mindspore/utils.py:319
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_mindspore/utils.py:221
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_mindspore/scripts.py:56
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_mindspore/transformers_patch.py:23
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in vllm_mindspore/utils.py:319
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_mindspore/utils.py:221
  • MODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in vllm_mindspore/entrypoints/__main__.py:66
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in vllm_mindspore/entrypoints/__main__.py:66
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_mindspore/executor/ray_utils.py:213
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in vllm_mindspore/model_executor/model_loader/utils.py:147

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 284d 8 15 ↑0.0/day
Possible Squatted Stub
workspace npm 1.0.0 — —
Package purpose: Workspace integration providing scheduler utility for Ngx
Matched naming pattern: ngx-workspace-scheduler
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 284
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ngx-resource-scheduler-workspace' matches AI hallucination template [ngx] + [workspace] + [scheduler].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 258 days ago within the 1-year AI tool proliferation window.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 288d 5 4 ↑0.0/day
Possible Squatted Stub
gemini pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: A fully typed, validated async client for the Gemini API
Claimed homepage: https://pypi.org/project/typed-gemini/
Matched naming pattern: python-gemini-typed
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 288
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 94 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'typed-gemini' matches AI hallucination template [python] + [gemini] + [typed].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'marcel@tribulnation.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 280 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 94 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 288d 6 4 ↑0.0/day
Possible Squatted Stub
xrp pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: A fully typed, validated async client for the Xrp API
Claimed homepage: https://pypi.org/project/typed-xrp/
Matched naming pattern: python-xrp-typed
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 288
Registry downloads: 6/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 88 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'typed-xrp' matches AI hallucination template [python] + [xrp] + [typed].
  • HIGHClaims critical enterprise brand identity ('XRP').
  • HIGHPublisher email 'marcel@tribulnation.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 280 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 88 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 288d 7 4 ↑0.0/day
Possible Squatted Stub
solana pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: A fully typed, validated async client for the Solana API
Claimed homepage: https://pypi.org/project/typed-solana/
Matched naming pattern: python-solana-typed
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 288
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 94 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'typed-solana' matches AI hallucination template [python] + [solana] + [typed].
  • HIGHClaims critical enterprise brand identity ('SOLANA').
  • HIGHPublisher email 'marcel@tribulnation.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 280 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 94 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 288d 9 4 ↑0.0/day
Possible Squatted Stub
bitcoin pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: A fully typed, validated async client for the Bitcoin API
Claimed homepage: https://pypi.org/project/typed-bitcoin/
Matched naming pattern: python-bitcoin-typed
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 288
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 96 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'typed-bitcoin' matches AI hallucination template [python] + [bitcoin] + [typed].
  • HIGHClaims critical enterprise brand identity ('BITCOIN').
  • HIGHPublisher email 'marcel@tribulnation.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 280 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 96 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 289d 11 0 ↑0.0/day
Possible Squatted Stub
gcp pypi 9.99.99 JEFG —
Package purpose: Simple library that prints test.
Claimed homepage: https://pypi.org/project/davi-aws-ecs-gcp-federation/
Matched naming pattern: davi-gcp-ecs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 289
Registry downloads: 11/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 12 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'davi-aws-ecs-gcp-federation' matches AI hallucination template [davi] + [gcp] + [ecs].
  • HIGHClaims critical enterprise brand identity ('GCP').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 278 days ago within the 1-year AI tool proliferation window.
  • MEDIUMPackage registered with suspiciously high major version (v9.99.99, major 9) despite recent registration (278 days ago, 1 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 12 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 289d 10 4 ↑0.0/day
Possible Squatted Stub
cryptocom pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: A fully typed, validated async client for the Cryptocom API
Claimed homepage: https://pypi.org/project/typed-cryptocom/
Matched naming pattern: python-cryptocom-typed
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 289
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 100 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'typed-cryptocom' matches AI hallucination template [python] + [cryptocom] + [typed].
  • HIGHClaims critical enterprise brand identity ('CRYPTOCOM').
  • HIGHPublisher email 'marcel@tribulnation.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 281 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 100 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 289d 4 4 ↑0.0/day
Possible Squatted Stub
okx pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: A fully typed, validated async client for the Okx API
Claimed homepage: https://pypi.org/project/typed-okx/
Matched naming pattern: python-okx-typed
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 289
Registry downloads: 4/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 88 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'typed-okx' matches AI hallucination template [python] + [okx] + [typed].
  • HIGHClaims critical enterprise brand identity ('OKX').
  • HIGHPublisher email 'marcel@tribulnation.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 281 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 88 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 289d 0 4 ↑0.0/day
Possible Squatted Stub
bitfinex pypi 0.1.0 — marcel@tribulnation.com tribulnation.com
Package purpose: A fully typed, validated async client for the Bitfinex API
Claimed homepage: https://pypi.org/project/typed-bitfinex/
Matched naming pattern: python-bitfinex-typed
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 289
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 98 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'typed-bitfinex' matches AI hallucination template [python] + [bitfinex] + [typed].
  • HIGHClaims critical enterprise brand identity ('BITFINEX').
  • HIGHPublisher email 'marcel@tribulnation.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 263 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 98 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 290d 16 15 ↑0.1/day
Possible Squatted Stub
claude npm 0.1.0 — —
Package purpose: Claude integration providing starter utility for Create
Matched naming pattern: create-claude-starter
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 290
Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'create-claude-starter' matches AI hallucination template [create] + [claude] + [starter].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 284 days ago within the 1-year AI tool proliferation window.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHVERSION_NOT_FOUND
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • VERSION_NOT_FOUND

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 297d 0 0 ↑0.0/day
Possible Squatted Stub
claude pypi 0.1.0 Farhan Ali Raza support@skydeck.ai skydeck.ai
Package purpose: Local semantic code search for Claude Code (MCP) using EmbeddingGemma, FAISS, and AST/tree-sitter chunking. 100% local embeddings and indexing.
Claimed homepage: https://pypi.org/project/mseep-claude-context-local/
Matched naming pattern: mseep-claude-context
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 297
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 11 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'mseep-claude-context-local' matches AI hallucination template [mseep] + [claude] + [context].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'support@skydeck.ai' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 286 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 11 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 298d 23 4,165 ↑0.1/day
Very Risky
claude npm 0.1.4 Clay Roach — 🪝 📡
Package purpose: Effect-TS utilities for extracting and archiving Claude Code sessions
Claimed homepage: https://github.com/clayroach/claude-session-gists#readme
Matched naming pattern: claude-claude-gists
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 298
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 23/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4165 lines, 165.8 kB across 15 files (LARGE_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage registered 279 days ago within the 1-year AI tool proliferation window.
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'GitHub Gists API Exfiltration (Dead Drop)' found in package/cjs/Gist.js:84 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/cjs/Gist.js:40 (+3 more occurrence(s) elsewhere)
  • INFOSubstantial functional codebase (4165 LOC across 15 file(s)).
  • INFOPackage affiliated with trusted vendor 'claude' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection.
  • CRITICALCRITICAL: Weaponized payload detected on package affiliated with trusted vendor 'claude'. High probability of vendor account takeover, compromised credentials, or malicious release.
Static code signals:
  • EXFILTRATION_DESTINATION_DETECTED: 'GitHub Gists API Exfiltration (Dead Drop)' found in package/cjs/Gist.js:84 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/cjs/Gist.js:40 (+3 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 311d 15 0 ↑0.0/day
Possible Squatted Stub
google pypi 0.1.0 Zz Chen chy168@gmail.com gmail.com
Package purpose: # Introduction This project provides a Google Chat integration for MCP (Model Control Protocol) servers written by Python with FastMCP. It allows you to access and interact with Google Chat spaces and messages through MCP tools. ## Structure The project consists of two main components: 1. **MCP S
Claimed homepage: https://pypi.org/project/iflow-mcp_google-chat-mcp-server/
Matched naming pattern: iflow-google-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 311
Registry downloads: 15/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'iflow-mcp-google-chat-mcp-server' matches AI hallucination template [iflow] + [google] + [google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'chy168@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 301 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 313d 26 1 ↑0.1/day
Possible Squatted Stub
hf pypi 0.0.1 — —
Package purpose: Hugging Face Agents Framework - Name reserved for upcoming framework
Claimed homepage: https://pypi.org/project/hf-agents/
Matched naming pattern: python-hf-agents
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 313
Registry downloads: 26/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 48 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'hf-agents' matches AI hallucination template [python] + [hf] + [agents].
  • HIGHClaims critical enterprise brand identity ('HF').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 303 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 48 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 325d 1 15 ↑0.0/day
Possible Squatted Stub
okta npm 0.1.0 — —
Package purpose: Okta integration providing sluey utility for Okta
Matched naming pattern: okta-okta-sluey
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 325
Registry downloads: 1/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('OKTA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 299 days ago within the 1-year AI tool proliferation window.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 325d 5 15 ↑0.0/day
Possible Squatted Stub
okta npm 0.1.0 — —
Package purpose: Okta integration providing riris utility for Okta
Matched naming pattern: okta-okta-riris
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 325
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('OKTA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 303 days ago within the 1-year AI tool proliferation window.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 325d 4 15 ↑0.0/day
Possible Squatted Stub
okta npm 0.1.0 — —
Package purpose: Okta integration providing sluey utility for Okta
Matched naming pattern: okta-okta-sluey
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 325
Registry downloads: 4/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('OKTA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 301 days ago within the 1-year AI tool proliferation window.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 325d 4 15 ↑0.0/day
Possible Squatted Stub
okta npm 0.1.0 — —
Package purpose: Okta integration providing breki utility for Okta
Matched naming pattern: okta-okta-breki
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 325
Registry downloads: 4/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('OKTA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 318 days ago within the 1-year AI tool proliferation window.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHVERSION_NOT_FOUND
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • VERSION_NOT_FOUND

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 325d 4 15 ↑0.0/day
Possible Squatted Stub
azure npm 0.1.0 — —
Package purpose: Azure integration providing meadowlark utility for Anonymous
Matched naming pattern: anonymous-azure-meadowlark
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 325
Registry downloads: 4/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'anonymous-azure-meadowlark' matches AI hallucination template [anonymous] + [azure] + [meadowlark].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 313 days ago within the 1-year AI tool proliferation window.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHVERSION_NOT_FOUND
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • VERSION_NOT_FOUND

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 326d 8 0 ↑0.0/day
Possible Squatted Stub
cursor pypi 0.1.0 — jbdamask@gmail.com gmail.com
Package purpose: A Model Context Protocol (MCP) server for accessing Cursor IDE's SQLite databases
Claimed homepage: https://pypi.org/project/iflow-mcp_cursor-db-mcp/
Matched naming pattern: iflow-cursor-cursor
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 326
Registry downloads: 8/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 13 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'iflow-mcp-cursor-db-mcp' matches AI hallucination template [iflow] + [cursor] + [cursor].
  • HIGHClaims critical enterprise brand identity ('CURSOR').
  • HIGHPublisher email 'jbdamask@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 315 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 13 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 338d 7 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.0 — —
Package purpose: Langchain integration providing exp utility for Python
Claimed homepage: https://pypi.org/project/langchain-exp/
Matched naming pattern: python-langchain-exp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 338
Registry downloads: 7/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 6 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-exp' matches AI hallucination template [python] + [langchain] + [exp].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 328 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 6 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 340d 17 2 ↑0.1/day
Possible Squatted Stub
openai pypi 0.0.1 Handlebar Team contact@gethandlebar.com gethandlebar.com
Package purpose: Core governance layer for handlebar (https://gethandlebar.com)
Claimed homepage: https://pypi.org/project/handlebar-openai/
Matched naming pattern: python-openai-handlebar
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 340
Registry downloads: 17/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 50 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'handlebar-openai' matches AI hallucination template [python] + [openai] + [handlebar].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'contact@gethandlebar.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 331 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 50 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 340d 0 2 ↑0.0/day
Possible Squatted Stub
claude pypi 0.0.1 Handlebar Team contact@gethandlebar.com gethandlebar.com
Package purpose: Core governance layer for handlebar (https://gethandlebar.com)
Claimed homepage: https://pypi.org/project/handlebar-claude/
Matched naming pattern: python-claude-handlebar
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 340
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 50 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'handlebar-claude' matches AI hallucination template [python] + [claude] + [handlebar].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'contact@gethandlebar.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 330 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 50 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 342d 569 454 ↑1.7/day
Very Risky
discord npm 0.2.7 xxczaki — 🪝
Package purpose: A discord-player extractor using YouTube SABR streaming with googlevideo and youtubei.js
Claimed homepage: https://github.com/xxczaki/discord-bot/tree/main/packages/discord-player-googlevideo#readme
Matched naming pattern: discord-discord-googlevideo
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 342
Registry downloads: 569/month, 142/week (MODERATE_USAGE)
Codebase size: 454 lines, 18.4 kB across 8 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage registered 317 days ago within the 1-year AI tool proliferation window.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/utils/generateWebPoToken.js:74 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/utils/generateWebPoToken.js:39
  • CRITICALSOURCE_CODE_DYNAMIC_CODE_LOADER: execution primitive combined with decode/network/obfuscation call in package/dist/utils/generateWebPoToken.js
  • INFOModerate community usage with 569 monthly downloads.
  • INFOPackage affiliated with trusted vendor 'discord' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (80 -> 40) to reduce false positives while retaining hijack/takeover detection.
  • CRITICALCRITICAL: Weaponized payload detected on package affiliated with trusted vendor 'discord'. High probability of vendor account takeover, compromised credentials, or malicious release.
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/utils/generateWebPoToken.js:74 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/utils/generateWebPoToken.js:39
  • SOURCE_CODE_DYNAMIC_CODE_LOADER: execution primitive combined with decode/network/obfuscation call in package/dist/utils/generateWebPoToken.js

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 347d 0 15 ↑0.0/day
Possible Squatted Stub
aws npm 0.1.0 — —
Package purpose: Aws integration providing agent utility for Aws
Matched naming pattern: aws-aws-agent
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 347
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 339 days ago within the 1-year AI tool proliferation window.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHVERSION_NOT_FOUND
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • VERSION_NOT_FOUND

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 351d 10 5 ↑0.0/day
Possible Squatted Stub
xai pypi 1.1.4 — rhlongwa@gmail.com gmail.com
Package purpose: A scorecard library with SHAP integration
Claimed homepage: https://pypi.org/project/xai-creditscorecard/
Matched naming pattern: python-xai-creditscorecard
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 351
Registry downloads: 10/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 266 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'xai-creditscorecard' matches AI hallucination template [python] + [xai] + [creditscorecard].
  • HIGHClaims critical enterprise brand identity ('XAI').
  • HIGHPublisher email 'rhlongwa@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 340 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 266 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 354d 13 0 ↑0.0/day
Possible Squatted Stub
workspace pypi 0.1.0 — —
Package purpose: Workspace for Dotprompt packages
Claimed homepage: https://pypi.org/project/dotprompt-workspace/
Matched naming pattern: python-workspace-dotprompt
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 354
Registry downloads: 13/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 12 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'dotprompt-workspace' matches AI hallucination template [python] + [workspace] + [dotprompt].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 343 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 12 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 354d 0 5 ↑0.0/day
Possible Squatted Stub
aws pypi 0.0.0 — iddvilliers@gmail.com gmail.com
Package purpose: AWS Tasks MCP Server
Claimed homepage: https://pypi.org/project/aws-tasks-mcp-server/
Matched naming pattern: aws-aws-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 354
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 72 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'iddvilliers@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 345 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 72 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 354d 55 5 ↑0.2/day
Possible Squatted Stub
aws pypi 0.0.0 — iddvilliers@gmail.com gmail.com
Package purpose: AWS MCP Server
Claimed homepage: https://pypi.org/project/aws-mcp-server/
Matched naming pattern: aws-aws-server
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 354
Registry downloads: 55/month, 13/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 66 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'iddvilliers@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 345 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 66 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 355d 126 124 ↑0.4/day
SUSPICIOUS
llama pypi 0.2.0 mihasicehcek lebedev.mikhail@pdffiller.team pdffiller.team 🪝
Package purpose: SignNow MCP tools for LlamaIndex agents (expose SignNow MCP server tools as FunctionTool).
Claimed homepage: https://pypi.org/project/llama-index-tools-signnow/
Matched naming pattern: llama-llama-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 355
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 126/month, 18/week (MODERATE_USAGE)
Codebase size: 124 lines, 5.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'lebedev.mikhail@pdffiller.team' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 345 days ago within the 1-year AI tool proliferation window.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_index_tools_signnow-0.2.0/llama_index/tools/signnow/base.py:22
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in llama_index_tools_signnow-0.2.0/llama_index/tools/signnow/base.py:22
  • INFOModerate community usage with 126 monthly downloads.
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_index_tools_signnow-0.2.0/llama_index/tools/signnow/base.py:22
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in llama_index_tools_signnow-0.2.0/llama_index/tools/signnow/base.py:22

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 362d 6 0 ↑0.0/day
Possible Squatted Stub
copilot pypi 0.0.1 — —
Package purpose: Add your description here
Claimed homepage: https://pypi.org/project/timegpt-copilot/
Matched naming pattern: python-copilot-timegpt
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 362
Registry downloads: 6/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 13 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'timegpt-copilot' matches AI hallucination template [python] + [copilot] + [timegpt].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 351 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 13 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 362d 5 0 ↑0.0/day
Possible Squatted Stub
copilot pypi 0.0.1 — —
Package purpose: Add your description here
Claimed homepage: https://pypi.org/project/nixtla-copilot/
Matched naming pattern: python-copilot-nixtla
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 362
Registry downloads: 5/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 13 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'nixtla-copilot' matches AI hallucination template [python] + [copilot] + [nixtla].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 352 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 13 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 364d 10 7 ↑0.0/day
Possible Squatted Stub
openai pypi 1.0.1 — —
Package purpose: Add your description here
Claimed homepage: https://pypi.org/project/victor-openai-test-2/
Matched naming pattern: victor-openai-test
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 364
Registry downloads: 10/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 235 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'victor-openai-test-2' matches AI hallucination template [victor] + [openai] + [test].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 354 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 235 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 364d 4 252 ↑0.0/day
SUSPICIOUS
mutable pypi 1.1.0 PcoiDev — 🪝
Package purpose: Edit printed terminal text using ANSI escape codes.
Claimed homepage: https://github.com/PcoiDev/mutable-print
Matched naming pattern: python-mutable-print
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 364
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 4/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 252 lines, 9.4 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage registered 362 days ago within the 1-year AI tool proliferation window.
  • CRITICALMODULE_TOPLEVEL_EXECUTION: 'os.system' executed at module scope (runs on import) in mutable_print-1.1.0/mutable_print/mutable_print.py:7
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in mutable_print-1.1.0/mutable_print/mutable_print.py:7
  • HIGHSYNTAX_ERROR_IN_mutable_print-1.1.0/mutable_print/tempCodeRunnerFile.py: unexpected indent (<unknown>, line 3)
  • MEDIUMPackage executes code at install/import time, but no exfiltration destination, credential access, encoded payload, obfuscation, shell cradle, or persistence primitive corroborates a weaponized payload. Downgraded from MALICIOUS to SUSPICIOUS pending manual review.
Static code signals:
  • MODULE_TOPLEVEL_EXECUTION: 'os.system' executed at module scope (runs on import) in mutable_print-1.1.0/mutable_print/mutable_print.py:7
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in mutable_print-1.1.0/mutable_print/mutable_print.py:7
  • SYNTAX_ERROR_IN_mutable_print-1.1.0/mutable_print/tempCodeRunnerFile.py: unexpected indent (<unknown>, line 3)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
« Prev Next »
LINK COPIED TO CLIPBOARD