🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
75 494d 45 15 ↑0.1/day
Possible Squatted Stub
groq npm 0.1.0 — —
Package purpose: Groq integration providing ai utility for Expo
Matched naming pattern: expo-groq-ai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 494
Registry downloads: 45/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'expo-groq-ai' matches AI hallucination template [expo] + [groq] + [ai].
  • HIGHClaims critical enterprise brand identity ('GROQ').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHVERSION_NOT_FOUND
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • VERSION_NOT_FOUND

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 495d 9 0 ↑0.0/day
Possible Squatted Stub
microsoft pypi 0.0.1 — —
Package purpose: Microsoft integration providing dns utility for Datadog
Claimed homepage: https://pypi.org/project/datadog-microsoft-dns/
Matched naming pattern: datadog-microsoft-dns
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 495
Registry downloads: 9/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'datadog-microsoft-dns' matches AI hallucination template [datadog] + [microsoft] + [dns].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 3 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 499d 14 17 ↑0.0/day
Possible Squatted Stub
aws pypi 1.0.2 Anupam Singh anupam936574@gmail.com gmail.com
Package purpose: test
Claimed homepage: https://pypi.org/project/content-accessibilty-utility-on-aws/
Matched naming pattern: content-aws-utility
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 499
Registry downloads: 14/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 17 lines, 549 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'content-accessibilty-utility-on-aws' matches AI hallucination template [content] + [aws] + [utility].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'anupam936574@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (17 LOC, 1 file(s), 549 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 501d 17 0 ↑0.0/day
Possible Squatted Stub
openai pypi 0.1.0 dany 973031439@qq.com qq.com
Package purpose: Openai integration providing memoryos utility for Python
Claimed homepage: https://pypi.org/project/memoryos-openai/
Matched naming pattern: python-openai-memoryos
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 501
Registry downloads: 17/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'memoryos-openai' matches AI hallucination template [python] + [openai] + [memoryos].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email '973031439@qq.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 505d 11 15 ↑0.0/day
Possible Squatted Stub
aws npm 0.1.0 — —
Package purpose: Aws integration providing rvs utility for N8n
Matched naming pattern: n8n-aws-rvs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 505
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'n8n-nodes-rvs-aws-step-functions' matches AI hallucination template [n8n] + [aws] + [rvs].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHVERSION_NOT_FOUND
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • VERSION_NOT_FOUND

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 507d — — —
Unverified Signal
— npm latest Syncfusion Inc. — 🪝 🌐
Package purpose: A common package of core React base, methods and class definitions
Static code signals:
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/fetch.js:66 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/syncfusion-license.js:2 (+1 more occurrence(s) elsewhere)
  • SUSPICIOUS_OBFUSCATION: 'Obfuscator Dictionary Lookup Pattern' found in package/bin/syncfusion-license.js:2 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/src/telemetry.js:323 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 510d 13 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 — hello@chriscates.ca chriscates.ca
Package purpose: Gestell's Langchain Integration
Claimed homepage: https://pypi.org/project/gestell-langchain/
Matched naming pattern: python-langchain-gestell
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 510
Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 15 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'gestell-langchain' matches AI hallucination template [python] + [langchain] + [gestell].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'hello@chriscates.ca' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 15 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 511d 41 29 ↑0.1/day
Very Risky
openai npm 1.0.0 — — 🪝 📡
Package purpose: Ollama OpenAI Proxy MCP Server
Matched naming pattern: ollama-openai-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 511
Code-only verdict: SUSPICIOUS (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 41/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 29 lines, 1.0 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'ollama-openai-mcp' matches AI hallucination template [ollama] + [openai] + [mcp].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Tunneling Service' found in package/index.js:6
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/index.js:22
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/index.js:6
  • INFOPackage affiliated with trusted vendor 'openai' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • EXFILTRATION_DESTINATION_DETECTED: 'Tunneling Service' found in package/index.js:6
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/index.js:22
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/index.js:6

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 515d 8 0 ↑0.0/day
Possible Squatted Stub
microsoft pypi 0.0.1 — —
Package purpose: Microsoft integration providing sysmon utility for Datadog
Claimed homepage: https://pypi.org/project/datadog-microsoft-sysmon/
Matched naming pattern: datadog-microsoft-sysmon
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 515
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'datadog-microsoft-sysmon' matches AI hallucination template [datadog] + [microsoft] + [sysmon].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 3 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 518d 27 2 ↑0.1/day
Possible Squatted Stub
gemini pypi 1 SoftwareApkDev softwareapkdev2022@gmail.com gmail.com
Package purpose: This package contains implementation of Pong game with Google Gemini AI integrated into it.
Claimed homepage: https://github.com/SoftwareApkDev/gemini_pong
Matched naming pattern: python-gemini-pong
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 518
Registry downloads: 27/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 37 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'gemini-pong' matches AI hallucination template [python] + [gemini] + [pong].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'softwareapkdev2022@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 37 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 523d 32 16 ↑0.1/day
Possible Squatted Stub
ollama pypi 0.1 — —
Package purpose: Ollama integration providing llm utility for Python
Claimed homepage: https://pypi.org/project/ollama-llm/
Matched naming pattern: python-ollama-llm
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 523
Registry downloads: 32/month, 20/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 16 lines, 332 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ollama-llm' matches AI hallucination template [python] + [ollama] + [llm].
  • HIGHClaims critical enterprise brand identity ('OLLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (16 LOC, 1 file(s), 332 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 525d 26 2 ↑0.0/day
Possible Squatted Stub
gemini pypi 1 SoftwareApkDev softwareapkdev2022@gmail.com gmail.com
Package purpose: This package contains implementation of Outrun game with Google Gemini AI integrated into it.
Claimed homepage: https://github.com/SoftwareApkDev/gemini_outrun
Matched naming pattern: python-gemini-outrun
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 525
Registry downloads: 26/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 37 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'gemini-outrun' matches AI hallucination template [python] + [gemini] + [outrun].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'softwareapkdev2022@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 37 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 525d 29 2 ↑0.1/day
Possible Squatted Stub
gemini pypi 1 SoftwareApkDev softwareapkdev2022@gmail.com gmail.com
Package purpose: This package contains implementation of Agar.io game with Google Gemini AI integrated into it.
Claimed homepage: https://github.com/SoftwareApkDev/gemini_agario
Matched naming pattern: python-gemini-agario
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 525
Registry downloads: 29/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 37 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'gemini-agario' matches AI hallucination template [python] + [gemini] + [agario].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'softwareapkdev2022@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 37 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 525d 25 2 ↑0.0/day
Possible Squatted Stub
gemini pypi 1.2 SoftwareApkDev softwareapkdev2022@gmail.com gmail.com
Package purpose: This package contains implementation of Breakout game with Google Gemini AI integrated into it.
Claimed homepage: https://github.com/SoftwareApkDev/gemini_breakout
Matched naming pattern: python-gemini-breakout
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 525
Registry downloads: 25/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 37 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'gemini-breakout' matches AI hallucination template [python] + [gemini] + [breakout].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'softwareapkdev2022@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 37 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 526d — — —
Unverified Signal
— npm latest Jesus Manuel Piñeiro Cid — 🪝 🌐
Package purpose: <!-- SPDX-FileCopyrightText: 2025 2025 INDUSTRIA DE DISEÑO TEXTIL S.A. (INDITEX S.A.)
Static code signals:
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/client.js:3533
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/server.js:389
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/server.js:431
  • SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/dist/server.js:384
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/dist/server.d.ts:1904

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 528d 1,309 89 ↑2.5/day
Very Risky
shopify npm 1.0.0 Chris Cook — 🪝
Package purpose: Simple wrapper to access Shopify's currency conversion rates from Node.js
Claimed homepage: https://github.com/zirkelc/shopify-currencies.js#readme
Matched naming pattern: node-shopify-currencies.js
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 528
Registry downloads: 1309/month, 327/week (ACTIVE_COMMUNITY_USE)
Codebase size: 89 lines, 2.9 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.cjs:21 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'vm.runInContext' found in package/dist/index.mjs:15
  • CRITICALSOURCE_CODE_DYNAMIC_CODE_LOADER: execution primitive combined with decode/network/obfuscation call in package/dist/index.mjs
  • INFOActive community usage with 1,309 monthly downloads.
  • INFOPackage affiliated with trusted vendor 'shopify' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection.
  • CRITICALCRITICAL: Weaponized payload detected on package affiliated with trusted vendor 'shopify'. High probability of vendor account takeover, compromised credentials, or malicious release.
Static code signals:
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.cjs:21 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'vm.runInContext' found in package/dist/index.mjs:15
  • SOURCE_CODE_DYNAMIC_CODE_LOADER: execution primitive combined with decode/network/obfuscation call in package/dist/index.mjs

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 536d 2 17 ↑0.0/day
Possible Squatted Stub
replicate pypi 0.0.1 Your Name you@example.com example.com
Package purpose: Stub package to reserve the 'replicate-fern' name.
Claimed homepage: https://github.com/yourname/replicate-fern
Matched naming pattern: python-replicate-fern
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 536
Registry downloads: 2/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 17 lines, 575 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'replicate-fern' matches AI hallucination template [python] + [replicate] + [fern].
  • HIGHClaims critical enterprise brand identity ('REPLICATE').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (17 LOC, 2 file(s), 575 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 541d 13 24 ↑0.0/day
Possible Squatted Stub
azure pypi 0.0.1 Immortal Izzy immortal.izzy@tensorshield.ai tensorshield.ai
Package purpose: Microsoft Azure backend for AegisX
Claimed homepage: https://github.com/tensorshield/python-aegisx
Matched naming pattern: aegisx-azure-azure
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 541
Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 24 lines, 811 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'aegisx-backends-azure' matches AI hallucination template [aegisx] + [azure] + [azure].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'immortal.izzy@tensorshield.ai' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (24 LOC, 1 file(s), 811 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 545d 2 1 ↑0.0/day
Possible Squatted Stub
llama pypi 0.0.1 — ariel.j.kwiatkowski@gmail.com gmail.com
Package purpose: # llama-rl [![PyPI - Version](https://img.shields.io/pypi/v/llama-rl.svg)](https://pypi.org/project/llama-rl) [![PyPI - Python Version](https://img.shields.io/pypi/pyversions/llama-rl.svg)](https://pypi.org/project/llama-rl) ----- ## Table of Contents - [Installation](#installation) - [License](
Claimed homepage: https://pypi.org/project/llama-rl/
Matched naming pattern: python-llama-rl
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 545
Registry downloads: 2/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 242 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'llama-rl' matches AI hallucination template [python] + [llama] + [rl].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'ariel.j.kwiatkowski@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 2 file(s), 242 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 549d 8 1 ↑0.0/day
Possible Squatted Stub
stripe pypi 0.0.0 — swd@geant.org geant.org
Package purpose: placeholder name reservation package
Claimed homepage: https://pypi.org/project/stripe-checkout/
Matched naming pattern: python-stripe-checkout
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 549
Registry downloads: 8/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 22 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'stripe-checkout' matches AI hallucination template [python] + [stripe] + [checkout].
  • HIGHClaims critical enterprise brand identity ('STRIPE').
  • HIGHPublisher email 'swd@geant.org' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 22 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 558d 32 18 ↑0.1/day
Possible Squatted Stub
aws pypi 0.1.0 Your Name cvedant136@gmail.com gmail.com
Package purpose: Reusable AWS integration library (Lambda, SQS, SNS, etc.)
Claimed homepage: https://github.com/x23393131/aws_services
Matched naming pattern: python-aws-services
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 558
Registry downloads: 32/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 18 lines, 606 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'aws-services' matches AI hallucination template [python] + [aws] + [services].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'cvedant136@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (18 LOC, 1 file(s), 606 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 562d 20 1 ↑0.0/day
Possible Squatted Stub
binance pypi 0.0.1 — i+pypi@kael.me kael.me
Package purpose: Python library for integrating the Binance API into agentic workflows, an MCP (Model Context Protocol) implementation
Claimed homepage: https://pypi.org/project/binance-agent/
Matched naming pattern: python-binance-agent
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 562
Registry downloads: 20/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 48 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'binance-agent' matches AI hallucination template [python] + [binance] + [agent].
  • HIGHClaims critical enterprise brand identity ('BINANCE').
  • HIGHPublisher email 'i+pypi@kael.me' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 48 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 564d 4 5 ↑0.0/day
Possible Squatted Stub
grok npm 1.0.0 — —
Package purpose: Grok integration providing 3 utility for Node
Matched naming pattern: node-grok-3
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 564
Registry downloads: 4/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 87 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'grok-3' matches AI hallucination template [node] + [grok] + [3].
  • HIGHClaims critical enterprise brand identity ('GROK').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 87 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 565d 58 0 ↑0.1/day
Possible Squatted Stub
vllm pypi 0.8.4.post4 vLLM Team — 🪝
Package purpose: A high-throughput and memory-efficient inference and serving engine for LLMs
Claimed homepage: https://pypi.org/project/ai-dynamo-vllm/
Matched naming pattern: ai-vllm-vllm
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 565
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 58/month, 16/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ai-dynamo-vllm' matches AI hallucination template [ai] + [vllm] + [vllm].
  • HIGHClaims critical enterprise brand identity ('VLLM').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHCUSTOM_BUILD_BACKEND_UNVERIFIED: 'wheel_stub.buildapi' declared in pyproject.toml
  • MEDIUMPackage is an empty placeholder (0 LOC, 3 file(s), 0 bytes).
Static code signals:
  • CUSTOM_BUILD_BACKEND_UNVERIFIED: 'wheel_stub.buildapi' declared in pyproject.toml

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 565d 10 11 ↑0.0/day
Possible Squatted Stub
ollama pypi 2.0.0 John Codes efexzium@gmail.com gmail.com
Package purpose: A package to manage Ollama service and models.
Claimed homepage: https://pypi.org/project/ollama-switch/
Matched naming pattern: python-ollama-switch
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 565
Registry downloads: 10/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 334 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ollama-switch' matches AI hallucination template [python] + [ollama] + [switch].
  • HIGHClaims critical enterprise brand identity ('OLLAMA').
  • HIGHPublisher email 'efexzium@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 1 file(s), 334 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 566d 0 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 1.1.0 — —
Package purpose: Transitional package for aiqtoolkit-langchain, this package is deprecated and will be removed in the future.
Claimed homepage: https://pypi.org/project/agentiq-langchain/
Matched naming pattern: python-langchain-agentiq
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 566
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 4 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'agentiq-langchain' matches AI hallucination template [python] + [langchain] + [agentiq].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 4 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 566d 0 0 ↑0.0/day
Possible Squatted Stub
llama pypi 1.1.0 — —
Package purpose: Transitional package for aiqtoolkit-llama-index, this package is deprecated and will be removed in the future.
Claimed homepage: https://pypi.org/project/agentiq-llama-index/
Matched naming pattern: agentiq-llama-index
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 566
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 4 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'agentiq-llama-index' matches AI hallucination template [agentiq] + [llama] + [index].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 4 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 578d 7 0 ↑0.0/day
Possible Squatted Stub
binance pypi 1.2025.2.28 Daniel Lando —
Package purpose: API for querying binance backend
Claimed homepage: https://pypi.org/project/root-binance-api-1.2025.2.28/
Matched naming pattern: root-binance-api
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 578
Registry downloads: 7/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 13 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'root-binance-api-1-2025-2-28' matches AI hallucination template [root] + [binance] + [api].
  • HIGHClaims critical enterprise brand identity ('BINANCE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 13 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 600d 4 4 ↑0.0/day
Possible Squatted Stub
langgraph pypi 0.0.1 — —
Package purpose: Anyparser LangGraph Integration
Claimed homepage: https://pypi.org/project/anyparser-langgraph/
Matched naming pattern: python-langgraph-anyparser
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 600
Registry downloads: 4/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 63 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'anyparser-langgraph' matches AI hallucination template [python] + [langgraph] + [anyparser].
  • HIGHClaims critical enterprise brand identity ('LANGGRAPH').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 63 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 608d 551 0 ↑0.9/day
Possible Squatted Stub
deepseek pypi 0.0.0 sqdnoises —
Package purpose: Coming soon
Claimed homepage: https://pypi.org/project/deepseek.py/
Matched naming pattern: python-deepseek-py
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 608
Registry downloads: 551/month, 17/week (MODERATE_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'deepseek-py' matches AI hallucination template [python] + [deepseek] + [py].
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).
  • INFOModerate community usage with 551 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 609d 0 4 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.0 — info@datalayer.io datalayer.io
Package purpose: <!-- ~ Copyright (c) 2023-2024 Datalayer, Inc. ~ ~ BSD 3-Clause License --> [![Datalayer](https://assets.datalayer.tech/datalayer-25.svg)](https://datalayer.io) [![Become a Sponsor](https://img.shields.io/static/v1?label=Become%20a%20Sponsor&message=%E2%9D%A4&logo=GitHub&style=flat&color=1AB
Claimed homepage: https://pypi.org/project/langchain-jupyter/
Matched naming pattern: python-langchain-jupyter
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 609
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 223 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-jupyter' matches AI hallucination template [python] + [langchain] + [jupyter].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'info@datalayer.io' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 2 file(s), 223 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 612d — — —
Unverified Signal
— npm latest ITCase — 🪝 🌐
Package purpose: ITCase Config
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node ./husky-hooks/install-launcher.js'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/postcss/requirePackage.cjs:12 (+7 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/smart-commit/cli.js:402 (+2 more occurrence(s) elsewhere)
  • SYSTEM_PERSISTENCE_TAMPERING: 'Shell Profile Backdoor Injection' found in package/smart-commit/cli.js:91
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/semantic-release/releaseNotesFromIssues.js:312
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/semantic-release/releaseNotesFromIssues.js:19

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 615d 55 21 ↑0.1/day
Possible Squatted Stub
llama pypi 0.1.2 — —
Package purpose: A chat completion client extension using Llama CPP, integrating with AutoGen for AI-powered chat interactions.
Claimed homepage: https://pypi.org/project/autogen-llama-cpp-chat-completion/
Matched naming pattern: autogen-llama-cpp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 615
Registry downloads: 55/month, 18/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 1.0 kB across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'autogen-llama-cpp-chat-completion' matches AI hallucination template [autogen] + [llama] + [cpp].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 1 file(s), 1036 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 621d 7 0 ↑0.0/day
Possible Squatted Stub
kraken pypi 0.0.5 — nsunder724@gmail.com gmail.com
Package purpose: A simple package for connecting to the the Kraken API.
Claimed homepage: https://pypi.org/project/kraken-exchange/
Matched naming pattern: python-kraken-exchange
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 621
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 15 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'kraken-exchange' matches AI hallucination template [python] + [kraken] + [exchange].
  • HIGHClaims critical enterprise brand identity ('KRAKEN').
  • HIGHPublisher email 'nsunder724@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 2 file(s), 15 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 627d 5 0 ↑0.0/day
Possible Squatted Stub
azure pypi 0.0.0 codeweaverxyz —
Package purpose: Azure integration providing autogen utility for Python
Claimed homepage: https://pypi.org/project/autogen-azure/
Matched naming pattern: python-azure-autogen
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 627
Registry downloads: 5/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 1 Byte across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'autogen-azure' matches AI hallucination template [python] + [azure] + [autogen].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 1 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 627d 13 0 ↑0.0/day
Possible Squatted Stub
aws pypi 0.0.0 codeweaverxyz —
Package purpose: Aws integration providing autogen utility for Python
Claimed homepage: https://pypi.org/project/autogen-aws/
Matched naming pattern: python-aws-autogen
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 627
Registry downloads: 13/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 1 Byte across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'autogen-aws' matches AI hallucination template [python] + [aws] + [autogen].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 1 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 633d 7 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.0 yu-iskw —
Package purpose: A dbt artifacts parser in python
Claimed homepage: https://pypi.org/project/langchain-lightdash/
Matched naming pattern: python-langchain-lightdash
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 633
Registry downloads: 7/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 573 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-lightdash' matches AI hallucination template [python] + [langchain] + [lightdash].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 573 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 641d 63 45 ↑0.1/day
SUSPICIOUS
deepseek pypi 0.1.0 Marcos Cannabrava mpcannabrava@gmail.com gmail.com 🪝
Package purpose: Deepseek Coder running locally in the terminal.
Claimed homepage: https://pypi.org/project/deepseek-coder/
Matched naming pattern: python-deepseek-coder
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 641
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 63/month, 15/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 45 lines, 1.9 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'deepseek-coder' matches AI hallucination template [python] + [deepseek] + [coder].
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • HIGHPublisher email 'mpcannabrava@gmail.com' is not affiliated with official vendor domain.
  • CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.Popen' executed at module scope (runs on import) in deepseek_coder-0.1.0/deepseek_coder/deepseek_coder.py:13
  • CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in deepseek_coder-0.1.0/deepseek_coder/deepseek_coder.py:23
  • CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in deepseek_coder-0.1.0/deepseek_coder/deepseek_coder.py:51
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in deepseek_coder-0.1.0/deepseek_coder/deepseek_coder.py:13
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in deepseek_coder-0.1.0/deepseek_coder/deepseek_coder.py:49
Static code signals:
  • MODULE_TOPLEVEL_EXECUTION: 'subprocess.Popen' executed at module scope (runs on import) in deepseek_coder-0.1.0/deepseek_coder/deepseek_coder.py:13
  • MODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in deepseek_coder-0.1.0/deepseek_coder/deepseek_coder.py:23
  • MODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in deepseek_coder-0.1.0/deepseek_coder/deepseek_coder.py:51
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in deepseek_coder-0.1.0/deepseek_coder/deepseek_coder.py:13
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in deepseek_coder-0.1.0/deepseek_coder/deepseek_coder.py:49

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 642d 615 125 ↑1.0/day
SUSPICIOUS
aws pypi 1.1.7 david tingyoon@gmail.com gmail.com 🪝
Package purpose: david's aws util
Claimed homepage: https://github.com/simon-asis/aws_util
Matched naming pattern: david-aws-util
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 642
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 615/month, 73/week (MODERATE_USAGE)
Codebase size: 125 lines, 7.1 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'david-aws-util' matches AI hallucination template [david] + [aws] + [util].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'tingyoon@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • CRITICALINSTALL_TIME_EXECUTION: 'eval' executed at top-level in david_aws_util-1.1.7/setup.py:21
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in david_aws_util-1.1.7/setup.py:21
  • INFOModerate community usage with 295 monthly downloads.
  • MEDIUMPackage executes code at install/import time, but no exfiltration destination, credential access, encoded payload, obfuscation, shell cradle, or persistence primitive corroborates a weaponized payload. Downgraded from MALICIOUS to SUSPICIOUS pending manual review.
Static code signals:
  • INSTALL_TIME_EXECUTION: 'eval' executed at top-level in david_aws_util-1.1.7/setup.py:21
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in david_aws_util-1.1.7/setup.py:21

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 646d 15 0 ↑0.0/day
Possible Squatted Stub
supabase pypi 0.0.1 — —
Package purpose: Supabase integration providing datadog utility for Python
Claimed homepage: https://pypi.org/project/datadog-supabase/
Matched naming pattern: python-supabase-datadog
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 646
Registry downloads: 15/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'datadog-supabase' matches AI hallucination template [python] + [supabase] + [datadog].
  • HIGHClaims critical enterprise brand identity ('SUPABASE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 3 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 675d 56 12 ↑0.1/day
Possible Squatted Stub
perplexity pypi 1.0.0 Dawid Szewc dawid_szewc@icloud.com icloud.com
Package purpose: A simple command-line client for the Perplexity API
Claimed homepage: https://pypi.org/project/perplexity-cli/
Matched naming pattern: python-perplexity-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 675
Registry downloads: 56/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 12 lines, 321 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'perplexity-cli' matches AI hallucination template [python] + [perplexity] + [cli].
  • HIGHClaims critical enterprise brand identity ('PERPLEXITY').
  • HIGHPublisher email 'dawid_szewc@icloud.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (12 LOC, 1 file(s), 321 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 688d 34 915 ↑0.0/day
Very Risky
amazon npm 0.0.9 — — 🪝 📡
Package purpose: ## Setup
Matched naming pattern: amazon-amazon-auto
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 688
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 34/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 915 lines, 36.0 kB across 16 files (MODERATE_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AMAZON').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/index.cjs:293 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/index.cjs:279 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/index.cjs:136
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.cjs:152 (+1 more occurrence(s) elsewhere)
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/index.cjs:293 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/index.cjs:279 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/index.cjs:136
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.cjs:152 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 689d 527,536 152 ↑765.7/day
Very Risky
@infisical/cli npm 0.43.133 Infisical Inc, daniel@infisical.com infisical.com 🪝 🌐
Package purpose: <h1 align="center">Infisical CLI</h1> <p align="center"> <p align="center"><b>Embrace shift-left security with the Infisical CLI and strengthen your DevSecOps practices by seamlessly managing secrets across your workflows, pipelines, and applications.</
Claimed homepage: https://github.com/Infisical/cli#readme
Matched naming pattern: npm-@infisical/cli-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 689
Registry downloads: 527536/month, 131884/week (HIGH_COMMUNITY_ADOPTION)
Codebase size: 152 lines, 5.5 kB across 1 file (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • INFOLegitimate documentation effort (255 chars with homepage link).
  • HIGHLIFECYCLE_SCRIPT: 'preinstall' -> 'node src/index.cjs'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/src/index.cjs:1
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/index.cjs:41
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/index.cjs:130
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/src/index.cjs, which makes network calls and executes/decodes/reads secrets
  • INFOMassive registry adoption verified: 527,536 monthly downloads. Package exhibits extensive community scrutiny.
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node src/index.cjs'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/src/index.cjs:1
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/src/index.cjs:41
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/index.cjs:130
  • INSTALL_TIME_NETWORK_SOCKET: 'preinstall' script runs package/src/index.cjs, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 692d 378 0 ↑0.5/day
Possible Squatted Stub
copilot pypi 1.34.1 — —
Package purpose: A thin wrapper to distribute https://github.com/aws/copilot-cli via pip.
Claimed homepage: https://pypi.org/project/copilot-bin/
Matched naming pattern: python-copilot-bin
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 692
Registry downloads: 378/month, 90/week (MODERATE_USAGE)
Codebase size: 0 lines, 0 Bytes across 4 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'copilot-bin' matches AI hallucination template [python] + [copilot] + [bin].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 4 file(s), 0 bytes).
  • INFOModerate community usage with 378 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 705d 13 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing maas utility for Python
Claimed homepage: https://pypi.org/project/langchain-maas/
Matched naming pattern: python-langchain-maas
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 705
Registry downloads: 13/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-maas' matches AI hallucination template [python] + [langchain] + [maas].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 705d 12 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing sparkai utility for Python
Claimed homepage: https://pypi.org/project/langchain-sparkai/
Matched naming pattern: python-langchain-sparkai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 705
Registry downloads: 12/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-sparkai' matches AI hallucination template [python] + [langchain] + [sparkai].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 706d 13 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing nebula utility for Python
Claimed homepage: https://pypi.org/project/langchain-nebula/
Matched naming pattern: python-langchain-nebula
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 706
Registry downloads: 13/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-nebula' matches AI hallucination template [python] + [langchain] + [nebula].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 706d 11 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing etl utility for Python
Claimed homepage: https://pypi.org/project/langchain-etl/
Matched naming pattern: python-langchain-etl
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 706
Registry downloads: 11/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-etl' matches AI hallucination template [python] + [langchain] + [etl].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 706d 14 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing cozepy utility for Python
Claimed homepage: https://pypi.org/project/langchain-cozepy/
Matched naming pattern: python-langchain-cozepy
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 706
Registry downloads: 14/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-cozepy' matches AI hallucination template [python] + [langchain] + [cozepy].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 707d 0 21 ↑0.0/day
Possible Squatted Stub
cursor pypi 0.1 — —
Package purpose: Cursor integration providing automation utility for Python
Claimed homepage: https://pypi.org/project/cursor-automation/
Matched naming pattern: python-cursor-automation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 707
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 488 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'cursor-automation' matches AI hallucination template [python] + [cursor] + [automation].
  • HIGHClaims critical enterprise brand identity ('CURSOR').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 1 file(s), 488 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
« Prev Next »
LINK COPIED TO CLIPBOARD