🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
75 715d 13 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing Database driver / ORM adapter for Python
Claimed homepage: https://pypi.org/project/langchain-db/
Matched naming pattern: python-langchain-db
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 13/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-db' matches AI hallucination template [python] + [langchain] + [db].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 16 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing bd utility for Python
Claimed homepage: https://pypi.org/project/langchain-bd/
Matched naming pattern: python-langchain-bd
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 16/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-bd' matches AI hallucination template [python] + [langchain] + [bd].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 0 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing jd utility for Python
Claimed homepage: https://pypi.org/project/langchain-jd/
Matched naming pattern: python-langchain-jd
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-jd' matches AI hallucination template [python] + [langchain] + [jd].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 16 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing oss utility for Python
Claimed homepage: https://pypi.org/project/langchain-oss/
Matched naming pattern: python-langchain-oss
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 16/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-oss' matches AI hallucination template [python] + [langchain] + [oss].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 14 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing tos utility for Python
Claimed homepage: https://pypi.org/project/langchain-tos/
Matched naming pattern: python-langchain-tos
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 14/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-tos' matches AI hallucination template [python] + [langchain] + [tos].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 12 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing futures utility for Python
Claimed homepage: https://pypi.org/project/langchain-futures/
Matched naming pattern: python-langchain-futures
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 12/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-futures' matches AI hallucination template [python] + [langchain] + [futures].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 20 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing ernie utility for Python
Claimed homepage: https://pypi.org/project/langchain-ernie/
Matched naming pattern: python-langchain-ernie
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 20/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-ernie' matches AI hallucination template [python] + [langchain] + [ernie].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 14 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing huawei utility for Python
Claimed homepage: https://pypi.org/project/langchain-huawei/
Matched naming pattern: python-langchain-huawei
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 14/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-huawei' matches AI hallucination template [python] + [langchain] + [huawei].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 15 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing hw utility for Python
Claimed homepage: https://pypi.org/project/langchain-hw/
Matched naming pattern: python-langchain-hw
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 15/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-hw' matches AI hallucination template [python] + [langchain] + [hw].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 119 0 ↑0.2/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing alibaba utility for Python
Claimed homepage: https://pypi.org/project/langchain-alibaba/
Matched naming pattern: python-langchain-alibaba
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 119/month, 31/week (MODERATE_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-alibaba' matches AI hallucination template [python] + [langchain] + [alibaba].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).
  • INFOModerate community usage with 119 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 715d 96 0 ↑0.1/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing ai utility for Python
Claimed homepage: https://pypi.org/project/langchain-ai/
Matched naming pattern: python-langchain-ai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 715
Registry downloads: 96/month, 19/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-ai' matches AI hallucination template [python] + [langchain] + [ai].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 716d 30 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing modelscope utility for Python
Claimed homepage: https://pypi.org/project/langchain-modelscope/
Matched naming pattern: python-langchain-modelscope
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 716
Registry downloads: 30/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-modelscope' matches AI hallucination template [python] + [langchain] + [modelscope].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 716d 12 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing winwin utility for Python
Claimed homepage: https://pypi.org/project/langchain-winwin/
Matched naming pattern: python-langchain-winwin
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 716
Registry downloads: 12/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-winwin' matches AI hallucination template [python] + [langchain] + [winwin].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 716d 24 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing baidu utility for Python
Claimed homepage: https://pypi.org/project/langchain-baidu/
Matched naming pattern: python-langchain-baidu
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 716
Registry downloads: 24/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-baidu' matches AI hallucination template [python] + [langchain] + [baidu].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 716d 30 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing qianfan utility for Python
Claimed homepage: https://pypi.org/project/langchain-qianfan/
Matched naming pattern: python-langchain-qianfan
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 716
Registry downloads: 30/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-qianfan' matches AI hallucination template [python] + [langchain] + [qianfan].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 716d 16 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing tencent utility for Python
Claimed homepage: https://pypi.org/project/langchain-tencent/
Matched naming pattern: python-langchain-tencent
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 716
Registry downloads: 16/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-tencent' matches AI hallucination template [python] + [langchain] + [tencent].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 716d 11 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing dspy utility for Python
Claimed homepage: https://pypi.org/project/langchain-dspy/
Matched naming pattern: python-langchain-dspy
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 716
Registry downloads: 11/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-dspy' matches AI hallucination template [python] + [langchain] + [dspy].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 718d 41 0 ↑0.1/day
Possible Squatted Stub
langchain pypi 0.1.2 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing volcengine utility for Python
Claimed homepage: https://pypi.org/project/langchain-volcengine/
Matched naming pattern: python-langchain-volcengine
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 718
Registry downloads: 41/month, 12/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-volcengine' matches AI hallucination template [python] + [langchain] + [volcengine].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 718d 12 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 zbmain zbmaincn@gmail.com gmail.com
Package purpose: Langchain integration providing pyark utility for Python
Claimed homepage: https://pypi.org/project/langchain-pyark/
Matched naming pattern: python-langchain-pyark
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 718
Registry downloads: 12/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-pyark' matches AI hallucination template [python] + [langchain] + [pyark].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'zbmaincn@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 720d 8 20 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.1 Jae Yeob Kim codejay2023@gmail.com gmail.com
Package purpose: langchain util
Claimed homepage: https://github.com/jaycando/langchain
Matched naming pattern: python-langchain-jay
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 720
Registry downloads: 8/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 667 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-jay' matches AI hallucination template [python] + [langchain] + [jay].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'codejay2023@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (20 LOC, 1 file(s), 667 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 725d 0 24 ↑0.0/day
Possible Squatted Stub
eth pypi 0.1.0 Julius Hamilton juliushamilton100@gmail.com gmail.com
Package purpose: A Python SDK for interacting with Ava Protocol and Ethereum networks
Claimed homepage: https://github.com/hmltn-0/ava-eth-sdk
Matched naming pattern: ava-eth-sdk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 725
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 24 lines, 810 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ava-eth-sdk' matches AI hallucination template [ava] + [eth] + [sdk].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • HIGHPublisher email 'juliushamilton100@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (24 LOC, 1 file(s), 810 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 766d 3 5 ↑0.0/day
Possible Squatted Stub
aws pypi 0.1 — —
Package purpose: Aws integration providing tools utility for Usd
Claimed homepage: https://pypi.org/project/usd-aws-tools/
Matched naming pattern: usd-aws-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 766
Registry downloads: 3/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 104 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'usd-aws-tools' matches AI hallucination template [usd] + [aws] + [tools].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 758 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 104 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 769d 18 320 ↑0.0/day
SUSPICIOUS
base pypi 0.0.7 M E Leypold pythonista-4sda212@m-e-leypold.de m-e-leypold.de 🪝
Package purpose: Basic types and algorithms for greenland
Claimed homepage: https://pypi.org/project/greenland-base/
Matched naming pattern: python-base-greenland
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 769
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 18/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 320 lines, 16.2 kB across 8 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 758 days ago (predates modern AI hallucination waves).
  • CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in greenland_base-0.0.7/doc/conf.py:12
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in greenland_base-0.0.7/doc/conf.py:12
  • CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in greenland_base-0.0.7/doc/conf_project.py:3
  • CRITICALMODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in greenland_base-0.0.7/doc/conf_project.py:8
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in greenland_base-0.0.7/doc/conf_project.py:3
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in greenland_base-0.0.7/src/greenland/base/version.py:65
  • MEDIUMPackage executes code at install/import time, but no exfiltration destination, credential access, encoded payload, obfuscation, shell cradle, or persistence primitive corroborates a weaponized payload. Downgraded from MALICIOUS to SUSPICIOUS pending manual review.
Static code signals:
  • MODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in greenland_base-0.0.7/doc/conf.py:12
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in greenland_base-0.0.7/doc/conf.py:12
  • MODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in greenland_base-0.0.7/doc/conf_project.py:3
  • MODULE_TOPLEVEL_EXECUTION: 'subprocess.run' executed at module scope (runs on import) in greenland_base-0.0.7/doc/conf_project.py:8
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in greenland_base-0.0.7/doc/conf_project.py:3
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in greenland_base-0.0.7/src/greenland/base/version.py:65

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 785d 8 0 ↑0.0/day
Possible Squatted Stub
aws pypi 0.0.1 — —
Package purpose: Aws integration providing neuron utility for Datadog
Claimed homepage: https://pypi.org/project/datadog-aws-neuron/
Matched naming pattern: datadog-aws-neuron
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 785
Registry downloads: 8/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'datadog-aws-neuron' matches AI hallucination template [datadog] + [aws] + [neuron].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 777 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 3 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 802d 15 0 ↑0.0/day
Possible Squatted Stub
openai pypi 0.0.0 neural-blade carmeloscaccianoce@icloud.com icloud.com
Package purpose: Openai integration providing manage utility for Python
Claimed homepage: https://pypi.org/project/manage-openai/
Matched naming pattern: python-openai-manage
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 802
Registry downloads: 15/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'manage-openai' matches AI hallucination template [python] + [openai] + [manage].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'carmeloscaccianoce@icloud.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 794 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 808d 12 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.0 Rafael Irgolic hello@irgolic.com irgolic.com
Package purpose: # aijson-langchain
Claimed homepage: https://pypi.org/project/aijson-langchain/
Matched naming pattern: python-langchain-aijson
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 808
Registry downloads: 12/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'aijson-langchain' matches AI hallucination template [python] + [langchain] + [aijson].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'hello@irgolic.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 801 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 813d 4 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.0 Rafael Irgolic hello@irgolic.com irgolic.com
Package purpose: # semanticjson-langchain
Claimed homepage: https://pypi.org/project/semanticjson-langchain/
Matched naming pattern: python-langchain-semanticjson
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 813
Registry downloads: 4/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'semanticjson-langchain' matches AI hallucination template [python] + [langchain] + [semanticjson].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'hello@irgolic.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 805 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 814d 9 9 ↑0.0/day
Possible Squatted Stub
langchain pypi 2.1.1 AnupamAS01 —
Package purpose: AnupamAS01
Claimed homepage: https://pypi.org/project/langchain-elasticsearh/
Matched naming pattern: python-langchain-elasticsearh
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 814
Registry downloads: 9/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 9 lines, 258 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-elasticsearh' matches AI hallucination template [python] + [langchain] + [elasticsearh].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 806 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (9 LOC, 1 file(s), 258 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 820d 13 0 ↑0.0/day
Possible Squatted Stub
together pypi 0.0.1rc0 — —
Package purpose: This is a dummy package
Claimed homepage: https://pypi.org/project/bought-together-optimiser-client/
Matched naming pattern: bought-together-optimiser
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 820
Registry downloads: 13/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 4 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'bought-together-optimiser-client' matches AI hallucination template [bought] + [together] + [optimiser].
  • HIGHClaims critical enterprise brand identity ('TOGETHER').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 809 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 4 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 822d 7 12 ↑0.0/day
Possible Squatted Stub
copilot pypi 0.1 — —
Package purpose: Copilot integration providing json utility for Python
Claimed homepage: https://pypi.org/project/json-copilot/
Matched naming pattern: python-copilot-json
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 822
Registry downloads: 7/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 12 lines, 291 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'json-copilot' matches AI hallucination template [python] + [copilot] + [json].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 814 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (12 LOC, 1 file(s), 291 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 829d 11 0 ↑0.0/day
Possible Squatted Stub
vllm pypi 0.0.1 — —
Package purpose: Vllm integration providing datadog utility for Python
Claimed homepage: https://pypi.org/project/datadog-vllm/
Matched naming pattern: python-vllm-datadog
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 829
Registry downloads: 11/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'datadog-vllm' matches AI hallucination template [python] + [vllm] + [datadog].
  • HIGHClaims critical enterprise brand identity ('VLLM').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 818 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 3 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 862d 7 11 ↑0.0/day
Possible Squatted Stub
ledger pypi 0.0.0.1 — —
Package purpose: # Security Holding Package This is a security holding package, a placeholder for a deleted package susceptible to hijacking. (The package is completely empty) For inquiries: [sec_reporting@service.jfrog.com](mailto:sec_reporting@service.jfrog.com)
Claimed homepage: https://pypi.org/project/ledger-dev/
Matched naming pattern: python-ledger-dev
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 862
Registry downloads: 7/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 374 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ledger-dev' matches AI hallucination template [python] + [ledger] + [dev].
  • HIGHClaims critical enterprise brand identity ('LEDGER').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 851 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 374 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 867d 6 0 ↑0.0/day
Possible Squatted Stub
datadog pypi 0.0.1 — —
Package purpose: Datadog integration providing weblogic utility for Python
Claimed homepage: https://pypi.org/project/datadog-weblogic/
Matched naming pattern: python-datadog-weblogic
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 867
Registry downloads: 6/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'datadog-weblogic' matches AI hallucination template [python] + [datadog] + [weblogic].
  • HIGHClaims critical enterprise brand identity ('DATADOG').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 857 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 3 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 867d 4 0 ↑0.0/day
Possible Squatted Stub
weaviate pypi 0.0.1 — —
Claimed homepage: https://pypi.org/project/datadog-weaviate/
Matched naming pattern: python-weaviate-datadog
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 867
Registry downloads: 4/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'datadog-weaviate' matches AI hallucination template [python] + [weaviate] + [datadog].
  • HIGHClaims critical enterprise brand identity ('WEAVIATE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 859 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 3 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 869d 17 35 ↑0.0/day
SUSPICIOUS
ntdgotv pypi 0.2.1 ntdGoTV ntdgotv@gmail.com gmail.com 🪝
Package purpose: # ntdGoTV_langtools
Claimed homepage: https://pypi.org/project/ntdgotv-langtools/
Matched naming pattern: python-ntdgotv-langtools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 869
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 17/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 35 lines, 1.2 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 843 days ago (predates modern AI hallucination waves).
  • CRITICALINSTALL_TIME_EXECUTION: 'subprocess.run' executed at top-level in ntdgotv_langtools-0.2.1/setup.py:7
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in ntdgotv_langtools-0.2.1/setup.py:7
  • MEDIUMPackage executes code at install/import time, but no exfiltration destination, credential access, encoded payload, obfuscation, shell cradle, or persistence primitive corroborates a weaponized payload. Downgraded from MALICIOUS to SUSPICIOUS pending manual review.
Static code signals:
  • INSTALL_TIME_EXECUTION: 'subprocess.run' executed at top-level in ntdgotv_langtools-0.2.1/setup.py:7
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in ntdgotv_langtools-0.2.1/setup.py:7

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 870d 4 0 ↑0.0/day
Possible Squatted Stub
cisco pypi 0.0.1 — —
Claimed homepage: https://pypi.org/project/datadog-cisco-aci/
Matched naming pattern: datadog-cisco-aci
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 870
Registry downloads: 4/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'datadog-cisco-aci' matches AI hallucination template [datadog] + [cisco] + [aci].
  • HIGHClaims critical enterprise brand identity ('CISCO').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 860 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 3 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 870d 5 0 ↑0.0/day
Possible Squatted Stub
azure pypi 0.0.1 — —
Claimed homepage: https://pypi.org/project/datadog-azure-iot-edge/
Matched naming pattern: datadog-azure-iot
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 870
Registry downloads: 5/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'datadog-azure-iot-edge' matches AI hallucination template [datadog] + [azure] + [iot].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 862 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 3 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 870d 7 0 ↑0.0/day
Possible Squatted Stub
amazon pypi 0.0.1 — —
Claimed homepage: https://pypi.org/project/datadog-amazon-msk/
Matched naming pattern: datadog-amazon-msk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 870
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'datadog-amazon-msk' matches AI hallucination template [datadog] + [amazon] + [msk].
  • HIGHClaims critical enterprise brand identity ('AMAZON').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 859 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 3 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 872d 7 2 ↑0.0/day
Possible Squatted Stub
mistral pypi 0.0.0 — —
Claimed homepage: https://pypi.org/project/mistral-local/
Matched naming pattern: python-mistral-local
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 872
Registry downloads: 7/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 50 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'mistral-local' matches AI hallucination template [python] + [mistral] + [local].
  • HIGHClaims critical enterprise brand identity ('MISTRAL').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 864 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 2 file(s), 50 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 872d 12 2 ↑0.0/day
Possible Squatted Stub
mistral pypi 0.0.0 — —
Claimed homepage: https://pypi.org/project/mistral-api/
Matched naming pattern: python-mistral-api
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 872
Registry downloads: 12/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 48 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'mistral-api' matches AI hallucination template [python] + [mistral] + [api].
  • HIGHClaims critical enterprise brand identity ('MISTRAL').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 864 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 2 file(s), 48 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 872d 14 2 ↑0.0/day
Possible Squatted Stub
mistral pypi 0.0.0 — —
Claimed homepage: https://pypi.org/project/mistral-finetune/
Matched naming pattern: python-mistral-finetune
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 872
Registry downloads: 14/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 53 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'mistral-finetune' matches AI hallucination template [python] + [mistral] + [finetune].
  • HIGHClaims critical enterprise brand identity ('MISTRAL').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 864 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 2 file(s), 53 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 882d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: Ledger Solana Coin integration
Static code signals:
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/lib-es/logic/broadcast.js:52 (+17 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/lib-es/network/chain/index.js:57 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/jest.config.js:36
  • SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/lib-es/logic/listOperations.js:122 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 887d 9 1 ↑0.0/day
Possible Squatted Stub
aws pypi 0.2.6 — —
Claimed homepage: https://pypi.org/project/libpss-aws/
Matched naming pattern: python-aws-libpss
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 887
Registry downloads: 9/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 26 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'libpss-aws' matches AI hallucination template [python] + [aws] + [libpss].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 879 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 26 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 890d 18 0 ↑0.0/day
Possible Squatted Stub
openai pypi 0.1.0 Mikhail Murtazin murtazkorpaz@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/giga-openai-test/
Matched naming pattern: giga-openai-test
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 890
Registry downloads: 18/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'giga-openai-test' matches AI hallucination template [giga] + [openai] + [test].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'murtazkorpaz@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 881 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 893d 12 14 ↑0.0/day
Possible Squatted Stub
eth pypi 0.0.7 — —
Package purpose: Type stubs for simular-evm
Claimed homepage: https://github.com/james4ever0/simular-evm-stubs
Matched naming pattern: simular-eth-stubs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 893
Registry downloads: 12/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 518 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'simular-eth-stubs' matches AI hallucination template [simular] + [eth] + [stubs].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 882 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (14 LOC, 1 file(s), 518 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 895d 6 7 ↑0.0/day
Possible Squatted Stub
xai pypi 0.1 — —
Claimed homepage: https://pypi.org/project/simple-xai-framework/
Matched naming pattern: simple-xai-framework
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 895
Registry downloads: 6/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 169 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'simple-xai-framework' matches AI hallucination template [simple] + [xai] + [framework].
  • HIGHClaims critical enterprise brand identity ('XAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 885 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 169 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 903d 3 23 ↑0.0/day
Possible Squatted Stub
ledger pypi 0.1.1 sjnscythe scytheabhi97@gmail.com gmail.com
Package purpose: poc for ledger
Claimed homepage: https://github.com/sjnscythe
Matched naming pattern: python-ledger-mkdocs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 903
Registry downloads: 3/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 23 lines, 800 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'mkdocs-ledger' matches AI hallucination template [python] + [ledger] + [mkdocs].
  • HIGHClaims critical enterprise brand identity ('LEDGER').
  • HIGHPublisher email 'scytheabhi97@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 893 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (23 LOC, 1 file(s), 800 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 907d 19 6 ↑0.0/day
Possible Squatted Stub
btc pypi 0.0.1 Alpha mailwb3@gmail.com gmail.com
Package purpose: A text util package
Claimed homepage: https://github.com/a731062834/tools-data-analysis-btc
Matched naming pattern: tools-btc-analysis
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 907
Registry downloads: 19/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 6 lines, 138 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'tools-data-analysis-btc' matches AI hallucination template [tools] + [btc] + [analysis].
  • HIGHClaims critical enterprise brand identity ('BTC').
  • HIGHPublisher email 'mailwb3@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 900 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (6 LOC, 1 file(s), 138 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 935d 87 0 ↑0.1/day
Possible Squatted Stub
deepseek pypi 0.0.1.dev0 Shadow Walker —
Package purpose: deepseek-vl
Claimed homepage: https://pypi.org/project/deepseek-vl/
Matched naming pattern: python-deepseek-vl
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 935
Registry downloads: 87/month, 14/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 4 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'deepseek-vl' matches AI hallucination template [python] + [deepseek] + [vl].
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 929 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 4 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 937d 10 23 ↑0.0/day
Possible Squatted Stub
web3 pypi 1.0.0 yszr yszr222@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/web3-commom/
Matched naming pattern: python-web3-commom
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 937
Registry downloads: 10/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 23 lines, 689 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'web3-commom' matches AI hallucination template [python] + [web3] + [commom].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'yszr222@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 926 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (23 LOC, 1 file(s), 689 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
« Prev Next »
LINK COPIED TO CLIPBOARD