🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
75 364d 8 0 ↑0.0/day
Possible Squatted Stub
workspace pypi 0.1.0 — —
Package purpose: Loco MCP workspace - contains loco-bindings and loco-mcp-server
Claimed homepage: https://pypi.org/project/loco-mcp-workspace/
Matched naming pattern: loco-workspace-workspace
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 364
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 14 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'loco-mcp-workspace' matches AI hallucination template [loco] + [workspace] + [workspace].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 354 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 14 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 371d 2,074 106,228 ↑5.6/day
Very Risky
claude npm 2.21.0 CFN Development Team — 🪝 🗄️
Package purpose: Claude Flow Novice - Advanced orchestration platform for multi-agent AI workflows with CFN Loop architecture Includes CodeSearch (hybrid SQLite + pgvector), mem0/memgraph specialists, and all CFN skills.
Claimed homepage: https://github.com/cfn-dev/claude-flow-novice#readme
Matched naming pattern: claude-claude-novice
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 371
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 2074/month, 518/week (ACTIVE_COMMUNITY_USE)
Codebase size: 106228 lines, 4.0 MB across 404 files (LARGE_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • INFOLegitimate documentation effort (204 chars with homepage link).
  • MEDIUMPackage registered 348 days ago within the 1-year AI tool proliferation window.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/.claude/skills/cfn-loop-orchestration-v2/cli/cfn-orchestrator.cjs:7 (+4 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/.claude/skills/cfn-loop-orchestration-v2/cli/resolve-provider-model.cjs:21 (+93 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/cli/agent-definition-parser.js:24 (+21 more occurrence(s) elsewhere)
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/.claude/skills/cfn-loop-orchestration-v2/cli/cfn-orchestrator.cjs:7 (+4 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/.claude/skills/cfn-loop-orchestration-v2/cli/resolve-provider-model.cjs:21 (+93 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/cli/agent-definition-parser.js:24 (+21 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/lib/log-shipper.js:112 (+3 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/benchmark/node-message-bus.js:13
  • CREDENTIAL_PATH_HARVESTING: 'System Credentials (/etc/shadow, /etc/passwd)' found in package/dist/lib/path-validator.js:159
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/mcp/playwright-mcp-server-auth.js:239 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 373d 8 6 ↑0.0/day
Possible Squatted Stub
aws pypi 0.0.0 — —
Package purpose: Placholder for futur use
Claimed homepage: https://pypi.org/project/aws-cloudtrail-tk/
Matched naming pattern: aws-aws-tk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 373
Registry downloads: 8/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 6 lines, 151 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 364 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (6 LOC, 1 file(s), 151 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 374d 5 15 ↑0.0/day
Possible Squatted Stub
claude npm 0.1.0 — —
Package purpose: Claude integration providing claude utility for Ai
Matched naming pattern: ai-claude-claude
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 374
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ai-sdk-claude-code' matches AI hallucination template [ai] + [claude] + [claude].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 356 days ago within the 1-year AI tool proliferation window.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 379d 20 20 ↑0.1/day
Possible Squatted Stub
openai pypi 5.1.0 Guispark xfiltrer@protonmail.com protonmail.com
Package purpose: PoC
Claimed homepage: https://github.com/guispark
Matched naming pattern: python-openai-internal
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 379
Registry downloads: 20/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 659 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'openai-internal' matches AI hallucination template [python] + [openai] + [internal].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'xfiltrer@protonmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage name 'openai-internal' contains 'internal' namespace token, a common indicator of targeted dependency confusion attacks or internal library shadowing.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (20 LOC, 1 file(s), 659 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 382d 5 5 ↑0.0/day
Possible Squatted Stub
ripple npm 1.0.0 — —
Package purpose: Ripple integration providing d utility for Node
Matched naming pattern: node-ripple-d
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 382
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 47 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ripple-d' matches AI hallucination template [node] + [ripple] + [d].
  • HIGHClaims critical enterprise brand identity ('RIPPLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 356 days ago within the 1-year AI tool proliferation window.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 47 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 386d 2 21 ↑0.0/day
Possible Squatted Stub
amazon pypi 1.0.0 Zhongshuizhou zhongshuizhou@qq.com qq.com
Package purpose: RPA automated execution program for TikTok
Claimed homepage: https://www.jeoshi.com
Matched naming pattern: python-amazon-rpa
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 386
Registry downloads: 2/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 1.1 kB across 8 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'rpa-amazon' matches AI hallucination template [python] + [amazon] + [rpa].
  • HIGHClaims critical enterprise brand identity ('AMAZON').
  • HIGHPublisher email 'zhongshuizhou@qq.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 8 file(s), 1120 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 387d 7 0 ↑0.0/day
Possible Squatted Stub
okta pypi 2.0.0 — —
Package purpose: A test Python package INTERNAL
Claimed homepage: https://pypi.org/project/okta-ghpick/
Matched naming pattern: python-okta-ghpick
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 387
Registry downloads: 7/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'okta-ghpick' matches AI hallucination template [python] + [okta] + [ghpick].
  • HIGHClaims critical enterprise brand identity ('OKTA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 389d 14 4 ↑0.0/day
Possible Squatted Stub
openai pypi 0.1.3 — —
Package purpose: Add your description here
Claimed homepage: https://pypi.org/project/victor-openai-example/
Matched naming pattern: victor-openai-example
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 389
Registry downloads: 14/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 87 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'victor-openai-example' matches AI hallucination template [victor] + [openai] + [example].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 87 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 391d 10 4 ↑0.0/day
Possible Squatted Stub
openai pypi 0.1.0 Your Name your.email@example.com example.com
Package purpose: OpenAI integration for text2memory
Claimed homepage: https://github.com/yourusername/text2memory-openai
Matched naming pattern: python-openai-text2memory
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 391
Registry downloads: 10/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 87 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'text2memory-openai' matches AI hallucination template [python] + [openai] + [text2memory].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 87 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 391d 10 23 ↑0.0/day
Possible Squatted Stub
openai pypi 0.1.0 Your Name your.email@example.com example.com
Package purpose: OpenAI integration for text2mem
Claimed homepage: https://github.com/yourusername/text2mem-openai
Matched naming pattern: python-openai-text2mem
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 391
Registry downloads: 10/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 23 lines, 744 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'text2mem-openai' matches AI hallucination template [python] + [openai] + [text2mem].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (23 LOC, 2 file(s), 744 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 394d 16 1,451 ↑0.0/day
Very Risky
claude npm 1.0.8 Your Name — 🪝 📡
Package purpose: AI助手快速配置工具，支持代理设置 (Windows/Mac)
Claimed homepage: https://github.com/yourusername/heibai-claude-code-gpt5#readme
Matched naming pattern: heibai-claude-code
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 394
Code-only verdict: SUSPICIOUS (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1451 lines, 63.7 kB across 3 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'heibai-claude-code-gpt5' matches AI hallucination template [heibai] + [claude] + [code].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Tunneling Service' found in package/bin/cli.js:299
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/cli.js:5 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/cli.js:189
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/bin/cli.js:552
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/cli.js:161 (+2 more occurrence(s) elsewhere)
Static code signals:
  • EXFILTRATION_DESTINATION_DETECTED: 'Tunneling Service' found in package/bin/cli.js:299
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/cli.js:5 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/cli.js:189
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/bin/cli.js:552
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/cli.js:161 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/code-validator.js:1

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 394d 6 14 ↑0.0/day
Possible Squatted Stub
google pypi 0.1.0 — —
Package purpose: Placeholder for our future package
Claimed homepage: https://pypi.org/project/google-amazon/
Matched naming pattern: python-google-amazon
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 394
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 485 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'google-amazon' matches AI hallucination template [python] + [google] + [amazon].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (14 LOC, 1 file(s), 485 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 397d 46 7 ↑0.1/day
Possible Squatted Stub
openai pypi 0.0.3 Florian Peschke florian.peschke@hyand.com hyand.com
Package purpose: OpenAI integration for AeroAI
Claimed homepage: https://pypi.org/project/aeroai-openai/
Matched naming pattern: python-openai-aeroai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 397
Registry downloads: 46/month, 17/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 238 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'aeroai-openai' matches AI hallucination template [python] + [openai] + [aeroai].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'florian.peschke@hyand.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 238 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 397d 7 5 ↑0.0/day
Possible Squatted Stub
stripe npm 0.0.0 — —
Package purpose: This is work in progress, stay tuned...
Matched naming pattern: node-stripe-vike
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 397
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 196 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'vike-stripe' matches AI hallucination template [node] + [stripe] + [vike].
  • HIGHClaims critical enterprise brand identity ('STRIPE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (5 LOC, 2 file(s), 196 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 408d 781 0 ↑1.9/day
Possible Squatted Stub
copilot pypi 2.3.1 — —
Package purpose: Add your description here
Claimed homepage: https://pypi.org/project/etiq-copilot/
Matched naming pattern: python-copilot-etiq
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 408
Registry downloads: 781/month, 78/week (MODERATE_USAGE)
Codebase size: 0 lines, 0 Bytes across 34 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'etiq-copilot' matches AI hallucination template [python] + [copilot] + [etiq].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 34 file(s), 0 bytes).
  • INFOModerate community usage with 781 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 408d 29 0 ↑0.1/day
Possible Squatted Stub
anthropic pypi 0.0.0 — —
Package purpose: Enterprise-grade RAG with Claude: Anthropic's reasoning AI + ZeusDB's high-performance vector storage with built-in safety.
Claimed homepage: https://pypi.org/project/anthropic-zeusdb/
Matched naming pattern: python-anthropic-zeusdb
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 408
Registry downloads: 29/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'anthropic-zeusdb' matches AI hallucination template [python] + [anthropic] + [zeusdb].
  • HIGHClaims critical enterprise brand identity ('ANTHROPIC').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 408d 8 0 ↑0.0/day
Possible Squatted Stub
llamaindex pypi 0.0.0 — —
Package purpose: Advanced RAG made simple: LlamaIndex document processing + ZeusDB enterprise vector storage with production-ready performance.
Claimed homepage: https://pypi.org/project/llamaindex-zeusdb/
Matched naming pattern: python-llamaindex-zeusdb
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 408
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'llamaindex-zeusdb' matches AI hallucination template [python] + [llamaindex] + [zeusdb].
  • HIGHClaims critical enterprise brand identity ('LLAMAINDEX').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 408d 11 0 ↑0.0/day
Possible Squatted Stub
huggingface pypi 0.0.0 — —
Package purpose: Open-source RAG with any model: Hugging Face embeddings + ZeusDB vector storage with local deployment and GPU optimization.
Claimed homepage: https://pypi.org/project/huggingface-zeusdb/
Matched naming pattern: python-huggingface-zeusdb
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 408
Registry downloads: 11/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'huggingface-zeusdb' matches AI hallucination template [python] + [huggingface] + [zeusdb].
  • HIGHClaims critical enterprise brand identity ('HUGGINGFACE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 408d 9 0 ↑0.0/day
Possible Squatted Stub
openai pypi 0.0.0 — —
Package purpose: Build production-ready RAG fast: OpenAI embeddings + ZeusDB vector storage with enterprise performance.
Claimed homepage: https://pypi.org/project/openai-zeusdb/
Matched naming pattern: python-openai-zeusdb
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 408
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'openai-zeusdb' matches AI hallucination template [python] + [openai] + [zeusdb].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 410d 24 7,451 ↑0.1/day
Very Risky
safe npm 1.1.0 Harold Oliver Haughton harold@coachhype.com coachhype.com 🪝 📡
Package purpose: Never break production again. Develop with confidence using isolated sandboxes with automatic rollback.
Claimed homepage: https://www.npmjs.com/package/safe-integration-protocol
Matched naming pattern: safe-safe-protocol
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 410
Code-only verdict: SUSPICIOUS (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 24/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7451 lines, 268.4 kB across 35 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/lib/anti-bypass.js:154 (+10 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/lib/anti-bypass.js:154 (+10 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/anti-bypass.js:100 (+12 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/lib/feedback-unlock.js:11 (+4 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/lib/monetization-enforcer.js:166
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/lib/anti-bypass.js:154 (+10 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/lib/anti-bypass.js:154 (+10 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/anti-bypass.js:100 (+12 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/lib/feedback-unlock.js:11 (+4 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/lib/monetization-enforcer.js:166
  • EXFILTRATION_DESTINATION_DETECTED: 'Tunneling Service' found in package/setup-webhook.js:79

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 414d — — —
SUSPICIOUS
— npm latest Alex Savage — 🪝 🌐
Package purpose: NPX installer for Claude Code workflow engine client setup
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/utils/config.js:327 (+4 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/src/fetcher/github.js:418
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/fetcher/github.js:586 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/src/fetcher/github.js:37 (+1 more occurrence(s) elsewhere)
  • SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/src/fetcher/github.js:418
  • ANTI_ANALYSIS_EVASION: 'CI/CD & Sandbox Environment Detection' found in package/src/utils/platform.js:138

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 423d — — —
SUSPICIOUS
— npm latest WakaTime — 🪝 🌐
Package purpose: WakaTime plugin for Claude Code
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'claude plugin marketplace add https://github.com/wakatime/claude-code-wakatime.git && claude plugin i claude-code-wakatime@wakatime'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/index.js:30986
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/index.js:40777
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'process.binding/mainModule' found in package/dist/index.js:5055
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/dist/index.js:18166
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:4772 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 426d 29 15 ↑0.1/day
Possible Squatted Stub
cursor npm 0.1.0 — —
Package purpose: Cursor integration providing bridge utility for Cursor
Matched naming pattern: cursor-cursor-bridge
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 426
Registry downloads: 29/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('CURSOR').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 429d 110 65,577 ↑0.3/day
Very Risky
solana npm 1.0.30 — — 🪝 📡
Package purpose: Solana integration providing plugin utility for Solana
Matched naming pattern: solana-solana-plugin
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 429
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 110/month, 27/week (MODERATE_USAGE)
Codebase size: 65577 lines, 2.1 MB across 15 files (LARGE_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('SOLANA').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/index.js:4958
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:64008 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:64653 (+1 more occurrence(s) elsewhere)
  • INFOSubstantial functional codebase (65577 LOC across 15 file(s)).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/index.js:4958
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:64008 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:64653 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 431d 19 15 ↑0.0/day
Possible Squatted Stub
claude npm 0.1.0 — —
Package purpose: Claude integration providing subagents utility for Claude
Matched naming pattern: claude-claude-subagents
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 431
Registry downloads: 19/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHVERSION_NOT_FOUND
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • VERSION_NOT_FOUND

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 433d 19 356 ↑0.0/day
Very Risky
eth npm 1.0.0 Graphi AI — 🪝 📡
Package purpose: MCP server for ethereum_transactions_test subgraph - Track all Ethereum ERC20 transfers for testing
Claimed homepage: https://github.com/graphi-ai/mcp-eth-test-subgraph-11#readme
Matched naming pattern: mcp-eth-test
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 433
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 19/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 356 lines, 13.8 kB across 8 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mcp-eth-test-subgraph-11' matches AI hallucination template [mcp] + [eth] + [test].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/config.js:13
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/config.js:3
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/services/GraphDatabaseService.js:11
  • INFOPackage affiliated with trusted vendor 'eth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.
  • CRITICALCRITICAL: Weaponized payload detected on package affiliated with trusted vendor 'eth'. High probability of vendor account takeover, compromised credentials, or malicious release.
Static code signals:
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/config.js:13
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/config.js:3
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/services/GraphDatabaseService.js:11

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 440d 12 356 ↑0.0/day
Very Risky
brand npm 1.0.0 Graphi AI — 🪝 📡
Package purpose: MCP server for ethereum_transactions_test subgraph - Track all Ethereum ERC20 transfers for testing
Claimed homepage: https://github.com/graphi-ai/mcp-eth-test-subgraph-10#readme
Matched naming pattern: mcp-brand-test
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 440
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 356 lines, 13.8 kB across 8 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/config.js:13
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/config.js:3
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/services/GraphDatabaseService.js:11
  • INFOPackage affiliated with trusted vendor 'brand' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection.
  • CRITICALCRITICAL: Weaponized payload detected on package affiliated with trusted vendor 'brand'. High probability of vendor account takeover, compromised credentials, or malicious release.
Static code signals:
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/config.js:13
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/config.js:3
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/services/GraphDatabaseService.js:11

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 440d 17 356 ↑0.0/day
Very Risky
brand npm 1.0.0 Graphi AI — 🪝 📡
Package purpose: MCP server for ethereum_transactions_test subgraph - Track all Ethereum ERC20 transfers for testing
Claimed homepage: https://github.com/graphi-ai/mcp-eth-test-subgraph-9#readme
Matched naming pattern: mcp-brand-test
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 440
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 356 lines, 13.9 kB across 8 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/config.js:13
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/config.js:3
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/services/GraphDatabaseService.js:11
  • INFOPackage affiliated with trusted vendor 'brand' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection.
  • CRITICALCRITICAL: Weaponized payload detected on package affiliated with trusted vendor 'brand'. High probability of vendor account takeover, compromised credentials, or malicious release.
Static code signals:
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/config.js:13
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/config.js:3
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/services/GraphDatabaseService.js:11

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 440d 29 353 ↑0.1/day
Very Risky
brand npm 1.0.0 Graphi AI — 🪝 📡
Package purpose: MCP server for ethereum_transactions_test subgraph - Track all Ethereum ERC20 transfers for testing
Claimed homepage: https://github.com/graphi-ai/mcp-eth-test-subgraph-6#readme
Matched naming pattern: mcp-brand-test
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 440
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 29/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 353 lines, 13.7 kB across 8 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/config.js:13
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/config.js:3
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/services/GraphDatabaseService.js:11
  • INFOPackage affiliated with trusted vendor 'brand' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection.
  • CRITICALCRITICAL: Weaponized payload detected on package affiliated with trusted vendor 'brand'. High probability of vendor account takeover, compromised credentials, or malicious release.
Static code signals:
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/config.js:13
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/config.js:3
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/services/GraphDatabaseService.js:11

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 452d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: Guido is a Vue + TypeScript wrapper for Email Plugin. Easily embed the email editor in your Vue applications.
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'rm -rf ./node_modules/.vite'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/services/blankTemplate.js:10 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/composables/useTranslations.js:8

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 456d 53 15 ↑0.1/day
Possible Squatted Stub
cursor npm 0.1.0 — —
Package purpose: Cursor integration providing agent utility for Cursor
Matched naming pattern: cursor-cursor-agent
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 456
Registry downloads: 53/month, 13/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('CURSOR').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 459d 0 60 ↑0.0/day
SUSPICIOUS
david pypi 1.0.5 david tingyoon@gmail.com gmail.com 🪝
Package purpose: david's teams util
Claimed homepage: https://github.com/simon-asis/teams_util
Matched naming pattern: david-david-util
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 459
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 60 lines, 3.9 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • CRITICALINSTALL_TIME_EXECUTION: 'eval' executed at top-level in david_teams_util-1.0.5/setup.py:21
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in david_teams_util-1.0.5/setup.py:21
  • MEDIUMPackage executes code at install/import time, but no exfiltration destination, credential access, encoded payload, obfuscation, shell cradle, or persistence primitive corroborates a weaponized payload. Downgraded from MALICIOUS to SUSPICIOUS pending manual review.
Static code signals:
  • INSTALL_TIME_EXECUTION: 'eval' executed at top-level in david_teams_util-1.0.5/setup.py:21
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in david_teams_util-1.0.5/setup.py:21

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 459d 56 1 ↑0.1/day
Possible Squatted Stub
deepseek pypi 0.1.0 — qpypi@qpython.org qpython.org
Package purpose: DSC - DeepSeek Code
Claimed homepage: https://pypi.org/project/deepseek-code/
Matched naming pattern: python-deepseek-code
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 459
Registry downloads: 56/month, 18/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 24 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'deepseek-code' matches AI hallucination template [python] + [deepseek] + [code].
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • HIGHPublisher email 'qpypi@qpython.org' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 24 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 476d 27 11 ↑0.1/day
Possible Squatted Stub
claude pypi 0.6.0 — shane@shaneholloman.com shaneholloman.com
Package purpose: Namespace alias for claude-command - AI command center for Claude Code
Claimed homepage: https://pypi.org/project/mcp-claude-commander/
Matched naming pattern: mcp-claude-commander
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 476
Registry downloads: 27/month, 20/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 465 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'mcp-claude-commander' matches AI hallucination template [mcp] + [claude] + [commander].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'shane@shaneholloman.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 1 file(s), 465 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 476d 12 11 ↑0.0/day
Possible Squatted Stub
claude pypi 0.6.0 — shane@shaneholloman.com shaneholloman.com
Package purpose: Namespace alias for claude-command - AI command center for Claude Code
Claimed homepage: https://pypi.org/project/mcp-claude-command/
Matched naming pattern: mcp-claude-command
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 476
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 465 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'mcp-claude-command' matches AI hallucination template [mcp] + [claude] + [command].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'shane@shaneholloman.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 1 file(s), 465 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 476d 0 11 ↑0.0/day
Possible Squatted Stub
claude pypi 0.6.0 — shane@shaneholloman.com shaneholloman.com
Package purpose: Namespace alias for claude-command - AI command center for Claude Code
Claimed homepage: https://pypi.org/project/claude-commander/
Matched naming pattern: python-claude-commander
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 476
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 465 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'claude-commander' matches AI hallucination template [python] + [claude] + [commander].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'shane@shaneholloman.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 1 file(s), 465 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 478d 12 0 ↑0.0/day
Possible Squatted Stub
openai pypi 0.1.0 dany 973031439@qq.com qq.com
Package purpose: Openai integration providing openmemory utility for Python
Claimed homepage: https://pypi.org/project/openmemory-openai/
Matched naming pattern: python-openai-openmemory
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 478
Registry downloads: 12/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'openmemory-openai' matches AI hallucination template [python] + [openai] + [openmemory].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email '973031439@qq.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 478d 11 0 ↑0.0/day
Possible Squatted Stub
openai pypi 0.1.0 dany 973031439@qq.com qq.com
Package purpose: Openai integration providing openmem utility for Python
Claimed homepage: https://pypi.org/project/openmem-openai/
Matched naming pattern: python-openai-openmem
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 478
Registry downloads: 11/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'openmem-openai' matches AI hallucination template [python] + [openai] + [openmem].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email '973031439@qq.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 478d 15 0 ↑0.0/day
Possible Squatted Stub
openai pypi 0.1.0 dany 973031439@qq.com qq.com
Package purpose: Openai integration providing memos utility for Python
Claimed homepage: https://pypi.org/project/memos-openai/
Matched naming pattern: python-openai-memos
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 478
Registry downloads: 15/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'memos-openai' matches AI hallucination template [python] + [openai] + [memos].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email '973031439@qq.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 479d — — —
Unverified Signal
— npm latest — — 🪝
Package purpose: Claude CLI execution wrapper for Cyrus
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/ClaudeRunner.js:105 (+4 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'Registry / Git Configuration (~/.yarnrc, ~/.gitconfig)' found in package/dist/home-directory-restrictions.js:19 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/sandbox-requirements.js:111

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 481d 0 24 ↑0.0/day
SUSPICIOUS
apify pypi 0.1.1 — support@asimov.so asimov.so 🪝
Package purpose: ASIMOV module for data import powered by the Apify web automation platform.
Claimed homepage: https://pypi.org/project/asimov-apify-module/
Matched naming pattern: asimov-apify-module
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 481
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 24 lines, 834 Bytes across 5 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOPublisher email domain '@asimov.so' matches package identifier token 'asimov', verifying identifiable third-party organization ownership.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in asimov_apify_module/fetcher/__init__.py:8
  • CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.call' executed at module scope (runs on import) in asimov_apify_module/fetcher/__main__.py:7
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in asimov_apify_module/fetcher/__main__.py:7
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in asimov_apify_module/importer/__init__.py:8
  • CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.call' executed at module scope (runs on import) in asimov_apify_module/importer/__main__.py:7
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in asimov_apify_module/importer/__main__.py:7
  • MEDIUMPackage executes code at install/import time, but no exfiltration destination, credential access, encoded payload, obfuscation, shell cradle, or persistence primitive corroborates a weaponized payload. Downgraded from MALICIOUS to SUSPICIOUS pending manual review.
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in asimov_apify_module/fetcher/__init__.py:8
  • MODULE_TOPLEVEL_EXECUTION: 'subprocess.call' executed at module scope (runs on import) in asimov_apify_module/fetcher/__main__.py:7
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in asimov_apify_module/fetcher/__main__.py:7
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in asimov_apify_module/importer/__init__.py:8
  • MODULE_TOPLEVEL_EXECUTION: 'subprocess.call' executed at module scope (runs on import) in asimov_apify_module/importer/__main__.py:7
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in asimov_apify_module/importer/__main__.py:7

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 487d 7 0 ↑0.0/day
Possible Squatted Stub
gemini pypi 0.0.5 — kaycebasques@gmail.com gmail.com
Package purpose: TODO
Claimed homepage: https://pypi.org/project/sphinx-genai-gemini/
Matched naming pattern: sphinx-gemini-gemini
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 487
Registry downloads: 7/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'sphinx-genai-gemini' matches AI hallucination template [sphinx] + [gemini] + [gemini].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'kaycebasques@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 488d 3 13 ↑0.0/day
Possible Squatted Stub
google pypi 999.9.9 — —
Package purpose: ## Description This public copy of the package is a stub published on pypi.org designed to mitigate risks from Dependency Confusion. You will only see this public package if your app is not properly configured to find the local package repository. To get more information about Dependency Confusion
Claimed homepage: https://pypi.org/project/reops-google/
Matched naming pattern: python-google-reops
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 488
Registry downloads: 3/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 13 lines, 508 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'reops-google' matches AI hallucination template [python] + [google] + [reops].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (13 LOC, 1 file(s), 508 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 488d 7 13 ↑0.0/day
Possible Squatted Stub
langchain pypi 999.9.9 — —
Package purpose: ## Description This public copy of the package is a stub published on pypi.org designed to mitigate risks from Dependency Confusion. You will only see this public package if your app is not properly configured to find the local package repository. To get more information about Dependency Confusion
Claimed homepage: https://pypi.org/project/grazie-langchain-utils/
Matched naming pattern: grazie-langchain-utils
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 488
Registry downloads: 7/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 13 lines, 508 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'grazie-langchain-utils' matches AI hallucination template [grazie] + [langchain] + [utils].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (13 LOC, 1 file(s), 508 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 491d 4 6 ↑0.0/day
Possible Squatted Stub
google pypi 0.0.0.dev1748619815053 — —
Package purpose: Google integration providing gae utility for Sdlc
Claimed homepage: https://pypi.org/project/sdlc-analytics-gae-google/
Matched naming pattern: sdlc-google-gae
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 491
Registry downloads: 4/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 6 lines, 145 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'sdlc-analytics-gae-google' matches AI hallucination template [sdlc] + [google] + [gae].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (6 LOC, 2 file(s), 145 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 492d 0 6 ↑0.0/day
Possible Squatted Stub
google pypi 0.0.0.dev1748554150971 — —
Package purpose: Google integration providing google utility for Sdlc
Claimed homepage: https://pypi.org/project/sdlc-analytics-google/
Matched naming pattern: sdlc-google-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 492
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 6 lines, 141 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'sdlc-analytics-google' matches AI hallucination template [sdlc] + [google] + [google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (6 LOC, 2 file(s), 141 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 494d 45 15 ↑0.1/day
Possible Squatted Stub
groq npm 0.1.0 — —
Package purpose: Groq integration providing ai utility for Expo
Matched naming pattern: expo-groq-ai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 494
Registry downloads: 45/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'expo-groq-ai' matches AI hallucination template [expo] + [groq] + [ai].
  • HIGHClaims critical enterprise brand identity ('GROQ').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHVERSION_NOT_FOUND
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • VERSION_NOT_FOUND

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 495d 9 0 ↑0.0/day
Possible Squatted Stub
microsoft pypi 0.0.1 — —
Package purpose: Microsoft integration providing dns utility for Datadog
Claimed homepage: https://pypi.org/project/datadog-microsoft-dns/
Matched naming pattern: datadog-microsoft-dns
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 495
Registry downloads: 9/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'datadog-microsoft-dns' matches AI hallucination template [datadog] + [microsoft] + [dns].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 3 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 499d 14 17 ↑0.0/day
Possible Squatted Stub
aws pypi 1.0.2 Anupam Singh anupam936574@gmail.com gmail.com
Package purpose: test
Claimed homepage: https://pypi.org/project/content-accessibilty-utility-on-aws/
Matched naming pattern: content-aws-utility
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 499
Registry downloads: 14/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 17 lines, 549 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'content-accessibilty-utility-on-aws' matches AI hallucination template [content] + [aws] + [utility].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'anupam936574@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (17 LOC, 1 file(s), 549 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
« Prev Next »
LINK COPIED TO CLIPBOARD