🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
70 11d — — —
Unverified Signal
— npm latest — — 🪝
Package purpose: Run Node/TS scripts with ephemeral dependencies (uv-style --with) via npm cache + symlink
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/ntsx.js:23526
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/ntsx.js:23250
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/ntsx.js:4648
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/ntsx.js:23062

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
70 11d — — —
Unverified Signal
— npm latest — — 🪝
Package purpose: HarmonyOS application development command line tool
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.mjs'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/resources/arkts-check.cjs:40 (+4 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/cli.js:4 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
70 12d — — —
Unverified Signal
— pypi 0.3.2 waqiju — 🪝
Package purpose: Agent-friendly remote execution over SSH: scripts via stdin pipes (no quoting/encoding hell), credentials stay on disk and out of agent context. python/powershell/bash, plus a unified remote Python 3.12 venv provisioner.
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in rrun_cli-0.3.2/src/rrun/config_cmd.py:276
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in rrun_cli-0.3.2/src/rrun/config_cmd.py:273
  • SYSTEM_PERSISTENCE_TAMPERING: 'Cron Job Installation / Tampering' found in rrun_cli-0.3.2/src/rrun/config_cmd.py:35
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in rrun_cli-0.3.2/src/rrun/executor.py:216
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in rrun_cli-0.3.2/src/rrun/executor.py:40
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in rrun_cli-0.3.2/src/rrun/registry.py:109
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in rrun_cli-0.3.2/src/rrun/setup.py:78
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in rrun_cli-0.3.2/src/rrun/transfer.py:543

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 19d — — —
Very Risky
— pypi 1.9.0 — — 🪝
Package purpose: Smart SemVer Bumper driven by Code Diff
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in shift_this_version-1.9.0/run_tests.py:24
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in shift_this_version-1.9.0/shift_this_version/analyzer.py:254
  • MODULE_TOPLEVEL_EXECUTION: 'os.system' executed at module scope (runs on import) in shift_this_version-1.9.0/shift_this_version/cli.py:41
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in shift_this_version-1.9.0/shift_this_version/cli.py:41
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in shift_this_version-1.9.0/shift_this_version/git_ops.py:26
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in shift_this_version-1.9.0/shift_this_version/git_ops.py:124
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in shift_this_version-1.9.0/shift_this_version/updater.py:324

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 19d — — —
Unverified Signal
— pypi 0.14.6 — — 🪝
Package purpose: Claude Code 토큰 사용량으로 성장하는 턴제 RPG
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in token_rpg-0.14.6/token_rpg.py:2822
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in token_rpg-0.14.6/token_rpg.py:1598
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in token_rpg-0.14.6/token_rpg.py:1304
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in token_rpg-0.14.6/token_rpg.py:18
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in token_rpg-0.14.6/token_rpg.py:3199
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in token_rpg-0.14.6/token_rpg_tray.py:111
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in token_rpg-0.14.6/token_rpg_tray.py:183
  • SYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in token_rpg-0.14.6/token_rpg_tray.py:32

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 20d — — —
Very Risky
— pypi 0.5.2 — — 🪝
Package purpose: # terminalCanvas **terminalCanvas** is a Python library intended for creating and displaying raster graphics on the terminal, capable of rendering 2D and 3D scenes. ![Low-poly terrain, made with built-in 3D rendering](https://raw.githubusercontent.com/RandomMaerks/terminalCanvas/main/images/readme
Static code signals:
  • MODULE_TOPLEVEL_EXECUTION: 'os.system' executed at module scope (runs on import) in terminalcanvas-0.5.2/terminalCanvas/tcanvas.py:26
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in terminalcanvas-0.5.2/terminalCanvas/tcanvas.py:26

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 21d — — —
Unverified Signal
— pypi 1.6.0 — — 🪝
Package purpose: Veille d'offres d'emploi et preparation de candidatures adaptees
Static code signals:
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in job2apply-1.6.0/src/job2apply/cli/veille.py:121
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in job2apply-1.6.0/src/job2apply/commun/config.py:42
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in job2apply-1.6.0/src/job2apply/espace/__init__.py:138
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in job2apply-1.6.0/src/job2apply/espace/__init__.py:132
  • SYSTEM_PERSISTENCE_TAMPERING: 'Shortcut Hijacking (.lnk Rewrite / Browser Extension Sideload)' found in job2apply-1.6.0/src/job2apply/espace/__init__.py:122
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in job2apply-1.6.0/src/job2apply/interface/generation.py:168
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in job2apply-1.6.0/src/job2apply/interface/generation.py:162

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 22d — — —
Unverified Signal
— pypi 0.1.15 — — 🪝
Package purpose: Cross-platform FastMCP server for authenticated remote Linux/macOS host administration
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in universal_host_manager_mcp-0.1.15/src/universal_host_manager_mcp/server.py:160
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in universal_host_manager_mcp-0.1.15/src/universal_host_manager_mcp/server.py:35
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in universal_host_manager_mcp-0.1.15/src/universal_host_manager_mcp/setup_wizard.py:172
  • SYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in universal_host_manager_mcp-0.1.15/src/universal_host_manager_mcp/setup_wizard.py:336
  • SYSTEM_PERSISTENCE_TAMPERING: 'Systemd / macOS LaunchAgent Persistence' found in universal_host_manager_mcp-0.1.15/src/universal_host_manager_mcp/setup_wizard.py:373

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 32d 144 60 ↑4.5/day
SUSPICIOUS
github pypi 1.0.0 Meanus Arcanus meanusarcanus@gmail.com gmail.com
Package purpose: GitHub Tech Stack, Dependency Analyzer & Developer Lead Intelligence SDK.
Claimed homepage: https://github.com/meanusarcanus/github-dev-intelligence-api
Matched naming pattern: github-github-intelligence
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 32
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 144/month, 6/week (MODERATE_USAGE)
Codebase size: 60 lines, 2.3 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('GITHUB').
  • HIGHPublisher email 'meanusarcanus@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (26 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 144 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 33d — — —
Unverified Signal
— npm latest — — 🪝
Package purpose: prototype -- a simple SVG demo built with Stencil and Tailwind
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'npx only-allow pnpm'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/esm/index-Cj6jItjK.js:2262 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/types/stencil-public-runtime.d.ts:354

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
70 33d 128 44 ↑3.9/day
SUSPICIOUS
llama pypi 0.2.0 HPE —
Package purpose: llama-index retriever for AlletraMP X10000
Claimed homepage: https://pypi.org/project/llama-index-retrievers-alletra-x10000-retriever/
Matched naming pattern: llama-llama-retrievers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 33
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 128/month, 4/week (MODERATE_USAGE)
Codebase size: 44 lines, 1.7 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (30 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 128 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 34d 158 128 ↑4.6/day
SUSPICIOUS
llama pypi 0.1.0 TruthBear —
Package purpose: LlamaIndex tools for Truth Bear GAUGE official-source signal data
Claimed homepage: https://pypi.org/project/llama-index-tools-truth-bear-gauge/
Matched naming pattern: llama-llama-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 34
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 158/month, 4/week (MODERATE_USAGE)
Codebase size: 128 lines, 5.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (30 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 158 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 51d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: DeepSeek Harness plugin: bridge Claude Code's .claude/ directories (project and ~/.claude: skills, commands, rules) into DSH native skill registry and message-stream rules injection.
Static code signals:
  • CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/src/hooks.js:200 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/scripts/gen-downloads-chart.mjs:11
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/zstd-compat.mjs:8

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
70 75d — — —
Unverified Signal
— npm latest Joseph Mearman — 🪝
Package purpose: A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.
Static code signals:
  • SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/dist/index.cjs:2136 (+1 more occurrence(s) elsewhere)
  • CREDENTIAL_PATH_HARVESTING: 'macOS Keychain Dump' found in package/dist/types/launcher/ports.d.ts:72 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
70 122d 42 17 ↑0.3/day
SUSPICIOUS
microsoft npm 0.2.0-rc.7 — — 🪝
Package purpose: Work Microsoft 365 mail the way fast email clients do: **threads first**, not raw message CRUD. Search and group by **conversation**, pull full **thread context**, **triage** whole conversations (archive, move, read state, flags, categories, delete), buil
Matched naming pattern: node-microsoft-superhuman-microsoft-365
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 122
Code-only verdict: Unverified Signal (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 42/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 17 lines, 737.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@slates-integrations/superhuman-microsoft-365' matches AI hallucination template [node] + [microsoft] + [superhuman-microsoft-365].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (121 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/sourcemap-register.cjs:1 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/index.js:15
  • HIGHSOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index.js:15
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/sourcemap-register.cjs:1 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/index.js:15
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index.js:15
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:1
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/dist/index.js:1

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
70 194d 0 148 ↑0.0/day
SUSPICIOUS
llama pypi 3.1.7 — hi@yar.ink yar.ink
Package purpose: LlamaIndex integration for HyperspaceDB - Hyperbolic Vector Database
Claimed homepage: https://pypi.org/project/llama-index-vector-stores-hyperspace/
Matched naming pattern: llama-llama-vector
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 194
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 148 lines, 6.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'hi@yar.ink' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (168 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 178 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 196d 12 0 ↑0.1/day
Possible Squatted Stub
openai pypi 0.9.1 — info@life2film.com life2film.com
Package purpose: Fastest OpenAI client — Rust core with Python bindings
Claimed homepage: https://pypi.org/project/openai-oxide-python/
Matched naming pattern: openai-openai-python
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 196
Registry downloads: 12/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 76 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'info@life2film.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 185 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 76 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 202d 0 0 ↑0.0/day
Possible Squatted Stub
openai pypi 0.1.0 — hello@brainai.dev brainai.dev
Package purpose: AgentFolio identity, trust & reputation tools for OpenAI Agents SDK
Claimed homepage: https://pypi.org/project/openai-agents-agentfolio/
Matched naming pattern: openai-openai-agentfolio
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 202
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 12 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'hello@brainai.dev' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 191 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 12 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 206d 0 0 ↑0.0/day
Possible Squatted Stub
gcp pypi 1.0.29 — —
Package purpose: GCP Pipeline Reference: Generic FDP Transformation — dbt models for ODP to FDP (JOIN + MAP patterns)
Claimed homepage: https://pypi.org/project/gcp-pipeline-ref-transform/
Matched naming pattern: gcp-gcp-ref
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 206
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 34 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('GCP').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 195 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 34 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 206d 25 0 ↑0.1/day
Possible Squatted Stub
gcp pypi 1.0.29 — —
Package purpose: GCP Pipeline Reference: Generic CDP Transformation — dbt models for FDP to CDP (JOIN pattern across all 3 FDP tables)
Claimed homepage: https://pypi.org/project/gcp-pipeline-ref-cdp/
Matched naming pattern: gcp-gcp-ref
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 206
Registry downloads: 25/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 32 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('GCP').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 195 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 32 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 211d 10 0 ↑0.0/day
Possible Squatted Stub
hf pypi 0.1.1 Xueyang Zhou, Yangming Xu, Guiyao Tie, Yongchao Chen, Guowen Zhang, Duanfeng Chu, Pan Zhou, Lichao Sun bliu@cs.utexas.edu cs.utexas.edu
Package purpose: LIBERO-Pro: Towards Robust and Fair Evaluation of Vision-Language-Action Models Beyond Memorization
Claimed homepage: https://pypi.org/project/hf-libero-pro/
Matched naming pattern: hf-hf-pro
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 211
Registry downloads: 10/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 6 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('HF').
  • HIGHPublisher email 'bliu@cs.utexas.edu' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 200 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 6 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 219d 21 39 ↑0.1/day
SUSPICIOUS
google pypi 0.0.2 etienne-hd hode.etienne@gmail.com gmail.com
Package purpose: Google Maps pb viewer
Claimed homepage: https://pypi.org/project/google_maps_pb_viewer/
Matched naming pattern: google-google-pb
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 219
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 21/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 39 lines, 1.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'hode.etienne@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 193 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 220d 17 22 ↑0.1/day
Possible Squatted Stub
azure pypi 0.1.1 anupamas01 anupamas01@example.com example.com
Package purpose: Microsoft Azure Virtual Enclaves Management Client Library for Python
Claimed homepage: https://github.com/anupamas01/azure-mgmt-virtualenclaves
Matched naming pattern: azure-azure-virtualenclaves
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 220
Registry downloads: 17/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 22 lines, 789 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'anupamas01@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 209 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (22 LOC, 2 file(s), 789 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 225d 0 83 ↑0.0/day
SUSPICIOUS
llama pypi 0.2.0 — you@example.com example.com
Package purpose: llama-index readers igpt_email integration
Claimed homepage: https://pypi.org/project/llama-index-readers-igpt-email/
Matched naming pattern: llama-llama-readers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 225
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 83 lines, 3.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 199 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 227d 11 140 ↑0.0/day
SUSPICIOUS
llama pypi 0.2.0 — rpatnaik2005@gmail.com gmail.com
Package purpose: llama-index readers LayoutIR integration
Claimed homepage: https://pypi.org/project/llama-index-readers-layoutir/
Matched naming pattern: llama-llama-readers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 227
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 140 lines, 6.9 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'rpatnaik2005@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 201 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 240d 0 39 ↑0.0/day
SUSPICIOUS
llama pypi 0.5.0 WilliamEspegren you@example.com example.com
Package purpose: llama-index tools seltz integration
Claimed homepage: https://pypi.org/project/llama-index-tools-seltz/
Matched naming pattern: llama-llama-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 240
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 39 lines, 1.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5+ versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 229 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 245d 14 722 ↑0.1/day
SUSPICIOUS
llama pypi 0.1.0 Built-Simple contact@built-simple.ai built-simple.ai
Package purpose: LlamaIndex readers for Built-Simple research APIs (PubMed, ArXiv, Wikipedia)
Claimed homepage: https://pypi.org/project/llama-index-readers-builtsimple/
Matched naming pattern: llama-llama-readers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 245
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 14/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 722 lines, 32.2 kB across 7 files (MODERATE_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'contact@built-simple.ai' is not affiliated with official vendor domain.
  • HIGHPackage claims legitimate high-profile upstream repository 'run-llama/llama_index' (llama-index) in metadata to artificially inflate trust / SourceRank.
  • MEDIUMPackage registered 219 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (722 LOC across 7 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 274d 16 129 ↑0.1/day
SUSPICIOUS
hf pypi 0.1.4 Yuvraj — 🪝
Package purpose: Production-grade HuggingFace inference benchmarking tool
Claimed homepage: https://pypi.org/project/hf-inference-benchmark/
Matched naming pattern: hf-hf-benchmark
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 274
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 129 lines, 5.7 kB across 7 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('HF').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 248 days ago within the 1-year AI tool proliferation window.
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in hf_inference_benchmark-0.1.4/hf_benchmark/runner.py:10
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in hf_inference_benchmark-0.1.4/hf_benchmark/runner.py:10

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 277d 84 2 ↑0.3/day
Possible Squatted Stub
azure pypi 0.1.0 — lokeshmure@live.com live.com
Package purpose: MCP server for Azure API integration
Claimed homepage: https://pypi.org/project/azure-mcp-server/
Matched naming pattern: azure-azure-server
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 277
Registry downloads: 84/month, 22/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 101 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'lokeshmure@live.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 265 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 101 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 298d 324 13 ↑1.1/day
SUSPICIOUS
cursor pypi 1.0.2 Jeremy Tuloup —
Package purpose: JupyterLab dark theme with Cursor vibes
Claimed homepage: https://pypi.org/project/jupyterlab-cursor-dark/
Matched naming pattern: jupyterlab-cursor-dark
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 298
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 324/month, 109/week (MODERATE_USAGE)
Codebase size: 13 lines, 806 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'jupyterlab-cursor-dark' matches AI hallucination template [jupyterlab] + [cursor] + [dark].
  • HIGHClaims critical enterprise brand identity ('CURSOR').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 287 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 324 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 309d 37 62 ↑0.1/day
SUSPICIOUS
llama pypi 0.2.3 andyts93 and1@live.it live.it
Package purpose: llama-index readers imap integration
Claimed homepage: https://pypi.org/project/llama-index-readers-imap/
Matched naming pattern: llama-llama-readers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 309
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 37/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 62 lines, 3.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'and1@live.it' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 301 days ago within the 1-year AI tool proliferation window.
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in llama_index_readers_imap-0.2.3/llama_index/readers/imap/base.py:54
Static code signals:
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in llama_index_readers_imap-0.2.3/llama_index/readers/imap/base.py:54

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 312d 183 122 ↑0.6/day
SUSPICIOUS
google pypi 0.1.1 — —
Package purpose: Integrate Cognee's memory system seamlessly with your Google ADK agent using easy-to-use tools.
Claimed homepage: https://pypi.org/project/cognee-integration-google-adk/
Matched naming pattern: cognee-google-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 312
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 183/month, 17/week (MODERATE_USAGE)
Codebase size: 122 lines, 5.1 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'cognee-integration-google-adk' matches AI hallucination template [cognee] + [google] + [google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 304 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 183 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 351d 53 5 ↑0.2/day
Possible Squatted Stub
cursor pypi 0.1.14 — support@mintmcp.com mintmcp.com
Package purpose: Secret scanning CLI for Cursor
Claimed homepage: https://pypi.org/project/cursor-secret-scan/
Matched naming pattern: cursor-cursor-scan
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 351
Registry downloads: 53/month, 34/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 122 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('CURSOR').
  • HIGHPublisher email 'support@mintmcp.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 340 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (5 LOC, 2 file(s), 122 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 352d 35 1 ↑0.1/day
Possible Squatted Stub
claude pypi 0.0.1 Dhruv Baldawa —
Package purpose: Hooks-only, stateless Claude Agent helpers.
Claimed homepage: https://pypi.org/project/claude-stateless-agent/
Matched naming pattern: claude-claude-agent
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 352
Registry downloads: 35/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 13 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 341 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 13 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 355d 100 74 ↑0.3/day
SUSPICIOUS
hf pypi 1.5.14 — tab@softoft.de softoft.de 🪝
Package purpose: Hugging Face local text classification plugin for Open Ticket AI - on-premise ML ticket categorization
Claimed homepage: https://pypi.org/project/otai-hf-local/
Matched naming pattern: otai-hf-local
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 355
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 100/month, 6/week (MODERATE_USAGE)
Codebase size: 74 lines, 3.4 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'otai-hf-local' matches AI hallucination template [otai] + [hf] + [local].
  • HIGHClaims critical enterprise brand identity ('HF').
  • HIGHPublisher email 'tab@softoft.de' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 349 days ago within the 1-year AI tool proliferation window.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in otai_hf_local-1.5.14/src/otai_hf_local/hf_classification_service.py:23
  • INFOModerate community usage with 100 monthly downloads.
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in otai_hf_local-1.5.14/src/otai_hf_local/hf_classification_service.py:23

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 374d 10 100 ↑0.0/day
SUSPICIOUS
ripple npm 0.0.2 — —
Package purpose: A high-performance, minimal state management library for [Ripple](https://ripple.run/) apps, inspired by Zustand and designed for fine-grained reactivity. This package provides two main APIs: `createTrackedStore` and `NamedTrackedStore`, enabling both sim
Matched naming pattern: ripple-ripple-store
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 374
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 100 lines, 3.1 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('RIPPLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 348 days ago within the 1-year AI tool proliferation window.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
70 378d 155 0 ↑0.4/day
Possible Squatted Stub
azure pypi 1.4.4.20260205 — noreply@example.invalid example.invalid
Package purpose: DuckDB extension package for duckdb/core-extensions/azure
Claimed homepage: https://pypi.org/project/duckdb-ext-azure/
Matched naming pattern: duckdb-azure-azure
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 378
Registry downloads: 155/month, 88/week (MODERATE_USAGE)
Codebase size: 0 lines, 0 Bytes across 5 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'duckdb-ext-azure' matches AI hallucination template [duckdb] + [azure] + [azure].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'noreply@example.invalid' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 5 file(s), 0 bytes).
  • INFOModerate community usage with 155 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 378d 639 0 ↑1.7/day
Possible Squatted Stub
aws pypi 1.4.4.20260205 — noreply@example.invalid example.invalid
Package purpose: DuckDB extension package for duckdb/core-extensions/aws
Claimed homepage: https://pypi.org/project/duckdb-ext-aws/
Matched naming pattern: duckdb-aws-aws
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 378
Registry downloads: 639/month, 201/week (MODERATE_USAGE)
Codebase size: 0 lines, 0 Bytes across 5 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'duckdb-ext-aws' matches AI hallucination template [duckdb] + [aws] + [aws].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'noreply@example.invalid' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 5 file(s), 0 bytes).
  • INFOModerate community usage with 639 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 382d 7 72 ↑0.0/day
SUSPICIOUS
ripple npm 0.1.0 — —
Package purpose: Basic ripple react component wrapper
Matched naming pattern: ripple-ripple-wrapper
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 382
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 72 lines, 2.1 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('RIPPLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 356 days ago within the 1-year AI tool proliferation window.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
70 385d 9 4 ↑0.0/day
SUSPICIOUS
google npm 1.0.1-beta.0 ASO Market —
Package purpose: Enhanced Google Play Store scraper with improved compatibility and performance
Claimed homepage: https://github.com/asomarket/google-play-scraper-enhanced#readme
Matched naming pattern: google-google-scraper
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 385
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 20.8 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 359 days ago within the 1-year AI tool proliferation window.
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.esm.js:1 (+1 more occurrence(s) elsewhere)
Static code signals:
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.esm.js:1 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
70 451d 16 17 ↑0.0/day
Possible Squatted Stub
azure pypi 1.0.2 Anupam Singh anupam936574@gmail.com gmail.com
Package purpose: test
Claimed homepage: https://pypi.org/project/azure-ai-travel-agents-client/
Matched naming pattern: azure-azure-travel
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 451
Registry downloads: 16/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 17 lines, 543 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'anupam936574@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (17 LOC, 1 file(s), 543 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 467d 10 7 ↑0.0/day
SUSPICIOUS
bybit npm 1.0.0 Alice —
Package purpose: Some useful JS libs
Matched naming pattern: bybit-bybit-init
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 467
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 147 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('BYBIT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
70 482d 18 7 ↑0.0/day
Possible Squatted Stub
aws pypi 0.1.1 — —
Package purpose: AWS MCP tools
Claimed homepage: https://pypi.org/project/aws-mcp-tools/
Matched naming pattern: aws-aws-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 482
Registry downloads: 18/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 170 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 170 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 496d 4 13 ↑0.0/day
SUSPICIOUS
trezor npm 1.0.0 — —
Package purpose: Trezor integration providing lib utility for Trezor
Matched naming pattern: trezor-trezor-lib
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 496
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 4/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 13 lines, 526 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('TREZOR').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
70 499d 9 28 ↑0.0/day
SUSPICIOUS
btc npm 1.0.1 — —
Package purpose: Btc integration providing provider utility for Btc
Matched naming pattern: btc-btc-provider
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 499
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 28 lines, 976 Bytes across 7 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('BTC').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
70 510d 114 23 ↑0.2/day
Possible Squatted Stub
gemini pypi 0.1.0 Ivan Khomich ivan.khomich@gmail.com gmail.com
Package purpose: Python library for translation (Gemini Translator)
Claimed homepage: https://pypi.org/project/gemini-translator/
Matched naming pattern: python-gemini-translator
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 510
Registry downloads: 114/month, 20/week (MODERATE_USAGE)
Codebase size: 23 lines, 853 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'gemini-translator' matches AI hallucination template [python] + [gemini] + [translator].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'ivan.khomich@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (23 LOC, 1 file(s), 853 bytes).
  • INFOModerate community usage with 114 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 529d 7 70 ↑0.0/day
SUSPICIOUS
solana npm 1.0.0 — —
Package purpose: Solana integration providing example utility for Solana
Matched naming pattern: solana-solana-example
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 529
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 70 lines, 2.5 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('SOLANA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
70 538d 8 10 ↑0.0/day
SUSPICIOUS
google npm 1.0.0 Harsh Gautam —
Package purpose: A lightweight API to fetch Google search suggestions for a given query.
Matched naming pattern: google-google-suggestions
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 538
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 348 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/fetch_search_suggestions.js:2
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/fetch_search_suggestions.js:2

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
70 563d 9 8 ↑0.0/day
Possible Squatted Stub
aws pypi 0.1.0 — —
Package purpose: Aws integration providing secure utility for Aws
Claimed homepage: https://pypi.org/project/aws-cdk-secure-modules/
Matched naming pattern: aws-aws-secure
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 563
Registry downloads: 9/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 8 lines, 265 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 265 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 566d 271 0 ↑0.5/day
Possible Squatted Stub
crewai pypi 1.1.0 — —
Package purpose: Transitional package for aiqtoolkit-crewai, this package is deprecated and will be removed in the future.
Claimed homepage: https://pypi.org/project/agentiq-crewai/
Matched naming pattern: python-crewai-agentiq
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 566
Registry downloads: 271/month, 158/week (MODERATE_USAGE)
Codebase size: 0 lines, 0 Bytes across 4 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'agentiq-crewai' matches AI hallucination template [python] + [crewai] + [agentiq].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 4 file(s), 0 bytes).
  • INFOModerate community usage with 271 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
« Prev Next »
LINK COPIED TO CLIPBOARD