Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 75 | 2257d | 43 | 72,831 | ↑0.0/day |
Very Risky
|
azure | npm | 0.1.2 | Vivid Theory | — | 🪝 📡 | |
|
Package purpose: Azure file viewer
Matched naming pattern: azure-azure-viewer
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2257
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 43/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 72831 lines, 2.7 MB across 4 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 2421d | 28 | 166 | ↑0.0/day |
Very Risky
|
amazon | npm | 1.0.2 | — | — | 🪝 📡 | |
|
Package purpose: Amazon integration providing API client & connector for Node
Matched naming pattern: node-amazon-api
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2421
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 28/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 166 lines, 6.0 kB across 1 file (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 2486d | 42 | 18,628 | ↑0.0/day |
Very Risky
|
opentelemetry | npm | 0.9.0 | OpenTelemetry Authors | — | 🪝 🗄️ | |
|
Package purpose: OpenTelemetry is a distributed tracing and stats collection framework.
Claimed homepage: https://github.com/open-telemetry/opentelemetry-js#readme
Matched naming pattern: node-opentelemetry-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2486
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 42/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 18628 lines, 720.5 kB across 485 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 2573d | 788 | 33,508 | ↑0.3/day |
Very Risky
|
@itentialopensource/adapter | npm | 1.0.12 | Itential | — | 🪝 📡 | |
|
Package purpose: This adapter integrates with system: sample.
Claimed homepage: https://gitlab.com/itentialopensource/adapters/adapter-tufin_securetrack#readme
Matched naming pattern: npm-@itentialopensource/adapter-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2573
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 788/month, 197/week (MODERATE_USAGE)
Codebase size: 33508 lines, 1.7 MB across 21 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 2708d | 2,671 | 194 | ↑1.0/day |
Very Risky
|
azure | npm | 4.0.1 | Microsoft Corporation | — | 🪝 🌐 | |
|
Package purpose: This package supports the CI/CD of Stream Analytics Visual Studio and Visual Studio Code projects.
Matched naming pattern: azure-azure-cicd
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2708
Registry downloads: 2671/month, 667/week (ACTIVE_COMMUNITY_USE)
Codebase size: 194 lines, 8.9 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 2956d | 33 | 178 | ↑0.0/day |
Very Risky
|
kraken | npm | 1.6.8 | Rodrigo Sanabria | — | 🪝 📡 | |
|
Package purpose: Cliente para Kraken
Matched naming pattern: bo-kraken-client
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2956
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 33/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 178 lines, 6.4 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 3100d | 95,597 | 6,277 | ↑30.8/day |
Very Risky
|
@tarojs/cli | npm | 4.2.1 | O2Team | — | 🪝 🌐 | |
|
Package purpose: cli tool for taro
Claimed homepage: https://github.com/NervJS/taro#readme
Matched naming pattern: npm-@tarojs/cli-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3100
Registry downloads: 95597/month, 23899/week (HIGH_COMMUNITY_ADOPTION)
Codebase size: 6277 lines, 257.7 kB across 111 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 3151d | 48 | 3,550 | ↑0.0/day |
Very Risky
|
brand | npm | 1.0.4 | epicallan.al@gmail.com epicallan.al@gmail.com | gmail.com | 🪝 📡 | |
|
Package purpose: for datahub related libs & tools
Claimed homepage: https://github.com/devinit/di-pdfs#readme
Matched naming pattern: node-brand-dh-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3151
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 48/month, 12/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 3550 lines, 112.3 kB across 56 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 3441d | 432,835 | 165 | ↑125.8/day |
Very Risky
|
azure | npm | 4.15.0 | Microsoft | — | 🪝 🌐 | |
|
Package purpose: Azure Functions Core Tools
Claimed homepage: https://github.com/Azure/azure-functions-core-tools#readme
Matched naming pattern: npm-azure-general
Official vendor account: Yes
Days since publish: 3441
Registry downloads: 432835/month, 108208/week (HIGH_COMMUNITY_ADOPTION)
Codebase size: 165 lines, 6.7 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4106d | 27 | 15,220 | ↑0.0/day |
Very Risky
|
together | npm | 0.0.2 | Xuanwo | — | 🪝 📡 | |
|
Package purpose: Uses socket.io to do virtual machine usage from browser
Claimed homepage: https://github.com/together-education/together-core-computer.git
Matched naming pattern: together-together-computer
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 4106
Code-only verdict: SUSPICIOUS (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 27/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15220 lines, 466.3 kB across 14 files (LARGE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4596d | 18 | 190 | ↑0.0/day |
Very Risky
|
ripple | npm | 0.0.2 | — | — | 🪝 📡 | |
|
Package purpose: In order to interact with a Ripple Gateway json/http server a http library interface must be used. This module provides an implementation in node.js of data model adapter that passes the spec of Ripple Gateway Data.
Matched naming pattern: ripple-ripple-data
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 4596
Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 190 lines, 6.2 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4696d | 0 | 15 | ↑0.0/day |
Possible Squatted Stub
|
npm | 0.1.0 | — | — | |||
|
Package purpose: Google Analytics loader
Matched naming pattern: requirejs-google-analytics
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 4696
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 525 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4726d | — | — | — |
Unverified Signal
|
— | npm | latest | Sam Goodwin | — | 🪝 🌐 | |
|
Package purpose: Infrastructure as Effects for TypeScript.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 75 | 4952d | 12,380,329 | 529 | ↑2500.1/day |
Very Risky
|
bun | npm | 1.4.2 | — | — | 🪝 🌐 📦 | |
|
Package purpose: Bun is a fast all-in-one JavaScript runtime.
Claimed homepage: https://bun.com
Matched naming pattern: npm-bun-general
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 4952
Registry downloads: 12380329/month, 3095082/week (HIGH_COMMUNITY_ADOPTION)
Codebase size: 529 lines, 16.6 kB across 1 file (MODERATE_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 24h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Shared scratchpad for coding agents. Local MCP client with end-to-end encryption for Claude Code, Codex, Cursor and any MCP client.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 25h | — | — | — |
Unverified Signal
|
— | pypi | 1.0.0 | — | — | 🪝 | |
|
Package purpose: MCP server for Maven and Gradle dependency intelligence
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 70 | 30h | — | — | — |
Very Risky
|
— | pypi | 0.1.0 | — | — | 🪝 | |
|
Package purpose: Generative inpaint transformation (LaMa) and the associated tool-model plugin for kcai data-sampling
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 70 | 34h | — | — | — |
SUSPICIOUS
|
— | pypi | 1.0.4 | ZenCleaner | — | 🪝 | |
|
Package purpose: ZenCleaner - type 'zencleaner' in your terminal to open a localhost web UI that actually cleans your PC.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 70 | 49h | — | — | — |
Very Risky
|
— | pypi | 0.0.1 | — | — | 🪝 | |
|
Package purpose: GuadalPlanner is a modular and extensible framework for the development, simulation, and real-world deployment of informative path planning algorithms for autonomous vehicles
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 70 | 50h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Командная строка Толково: одна команда на каждую операцию API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 50h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP-сервер Толково (stdio): инструмент на каждую операцию API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 61h | — | — | — |
Very Risky
|
— | pypi | 0.1.0 | Kamal Karteek U, Mishka Tiwari, Manjunath Patil, Mayeraa Singh | — | 🪝 | |
|
Package purpose: Python client and command line for mOSaic, the operating system for organizational AI: governed, auditable AI agents on your own machine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 70 | 70h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Parle mod for Command Code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Encrypt .env files for safe repository storage.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Encrypt .env files for safe repository storage.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Evergist | — | 🪝 | |
|
Package purpose: Share end-to-end encrypted, self-destructing text from the terminal or any MCP client. Encryption happens locally; evergist.com only stores ciphertext.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 5d | — | — | — |
SUSPICIOUS
|
— | pypi | 1.0.2 | minecraftbefile-maker | — | 🪝 | |
|
Package purpose: Local AI agent with headless browser, sandboxed shell, and plug-and-play skills
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 70 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Windows UI Automation agent for dsh: list/snapshot/find/click/set_text/get_text/scroll/drag/swipe/screenshot + window state (topmost/minimize/maximize/restore/close). Permission-tiered (read-only / workspace-write / danger-full-access) with approval-based
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 5d | — | — | — |
Very Risky
|
— | pypi | 0.1.0 | — | — | 🪝 | |
|
Package purpose: Agent management for your terminal: agents on your own Claude Code, Codex (ChatGPT), Antigravity (Gemini), OpenCode, Hermes or a local model, with no API keys.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 70 | 5d | — | — | — |
🐛 Potential Cross-Ecosystem Worm
Unverified Signal
|
— | pypi | 0.3.0 | CLI-Agents | — | 🪝 🐛 | |
|
Package purpose: pip launcher for the WebPilot browser agent (npm package: @capagents/webpilot)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 70 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Hangar MCP server (stdio) — lets an AI agent create a Hangar project, publish a static site and activate it in preview
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 1.1.0rc2 | Aliensense | — | 🪝 | |
|
Package purpose: NXS sensor VM compiler, suite manager, and command-line tool
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 70 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP Apps display for DeepSeek Harness: renders MCP App UI resources (ui://) inside tool call rows via a separate-origin sandbox.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Pangenome graph layout and drawing with no host: GFA in, the Bandage force-directed engine and reference-anchored layouts, a Canvas2D renderer, hit testing and labels out
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: PrimeKdu is available at npm, if you have an existing application run the following commands to download PrimeKdu and PrimeIcons to your project.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.3 | — | — | 🪝 | |
|
Package purpose: The Verdog command-line client.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 70 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local code-agent harness registry and glue: scoped homes, /<harness> login and sessions commands, delegation provider contracts, and the roster-driven browser settings section
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Zero-dependency authenticated encryption, purpose binding, blind indexes, sealed tokens, key rotation and password hashing for Node.js.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Universal Markdown memory vault shared across AI coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 8d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Nikita | — | 🪝 | |
|
Package purpose: Core utilities and shared setup
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 8d | — | — | — |
Very Risky
|
— | pypi | 1.0.1 | — | — | 🪝 | |
|
Package purpose: ffram - 102 High-Performance Media Operations across 18 Categories
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 70 | 9d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.2 | tokunseba contributors | — | 🪝 | |
|
Package purpose: A local proxy for every AI coding tool on your machine: it shrinks each request without losing a byte, and routes each turn to the model that turn actually needs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 70 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: [English](README.md) | **Tiếng Việt**
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: HiWork 助理插件：把企业微信智能机器人接进桌面端，用手机远程指挥本机 HiWork 干活，结果回到原聊天。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 10d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | Praxis Guardrails | — | 🪝 | |
|
Package purpose: The guardrail for agentic AI. Praxis sits between the AI tools you use (Claude, Codex, Cursor, any MCP client) and everything they act on — your files, the browser, and APIs — deciding allow / block / ask before each action. This free, MIT-licensed Lite edition is the on-device core: it guards files
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 70 | 10d | — | — | — |
Very Risky
|
— | pypi | 0.6.3 | NastyaNoTamashii | — | 🪝 | |
|
Package purpose: Chromite is a framework for text and ASCI formatting in Python.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 70 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Polyflow for Temporal: a worker plugin that records, guards, governs and versions what agents on Temporal are allowed to do. Business Source License 1.1 (non-production use free; production use is a commercial licence); the verifier is Apache-2.0 in @cogn
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TENSOR GRID — сервер компании: учётные записи сотрудников, общая база чатов, модели через сервер с наборами и учётом расходов
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Bridge Feishu/Lark to any ACP-compatible AI agent (Claude Code, Kiro, Gemini, Amazon Q, ...)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 70 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Run Node/TS scripts with ephemeral dependencies (uv-style --with) via npm cache + symlink
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||