🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
75 714d 19 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing duckdb utility for Python
Claimed homepage: https://pypi.org/project/langchain-duckdb/
Matched naming pattern: python-langchain-duckdb
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 714
Registry downloads: 19/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-duckdb' matches AI hallucination template [python] + [langchain] + [duckdb].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 16 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.2 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing dify utility for Python
Claimed homepage: https://pypi.org/project/langchain-dify/
Matched naming pattern: python-langchain-dify
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 16/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-dify' matches AI hallucination template [python] + [langchain] + [dify].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 13 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.4 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing coze utility for Python
Claimed homepage: https://pypi.org/project/langchain-coze/
Matched naming pattern: python-langchain-coze
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 13/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-coze' matches AI hallucination template [python] + [langchain] + [coze].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 20 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing mysql utility for Python
Claimed homepage: https://pypi.org/project/langchain-mysql/
Matched naming pattern: python-langchain-mysql
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 20/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-mysql' matches AI hallucination template [python] + [langchain] + [mysql].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 12 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing hologres utility for Python
Claimed homepage: https://pypi.org/project/langchain-hologres/
Matched naming pattern: python-langchain-hologres
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 12/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-hologres' matches AI hallucination template [python] + [langchain] + [hologres].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 10 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing flask utility for Python
Claimed homepage: https://pypi.org/project/langchain-flask/
Matched naming pattern: python-langchain-flask
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 10/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-flask' matches AI hallucination template [python] + [langchain] + [flask].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 11 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing fast utility for Python
Claimed homepage: https://pypi.org/project/langchain-fast/
Matched naming pattern: python-langchain-fast
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 11/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-fast' matches AI hallucination template [python] + [langchain] + [fast].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 10 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing flash utility for Python
Claimed homepage: https://pypi.org/project/langchain-flash/
Matched naming pattern: python-langchain-flash
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 10/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-flash' matches AI hallucination template [python] + [langchain] + [flash].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 19 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing jinja2 utility for Python
Claimed homepage: https://pypi.org/project/langchain-jinja2/
Matched naming pattern: python-langchain-jinja2
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 19/month, 14/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-jinja2' matches AI hallucination template [python] + [langchain] + [jinja2].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 11 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing openrefine utility for Python
Claimed homepage: https://pypi.org/project/langchain-openrefine/
Matched naming pattern: python-langchain-openrefine
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 11/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-openrefine' matches AI hallucination template [python] + [langchain] + [openrefine].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 13 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing refine utility for Python
Claimed homepage: https://pypi.org/project/langchain-refine/
Matched naming pattern: python-langchain-refine
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 13/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-refine' matches AI hallucination template [python] + [langchain] + [refine].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 10 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing elaticsearch utility for Python
Claimed homepage: https://pypi.org/project/langchain-elaticsearch/
Matched naming pattern: python-langchain-elaticsearch
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 10/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-elaticsearch' matches AI hallucination template [python] + [langchain] + [elaticsearch].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 11 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing future utility for Python
Claimed homepage: https://pypi.org/project/langchain-future/
Matched naming pattern: python-langchain-future
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 11/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-future' matches AI hallucination template [python] + [langchain] + [future].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 10 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing yes utility for Python
Claimed homepage: https://pypi.org/project/langchain-yes/
Matched naming pattern: python-langchain-yes
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 10/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-yes' matches AI hallucination template [python] + [langchain] + [yes].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 12 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing hello utility for Python
Claimed homepage: https://pypi.org/project/langchain-hello/
Matched naming pattern: python-langchain-hello
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 12/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-hello' matches AI hallucination template [python] + [langchain] + [hello].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 0 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing onnx utility for Python
Claimed homepage: https://pypi.org/project/langchain-onnx/
Matched naming pattern: python-langchain-onnx
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-onnx' matches AI hallucination template [python] + [langchain] + [onnx].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 13 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing datasets utility for Python
Claimed homepage: https://pypi.org/project/langchain-datasets/
Matched naming pattern: python-langchain-datasets
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 13/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-datasets' matches AI hallucination template [python] + [langchain] + [datasets].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 15 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing transformer utility for Python
Claimed homepage: https://pypi.org/project/langchain-transformer/
Matched naming pattern: python-langchain-transformer
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 15/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-transformer' matches AI hallucination template [python] + [langchain] + [transformer].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 11 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing twitter utility for Python
Claimed homepage: https://pypi.org/project/langchain-twitter/
Matched naming pattern: python-langchain-twitter
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 11/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-twitter' matches AI hallucination template [python] + [langchain] + [twitter].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 11 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing easynlp utility for Python
Claimed homepage: https://pypi.org/project/langchain-easynlp/
Matched naming pattern: python-langchain-easynlp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 11/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-easynlp' matches AI hallucination template [python] + [langchain] + [easynlp].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 16 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing opencv utility for Python
Claimed homepage: https://pypi.org/project/langchain-opencv/
Matched naming pattern: python-langchain-opencv
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 16/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-opencv' matches AI hallucination template [python] + [langchain] + [opencv].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 15 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing gpt8 utility for Python
Claimed homepage: https://pypi.org/project/langchain-gpt8/
Matched naming pattern: python-langchain-gpt8
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 15/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-gpt8' matches AI hallucination template [python] + [langchain] + [gpt8].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 0 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing gpt5 utility for Python
Claimed homepage: https://pypi.org/project/langchain-gpt5/
Matched naming pattern: python-langchain-gpt5
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-gpt5' matches AI hallucination template [python] + [langchain] + [gpt5].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 13 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing banana utility for Python
Claimed homepage: https://pypi.org/project/langchain-banana/
Matched naming pattern: python-langchain-banana
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 13/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-banana' matches AI hallucination template [python] + [langchain] + [banana].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 10 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing apple utility for Python
Claimed homepage: https://pypi.org/project/langchain-apple/
Matched naming pattern: python-langchain-apple
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 10/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-apple' matches AI hallucination template [python] + [langchain] + [apple].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 20 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-gpt/
Matched naming pattern: python-langchain-gpt
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 20/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-gpt' matches AI hallucination template [python] + [langchain] + [gpt].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 15 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-gpt4/
Matched naming pattern: python-langchain-gpt4
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 15/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-gpt4' matches AI hallucination template [python] + [langchain] + [gpt4].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 15 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-openllm/
Matched naming pattern: python-langchain-openllm
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 15/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-openllm' matches AI hallucination template [python] + [langchain] + [openllm].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 15 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-openlm/
Matched naming pattern: python-langchain-openlm
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 15/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-openlm' matches AI hallucination template [python] + [langchain] + [openlm].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 10 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-openkg/
Matched naming pattern: python-langchain-openkg
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 10/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-openkg' matches AI hallucination template [python] + [langchain] + [openkg].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 10 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-vespa/
Matched naming pattern: python-langchain-vespa
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 10/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-vespa' matches AI hallucination template [python] + [langchain] + [vespa].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 13 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-es/
Matched naming pattern: python-langchain-es
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 13/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-es' matches AI hallucination template [python] + [langchain] + [es].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 755 0 ↑1.1/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-faiss/
Matched naming pattern: python-langchain-faiss
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 755/month, 176/week (MODERATE_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-faiss' matches AI hallucination template [python] + [langchain] + [faiss].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).
  • INFOModerate community usage with 755 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 17 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-hk/
Matched naming pattern: python-langchain-hk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 17/month, 12/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-hk' matches AI hallucination template [python] + [langchain] + [hk].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 13 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-tw/
Matched naming pattern: python-langchain-tw
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 13/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-tw' matches AI hallucination template [python] + [langchain] + [tw].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 16 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-china/
Matched naming pattern: python-langchain-china
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 16/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-china' matches AI hallucination template [python] + [langchain] + [china].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 30 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-git/
Matched naming pattern: python-langchain-git
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 30/month, 24/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-git' matches AI hallucination template [python] + [langchain] + [git].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 14 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-hook/
Matched naming pattern: python-langchain-hook
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 14/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-hook' matches AI hallucination template [python] + [langchain] + [hook].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 37 0 ↑0.1/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-tool/
Matched naming pattern: python-langchain-tool
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 37/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-tool' matches AI hallucination template [python] + [langchain] + [tool].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 16 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-zb/
Matched naming pattern: python-langchain-zb
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 16/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-zb' matches AI hallucination template [python] + [langchain] + [zb].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 675 0 ↑0.9/day
Possible Squatted Stub
gemini pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-gemini/
Matched naming pattern: python-gemini-langchain
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 675/month, 141/week (MODERATE_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-gemini' matches AI hallucination template [python] + [gemini] + [langchain].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).
  • INFOModerate community usage with 675 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 37 0 ↑0.1/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-kimi/
Matched naming pattern: python-langchain-kimi
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 37/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-kimi' matches AI hallucination template [python] + [langchain] + [kimi].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 53 0 ↑0.1/day
Possible Squatted Stub
llama pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-llama/
Matched naming pattern: python-llama-langchain
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 53/month, 26/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-llama' matches AI hallucination template [python] + [llama] + [langchain].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 16 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-cv/
Matched naming pattern: python-langchain-cv
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 16/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-cv' matches AI hallucination template [python] + [langchain] + [cv].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 12 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-nlp/
Matched naming pattern: python-langchain-nlp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 12/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-nlp' matches AI hallucination template [python] + [langchain] + [nlp].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 16 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-bert/
Matched naming pattern: python-langchain-bert
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 16/month, 12/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-bert' matches AI hallucination template [python] + [langchain] + [bert].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 44 0 ↑0.1/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-transformers/
Matched naming pattern: python-langchain-transformers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 44/month, 18/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-transformers' matches AI hallucination template [python] + [langchain] + [transformers].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 24 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-dataset/
Matched naming pattern: python-langchain-dataset
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 24/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-dataset' matches AI hallucination template [python] + [langchain] + [dataset].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 20 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-runtime/
Matched naming pattern: python-langchain-runtime
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 20/month, 12/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-runtime' matches AI hallucination template [python] + [langchain] + [runtime].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 19 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-test/
Matched naming pattern: python-langchain-test
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 19/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-test' matches AI hallucination template [python] + [langchain] + [test].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
« Prev Next »
LINK COPIED TO CLIPBOARD