🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
75 938d 53 6 ↑0.1/day
Possible Squatted Stub
eth pypi 0.0.1 Alpha mailwb3@gmail.com gmail.com
Package purpose: A text util package
Claimed homepage: https://github.com/a731062834/data-analysis-tools-eth
Matched naming pattern: data-eth-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 938
Registry downloads: 53/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 6 lines, 138 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'data-analysis-tools-eth' matches AI hallucination template [data] + [eth] + [tools].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • HIGHPublisher email 'mailwb3@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 931 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (6 LOC, 1 file(s), 138 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 947d 10 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.0.0 Eugene Yurtsev eyurtsev@gmail.com gmail.com
Package purpose: Langchain integration providing extract utility for Python
Claimed homepage: https://pypi.org/project/langchain-extract/
Matched naming pattern: python-langchain-extract
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 947
Registry downloads: 10/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-extract' matches AI hallucination template [python] + [langchain] + [extract].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'eyurtsev@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 939 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 951d 3 0 ↑0.0/day
Possible Squatted Stub
copilot pypi 0.0.1 Wenyu Zhao wenyuzhaox@gmail.com gmail.com
Package purpose: Copilot integration providing universal utility for Python
Claimed homepage: https://pypi.org/project/universal-copilot/
Matched naming pattern: python-copilot-universal
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 951
Registry downloads: 3/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'universal-copilot' matches AI hallucination template [python] + [copilot] + [universal].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • HIGHPublisher email 'wenyuzhaox@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 944 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 953d 17 12 ↑0.0/day
Possible Squatted Stub
ethereum pypi 0.1 Ziosta ziosta.eth@gmail.com gmail.com
Package purpose: Ethereum integration providing document utility for Ziosta
Claimed homepage: https://github.com/ziosta/Ziosta-Secure-Document-Registry-on-Ethereum-Blockchain
Matched naming pattern: ziosta-ethereum-document
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 953
Registry downloads: 17/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 12 lines, 450 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ziosta-secure-document-registry-on-ethereum-blockchain' matches AI hallucination template [ziosta] + [ethereum] + [document].
  • HIGHClaims critical enterprise brand identity ('ETHEREUM').
  • HIGHPublisher email 'ziosta.eth@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 942 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (12 LOC, 1 file(s), 450 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 957d 0 15 ↑0.0/day
Possible Squatted Stub
azure pypi 1.0.0 — —
Package purpose: Azure integration providing upload utility for Python
Claimed homepage: https://pypi.org/project/azure-upload/
Matched naming pattern: python-azure-upload
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 957
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 343 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'azure-upload' matches AI hallucination template [python] + [azure] + [upload].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 948 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 343 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 982d 6 0 ↑0.0/day
Possible Squatted Stub
gemini pypi 0.0.0 — ruben.selander@nordicintel.com nordicintel.com
Package purpose: Coming soon
Claimed homepage: https://pypi.org/project/open-gemini/
Matched naming pattern: python-gemini-open
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 982
Registry downloads: 6/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'open-gemini' matches AI hallucination template [python] + [gemini] + [open].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'ruben.selander@nordicintel.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 975 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1005d 19 5 ↑0.0/day
Possible Squatted Stub
pinecone pypi 0.0.5 X-I-A admin@x-i-a.com x-i-a.com
Package purpose: Introduction
Claimed homepage: https://develop.x-i-a.com/docs/xia-engine-pinecone/0.0.5/index.html
Matched naming pattern: xia-pinecone-pinecone
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1005
Registry downloads: 19/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 158 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'xia-engine-pinecone' matches AI hallucination template [xia] + [pinecone] + [pinecone].
  • HIGHClaims critical enterprise brand identity ('PINECONE').
  • HIGHPublisher email 'admin@x-i-a.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 997 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 158 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1031d 18 0 ↑0.0/day
Possible Squatted Stub
openai pypi 0.0.0 Oscar Bahamonde oscar.bahamonde@oscarbahamonde.com oscarbahamonde.com
Package purpose: # NEW
Claimed homepage: https://pypi.org/project/fastapi-openai/
Matched naming pattern: python-openai-fastapi
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1031
Registry downloads: 18/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'fastapi-openai' matches AI hallucination template [python] + [openai] + [fastapi].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'oscar.bahamonde@oscarbahamonde.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1022 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1034d 9 12 ↑0.0/day
Possible Squatted Stub
hf pypi 0.0.1 — —
Package purpose: Hf integration providing biceps utility for Python
Claimed homepage: https://pypi.org/project/hf-biceps/
Matched naming pattern: python-hf-biceps
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1034
Registry downloads: 9/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 12 lines, 334 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'hf-biceps' matches AI hallucination template [python] + [hf] + [biceps].
  • HIGHClaims critical enterprise brand identity ('HF').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1023 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (12 LOC, 1 file(s), 334 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1061d 0 14 ↑0.0/day
Possible Squatted Stub
tron pypi 0.1 Knox26 knoxgaming7558@gmail.com gmail.com
Package purpose: A library
Claimed homepage: https://pypi.org/project/bad-tron/
Matched naming pattern: python-tron-bad
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1061
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 401 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'bad-tron' matches AI hallucination template [python] + [tron] + [bad].
  • HIGHClaims critical enterprise brand identity ('TRON').
  • HIGHPublisher email 'knoxgaming7558@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1050 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (14 LOC, 1 file(s), 401 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1061d 29 14 ↑0.0/day
Possible Squatted Stub
tron pypi 0.1 Knox26 knoxgaming7558@gmail.com gmail.com
Package purpose: A library
Claimed homepage: https://pypi.org/project/abandoned-tron/
Matched naming pattern: python-tron-abandoned
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1061
Registry downloads: 29/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 407 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'abandoned-tron' matches AI hallucination template [python] + [tron] + [abandoned].
  • HIGHClaims critical enterprise brand identity ('TRON').
  • HIGHPublisher email 'knoxgaming7558@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1049 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (14 LOC, 1 file(s), 407 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1065d 15 3 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.1.202402031501 Lin calvin calvinchaochao@outlook.com outlook.com
Package purpose: Langchain integration providing zhipuai utility for Python
Claimed homepage: https://pypi.org/project/zhipuai-langchain/
Matched naming pattern: python-langchain-zhipuai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1065
Registry downloads: 15/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 3 lines, 4.5 kB across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'zhipuai-langchain' matches AI hallucination template [python] + [langchain] + [zhipuai].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'calvinchaochao@outlook.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1057 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (3 LOC, 1 file(s), 4491 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1111d 11 8 ↑0.0/day
Possible Squatted Stub
aws pypi 0.0.1 — —
Package purpose: apache-beam-with-aws
Claimed homepage: https://pypi.org/project/apache-beam-with-aws/
Matched naming pattern: apache-aws-with
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1111
Registry downloads: 11/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 8 lines, 269 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'apache-beam-with-aws' matches AI hallucination template [apache] + [aws] + [with].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1103 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 269 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1114d 8 2 ↑0.0/day
Possible Squatted Stub
qdrant pypi 0.0.1 — wherejoystarts@gmail.com gmail.com
Package purpose: Add your description here
Claimed homepage: https://pypi.org/project/qdrant-utils/
Matched naming pattern: python-qdrant-utils
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1114
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 51 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'qdrant-utils' matches AI hallucination template [python] + [qdrant] + [utils].
  • HIGHClaims critical enterprise brand identity ('QDRANT').
  • HIGHPublisher email 'wherejoystarts@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1106 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 51 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1123d 11 17 ↑0.0/day
Possible Squatted Stub
supabase pypi 0.5 Matt Majestic —
Package purpose: # Streamlit Supabase App 🚀 Welcome to the Streamlit Supabase app! This app shows some basic usage of a `Supabase` backend within Streamlit deployed on `Streamlit Cloud`. ## Features - `User Login` authentication using Supabase - `User signup` using Supabase - `File upload` to a Supabase storage bu
Claimed homepage: https://pypi.org/project/streamlit-supabase/
Matched naming pattern: python-supabase-streamlit
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1123
Registry downloads: 11/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 17 lines, 564 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'streamlit-supabase' matches AI hallucination template [python] + [supabase] + [streamlit].
  • HIGHClaims critical enterprise brand identity ('SUPABASE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1112 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (17 LOC, 1 file(s), 564 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1125d 14 0 ↑0.0/day
Possible Squatted Stub
openai pypi 0.0.1 — —
Package purpose: Openai integration providing stream utility for Python
Claimed homepage: https://pypi.org/project/openai-stream/
Matched naming pattern: python-openai-stream
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1125
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'openai-stream' matches AI hallucination template [python] + [openai] + [stream].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1117 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1125d 35 0 ↑0.0/day
Possible Squatted Stub
openai pypi 0.0.1 — —
Package purpose: Openai integration providing core utility for Python
Claimed homepage: https://pypi.org/project/openai-core/
Matched naming pattern: python-openai-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1125
Registry downloads: 35/month, 15/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'openai-core' matches AI hallucination template [python] + [openai] + [core].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1117 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1134d 42 9 ↑0.0/day
Possible Squatted Stub
openai pypi 0.1.4 X-I-A admin@x-i-a.com x-i-a.com
Package purpose: Introduction
Claimed homepage: https://develop.x-i-a.com/docs/xia-actor-openai/0.1.4/index.html
Matched naming pattern: xia-openai-openai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1134
Registry downloads: 42/month, 18/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 9 lines, 341 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'xia-actor-openai' matches AI hallucination template [xia] + [openai] + [openai].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'admin@x-i-a.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1125 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (9 LOC, 1 file(s), 341 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1141d 32 5 ↑0.0/day
Possible Squatted Stub
gcp pypi 0.1.5 X-I-A admin@x-i-a.com x-i-a.com
Package purpose: Introduction
Claimed homepage: https://develop.x-i-a.com/docs/xia-logger-gcp/0.1.5/index.html
Matched naming pattern: xia-gcp-gcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1141
Registry downloads: 32/month, 13/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 97 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'xia-logger-gcp' matches AI hallucination template [xia] + [gcp] + [gcp].
  • HIGHClaims critical enterprise brand identity ('GCP').
  • HIGHPublisher email 'admin@x-i-a.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1134 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 97 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1142d 11 9 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.0.0rc0 — —
Package purpose: Use langchain-extras
Claimed homepage: https://pypi.org/project/langchain-extra/
Matched naming pattern: python-langchain-extra
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1142
Registry downloads: 11/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 9 lines, 228 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-extra' matches AI hallucination template [python] + [langchain] + [extra].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1134 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (9 LOC, 3 file(s), 228 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1142d 47 8 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.0.0rc0 — —
Package purpose: Langchain integration providing extras utility for Python
Claimed homepage: https://pypi.org/project/langchain-extras/
Matched naming pattern: python-langchain-extras
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1142
Registry downloads: 47/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 8 lines, 190 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-extras' matches AI hallucination template [python] + [langchain] + [extras].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1134 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (8 LOC, 3 file(s), 190 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1157d 3 0 ↑0.0/day
Possible Squatted Stub
copilot pypi 0.0.1 — zeqi.lin@outlook.com outlook.com
Package purpose: db-copilot
Claimed homepage: https://pypi.org/project/db-copilot/
Matched naming pattern: python-copilot-db
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1157
Registry downloads: 3/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'db-copilot' matches AI hallucination template [python] + [copilot] + [db].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • HIGHPublisher email 'zeqi.lin@outlook.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1149 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1175d 0 10 ↑0.0/day
Possible Squatted Stub
claude pypi 0.0.2 — —
Package purpose: Claude integration providing ai utility for Python
Claimed homepage: https://github.com/boyueluzhipeng/claude_ai
Matched naming pattern: python-claude-ai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1175
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 236 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'claude-ai' matches AI hallucination template [python] + [claude] + [ai].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1163 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 1 file(s), 236 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1183d 5 2 ↑0.0/day
Possible Squatted Stub
auth0 pypi 0.0.1 — —
Package purpose: Auth0 integration providing vista utility for Streamlit
Claimed homepage: https://pypi.org/project/streamlit-auth0-vista-component/
Matched naming pattern: streamlit-auth0-vista
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1183
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 153 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'streamlit-auth0-vista-component' matches AI hallucination template [streamlit] + [auth0] + [vista].
  • HIGHClaims critical enterprise brand identity ('AUTH0').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1172 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 153 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1204d 3 13 ↑0.0/day
Very Risky
ethers npm 1.0.3 — — 🪝 📡
Package purpose: Ethers integration providing mempool utility for Node
Matched naming pattern: node-ethers-mempool
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1204
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 3/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 13 lines, 367 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'ethers-mempool' matches AI hallucination template [node] + [ethers] + [mempool].
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1178 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/index.js:6
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/index.js:6
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/index.js:6
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/index.js:6
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/index.js:4

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 1224d 11 5 ↑0.0/day
Possible Squatted Stub
copilot pypi 0.1.0 Vitaliy Kucheryaviy ppr.vitaly@gmail.com gmail.com
Package purpose: Django copilot
Claimed homepage: https://github.com/vitalik/django-copilot
Matched naming pattern: python-copilot-django
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1224
Registry downloads: 11/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 70 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'django-copilot' matches AI hallucination template [python] + [copilot] + [django].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • HIGHPublisher email 'ppr.vitaly@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1217 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 70 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1241d 1,692 115 ↑1.4/day
Very Risky
@trycourier/cli npm 5.7.0 — — 🪝 🌐
Package purpose: Courier CLI – manage notifications from the command line
Claimed homepage: https://github.com/trycourier/courier-cli
Matched naming pattern: npm-@trycourier/cli-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1241
Registry downloads: 1692/month, 423/week (ACTIVE_COMMUNITY_USE)
Codebase size: 115 lines, 4.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • INFOEstablished pre-AI legacy package registered 1230 days ago (predates modern AI hallucination waves).
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/courier.js:6 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/courier.js:12 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:5
  • CRITICALINSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets
  • INFOActive community usage with 1,692 monthly downloads.
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/courier.js:6 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/courier.js:12 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:5
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 1285d 1,064 3,215 ↑0.8/day
Very Risky
houdini npm latest — — 🪝 🌐
Package purpose: The React plugin for houdini
Claimed homepage: https://github.com/HoudiniGraphql/houdini
Matched naming pattern: node-houdini-react
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1285
Registry downloads: 1064/month, 266/week (ACTIVE_COMMUNITY_USE)
Codebase size: 3215 lines, 119.7 kB across 44 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1273 days ago (predates modern AI hallucination waves).
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node postInstall.js'
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/vite/index.js:276 (+2 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/postInstall.js:5
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postInstall.js:97
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postInstall.js:4
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node postInstall.js'
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/vite/index.js:276 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/postInstall.js:5
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postInstall.js:97
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postInstall.js:4
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/runtime/hooks/useQueryHandle.ts:167
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/postInstall.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 1314d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: Phantom integration for hub. [Homepage](https://phantom.com/) | [Docs](https://docs.phantom.com/)
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • CREDENTIAL_PATH_HARVESTING: 'Crypto Wallet Extension Storage' found in package/dist/mod.js:1 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/mod.js:1 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/mod.js:1 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 1335d 7 5 ↑0.0/day
Possible Squatted Stub
solana pypi 0.1.0 — —
Package purpose: Solana integration providing helpers utility for Vybe
Claimed homepage: https://pypi.org/project/vybe-solana-helpers/
Matched naming pattern: vybe-solana-helpers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1335
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 265 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'vybe-solana-helpers' matches AI hallucination template [vybe] + [solana] + [helpers].
  • HIGHClaims critical enterprise brand identity ('SOLANA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1324 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 265 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1368d 17 23 ↑0.0/day
Possible Squatted Stub
binance pypi 0.0.5 Vachagan Grigoryan vachagan.grigoryan@outlook.com outlook.com
Package purpose: Binance decoder
Claimed homepage: https://github.com/VachaganGrigoryan/binance-decoder
Matched naming pattern: python-binance-decoder
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1368
Registry downloads: 17/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 23 lines, 797 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'binance-decoder' matches AI hallucination template [python] + [binance] + [decoder].
  • HIGHClaims critical enterprise brand identity ('BINANCE').
  • HIGHPublisher email 'vachagan.grigoryan@outlook.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1356 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (23 LOC, 1 file(s), 797 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1425d 14 146 ↑0.0/day
SUSPICIOUS
btc pypi 0.1.1 Juan S. Bokser juan.bokser@gmail.com gmail.com 🪝
Package purpose: Simple program that shows the BTC price taken from the Money on Chain API Rest
Claimed homepage: https://pypi.org/project/fancy-btc-price/
Matched naming pattern: fancy-btc-price
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1425
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 146 lines, 5.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'fancy-btc-price' matches AI hallucination template [fancy] + [btc] + [price].
  • HIGHClaims critical enterprise brand identity ('BTC').
  • HIGHPublisher email 'juan.bokser@gmail.com' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 1399 days ago (predates modern AI hallucination waves).
  • CRITICALINSTALL_TIME_EXECUTION: 'exec' executed at top-level in fancy_btc_price-0.1.1/setup.py:15
  • MEDIUMPackage executes code at install/import time, but no exfiltration destination, credential access, encoded payload, obfuscation, shell cradle, or persistence primitive corroborates a weaponized payload. Downgraded from MALICIOUS to SUSPICIOUS pending manual review.
Static code signals:
  • INSTALL_TIME_EXECUTION: 'exec' executed at top-level in fancy_btc_price-0.1.1/setup.py:15

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1431d 24 7 ↑0.0/day
Possible Squatted Stub
google pypi 0.0.0 — —
Package purpose: This is a dummy package.
Claimed homepage: https://pypi.org/project/kiwi-google-metadata-auth/
Matched naming pattern: kiwi-google-metadata
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1431
Registry downloads: 24/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 264 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'kiwi-google-metadata-auth' matches AI hallucination template [kiwi] + [google] + [metadata].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1420 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 264 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1444d 19,495 2,649 ↑13.5/day
Very Risky
houdini npm latest — — 🪝 🌐
Package purpose: Houdini integration providing svelte utility for Node
Matched naming pattern: node-houdini-svelte
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1444
Registry downloads: 19495/month, 4873/week (HIGH_COMMUNITY_ADOPTION)
Codebase size: 2649 lines, 94.3 kB across 37 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1432 days ago (predates modern AI hallucination waves).
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node postInstall.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/postInstall.js:5
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postInstall.js:97
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postInstall.js:4
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/postInstall.js:20
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node postInstall.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/postInstall.js:5
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postInstall.js:97
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/postInstall.js:4
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/postInstall.js:20
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/runtime/stores/pagination/fragment.ts:384 (+2 more occurrence(s) elsewhere)
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/postInstall.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 1478d 5 15 ↑0.0/day
Possible Squatted Stub
google pypi 0.1.2 @KM8Oz (kmoz000) kimo@oldi.dev oldi.dev
Package purpose: Rambler.ru Google Activator
Claimed homepage: https://github.com/KM8Oz/rambler-google-activator.git
Matched naming pattern: rambler-google-activator
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1478
Registry downloads: 5/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 906 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'rambler-google-activator' matches AI hallucination template [rambler] + [google] + [activator].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'kimo@oldi.dev' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1467 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 906 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1479d 79,427,760 402 ↑53703.7/day
Very Risky
workerd npm 1.20260921.1 — — 🪝 🌐
Package purpose: 👷 workerd, Cloudflare's JavaScript/Wasm Runtime
Claimed homepage: https://github.com/cloudflare/workerd#readme
Matched naming pattern: npm-workerd-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1479
Registry downloads: 79427760/month, 19856940/week (HIGH_COMMUNITY_ADOPTION)
Codebase size: 402 lines, 15.7 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • INFOPackage lineage verified as trusted vendor 'cloudflare' via repo:github.com/cloudflare.
  • INFOEstablished pre-AI legacy package registered 1466 days ago (predates modern AI hallucination waves).
  • HIGHLIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/install.js:59
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:66
  • HIGHSOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:58
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:113
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/install.js:59
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:66
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/install.js:58
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/install.js:113
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:107
  • INSTALL_TIME_NETWORK_SOCKET: 'postinstall' script runs package/install.js, which makes network calls and executes/decodes/reads secrets

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 1500d 14 311 ↑0.0/day
SUSPICIOUS
test pypi 1.0.7 Codelock — 🪝
Package purpose: A cli for codelock development server
Claimed homepage: https://pypi.org/project/Codelock-CLI-test/
Matched naming pattern: codelock-test-test
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1500
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 14/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 311 lines, 16.8 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • INFOEstablished pre-AI legacy package registered 1476 days ago (predates modern AI hallucination waves).
  • CRITICALINSTALL_TIME_CMDCLASS_OVERRIDE: 'PostInstallCommand.run()' executes 'os.system' during installation in Codelock-CLI-test-1.0.7/setup.py:46
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in Codelock-CLI-test-1.0.7/setup.py:24
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in Codelock-CLI-test-1.0.7/setup.py:17
  • HIGHINSTALL_TIME_EXECUTION: 'Python setup.py Custom Install Hook' found in Codelock-CLI-test-1.0.7/setup.py:10
  • HIGHSUPPLY_CHAIN_EXECUTION_HOOK: 'PyPI Custom Install Class Override' found in Codelock-CLI-test-1.0.7/setup.py:39
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in Codelock-CLI-test-1.0.7/src/codelock/cdcli.py:23
  • MEDIUMPackage executes code at install/import time, but no exfiltration destination, credential access, encoded payload, obfuscation, shell cradle, or persistence primitive corroborates a weaponized payload. Downgraded from MALICIOUS to SUSPICIOUS pending manual review.
Static code signals:
  • INSTALL_TIME_CMDCLASS_OVERRIDE: 'PostInstallCommand.run()' executes 'os.system' during installation in Codelock-CLI-test-1.0.7/setup.py:46
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in Codelock-CLI-test-1.0.7/setup.py:24
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in Codelock-CLI-test-1.0.7/setup.py:17
  • INSTALL_TIME_EXECUTION: 'Python setup.py Custom Install Hook' found in Codelock-CLI-test-1.0.7/setup.py:10
  • SUPPLY_CHAIN_EXECUTION_HOOK: 'PyPI Custom Install Class Override' found in Codelock-CLI-test-1.0.7/setup.py:39
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in Codelock-CLI-test-1.0.7/src/codelock/cdcli.py:23

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1514d 8 6 ↑0.0/day
Possible Squatted Stub
aws pypi 0.0.1 — —
Package purpose: Aws integration providing adfs utility for Skyscanner
Claimed homepage: https://pypi.org/project/skyscanner-aws-adfs-admin/
Matched naming pattern: skyscanner-aws-adfs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1514
Registry downloads: 8/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 6 lines, 141 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'skyscanner-aws-adfs-admin' matches AI hallucination template [skyscanner] + [aws] + [adfs].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1507 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (6 LOC, 2 file(s), 141 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1514d 13 23 ↑0.0/day
Possible Squatted Stub
aws pypi 0.0.8 — —
Package purpose: # awssso Simple adaptation (datetime parsing) of: https://www.matscloud.com/blog/2020/06/25/how-to-use-aws-cdk-with-aws-sso-profiles/ You will need: AWS CLI 2+ BOTO3 ## How to use ``` bash awssso {aws-config-profile} ``` ``` bash awssso {aws-config-profile} {custom-cert-profile-name} ```
Claimed homepage: https://github.com/ebanalyse/awssso
Matched naming pattern: eb-aws-sso
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1514
Registry downloads: 13/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 23 lines, 624 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'eb-aws-sso' matches AI hallucination template [eb] + [aws] + [sso].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1507 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (23 LOC, 1 file(s), 624 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1517d 7 21 ↑0.0/day
Possible Squatted Stub
copilot pypi 0.1.0 Eduardo Guadanhim eduardo.guadanhim@synchro.com.br synchro.com.br
Package purpose: Copilot integration providing infra utility for Python
Claimed homepage: https://pypi.org/project/infra-copilot/
Matched naming pattern: python-copilot-infra
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1517
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 547 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'infra-copilot' matches AI hallucination template [python] + [copilot] + [infra].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • HIGHPublisher email 'eduardo.guadanhim@synchro.com.br' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1509 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 2 file(s), 547 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1537d 7 12 ↑0.0/day
Possible Squatted Stub
azure pypi 0.0.0 rdbende rdbende@gmail.com gmail.com
Package purpose: Azure integration providing ttk utility for Python
Claimed homepage: https://pypi.org/project/azure-ttk/
Matched naming pattern: python-azure-ttk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1537
Registry downloads: 7/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 12 lines, 269 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'azure-ttk' matches AI hallucination template [python] + [azure] + [ttk].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'rdbende@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1529 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (12 LOC, 1 file(s), 269 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1584d 48 59,930 ↑0.0/day
Very Risky
web3 npm 1.3.0 Fadel Sobh fsobh15@icloud.com fadel sobh fsobh15@icloud.com icloud.com 🪝 📡
Package purpose: A react package with prebuilt components to connect web3 wallets to your website. The state of the connected wallet remains through out navigation
Claimed homepage: https://github.com/fsobh/web3-wallets#readme
Matched naming pattern: web3-web3-react
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1584
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 48/month, 12/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 59930 lines, 2.5 MB across 2 files (LARGE_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • INFOEstablished pre-AI legacy package registered 1583 days ago (predates modern AI hallucination waves).
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/index.js:3507 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:7645 (+1 more occurrence(s) elsewhere)
  • INFOSubstantial functional codebase (59930 LOC across 2 file(s)).
  • CRITICALCRITICAL: Weaponized payload detected on package affiliated with trusted vendor 'web3'. High probability of vendor account takeover, compromised credentials, or malicious release.
Static code signals:
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/index.js:3507 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:7645 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 1649d 4 7 ↑0.0/day
Possible Squatted Stub
web3 pypi 1.0 — —
Package purpose: Web3 integration providing web3 utility for Smart
Claimed homepage: https://pypi.org/project/smart-django-web3-auth/
Matched naming pattern: smart-web3-web3
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1649
Registry downloads: 4/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 192 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'smart-django-web3-auth' matches AI hallucination template [smart] + [web3] + [web3].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1638 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 192 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1655d 5 2 ↑0.0/day
Possible Squatted Stub
aws pypi 0.0.1 — —
Package purpose: Aws integration providing aws utility for Channel
Claimed homepage: https://pypi.org/project/channel-python-aws/
Matched naming pattern: channel-aws-aws
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1655
Registry downloads: 5/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 140 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'channel-python-aws' matches AI hallucination template [channel] + [aws] + [aws].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1648 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 140 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1675d 13 22 ↑0.0/day
Possible Squatted Stub
opensea pypi 0.0.2 RA busybus@null.net null.net
Package purpose: Python SDK for OpenSea.
Claimed homepage: https://github.com/numpde/opensea_py
Matched naming pattern: python-opensea-py
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1675
Registry downloads: 13/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 22 lines, 929 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'opensea-py' matches AI hallucination template [python] + [opensea] + [py].
  • HIGHClaims critical enterprise brand identity ('OPENSEA').
  • HIGHPublisher email 'busybus@null.net' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1664 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (22 LOC, 1 file(s), 929 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1675d 7 22 ↑0.0/day
Possible Squatted Stub
opensea pypi 0.0.2 RA busybus@null.net null.net
Package purpose: Python SDK for OpenSea.
Claimed homepage: https://github.com/numpde/opensea_sdk
Matched naming pattern: python-opensea-sdk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1675
Registry downloads: 7/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 22 lines, 931 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'opensea-sdk' matches AI hallucination template [python] + [opensea] + [sdk].
  • HIGHClaims critical enterprise brand identity ('OPENSEA').
  • HIGHPublisher email 'busybus@null.net' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1664 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (22 LOC, 1 file(s), 931 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1699d 8 12 ↑0.0/day
Possible Squatted Stub
workspace npm 1.0.0 — —
Package purpose: Workspace integration providing yarn-workspace-publish-test utility for Node
Claimed homepage: https://github.com/jclab-joseph/temp-yarn-workspace-publish#readme
Matched naming pattern: node-workspace-yarn-workspace-publish-test
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1699
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 12 lines, 512 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name '@jclab/yarn-workspace-publish-test' matches AI hallucination template [node] + [workspace] + [yarn-workspace-publish-test].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1673 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (12 LOC, 1 file(s), 512 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 1702d 81 10 ↑0.0/day
Possible Squatted Stub
aws pypi 0.0.1 pedro.aguiar pedro.aguiar
Package purpose: --
Claimed homepage: https://pypi.org/project/ifood-aws-login/
Matched naming pattern: ifood-aws-login
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1702
Registry downloads: 81/month, 33/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 322 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ifood-aws-login' matches AI hallucination template [ifood] + [aws] + [login].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1694 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 1 file(s), 322 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1800d 358 74,452 ↑0.2/day
Very Risky
base npm 0.0.6-dev.29 — — 🪝 📡
Package purpose: A Component Library for Vue 3
Matched naming pattern: base-base-component
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1800
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 358/month, 89/week (MODERATE_USAGE)
Codebase size: 74452 lines, 4.6 MB across 1255 files (LARGE_CODEBASE)
Automated signals flagged:
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1793 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHEXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/index.full.min.js:27 (+4 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/index.full.min.js:150 (+2 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index.full.min.js:90 (+4 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.full.min.js:90 (+5 more occurrence(s) elsewhere)
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • EXFILTRATION_DESTINATION_DETECTED: 'Raw Public IP Endpoint' found in package/dist/index.full.min.js:27 (+4 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/index.full.min.js:150 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index.full.min.js:90 (+4 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.full.min.js:90 (+5 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.full.min.js:58 (+4 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
75 1873d 17 15 ↑0.0/day
Possible Squatted Stub
eth npm 0.1.0 — —
Package purpose: Eth integration providing eth utility for Primo
Matched naming pattern: primo-eth-eth
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1873
Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'primo-explore-eth-openurl-interlibrary' matches AI hallucination template [primo] + [eth] + [eth].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1847 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 525 bytes).
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
« Prev Next »
LINK COPIED TO CLIPBOARD