Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 65 | 10h | — | — | — |
SUSPICIOUS
|
— | npm | latest | Adarrsh Paul | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10h | — | — | — |
Unverified Signal
|
— | npm | latest | Batuhan KATIRCI | — | 🪝 🌐 | |
|
Package purpose: AbuseMan extension CLI: create, build, lint, pack, verify, keygen, dev, publish
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Publish projects to App Registry
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 11h | — | — | — |
Unverified Signal
|
— | npm | latest | Lithometric | — | 🪝 🌐 | |
|
Package purpose: Collide: your coding agents (Claude Code, Codex, Cursor) working as a team. One command installs it for every repo on your machine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 11h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: JavaScript CLI and stdio MCP command for managing global local RAG corpora.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 11h | — | — | — |
Unverified Signal
|
— | npm | latest | Josep Boix Requesens | — | 🪝 🌐 | |
|
Package purpose: A pair of eyes in a browser tab that sees, hears and talks through Gemini Live, and remembers you.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 12h | — | — | — |
Unverified Signal
|
— | npm | latest | Vipul Patel | — | 🪝 🌐 | |
|
Package purpose: Local session tracker for Claude Code: capture, dashboard and AI summaries, with coaching to come. Your data stays on your machine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 12h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: das - the command line of DAS (Ring Publishing). Its commands are derived from the OpenAPI specs your Organization serves.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 13h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CliJudge - lightweight command-line local judge: single binary, Windows/Linux sandboxed judging, LemonLime CDF, JSON storage
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 14h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A lightweight, ARMv7-friendly coding agent for Termux and Node.js.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 14h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Prompt-polish button beside the composer model seat for DSH, porting linshenkx/prompt-optimizer's optimizationMode axis, mustache template engine, template registry and variable extraction.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 14h | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | — | — | 🪝 | |
|
Package purpose: A sf-client plugin which orchestrates k3s clusters on Shaken Fist
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 15h | — | — | — |
Unverified Signal
|
— | npm | latest | Pascal Couturier | — | 🪝 🌐 | |
|
Package purpose: Connect AI tools (GitHub Copilot, Claude Code, Codex, Cursor, Claude Desktop) to Skill Builder open in your browser, over MCP.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 16h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Prepackaged AgentSam CAD, spatial design, and robotics application kit.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 16h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Portable AgentSam Local Studio desktop and hosted workbench for local-first projects, terminals, providers, and packaged apps.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 16h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Portable AgentSam ecommerce CMS runtime, scaffolding, media, analytics, and admin application package.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 18h | — | — | — |
Unverified Signal
|
— | npm | latest | Spencer Guest | — | 🪝 🌐 | |
|
Package purpose: Synthetic Factorio runtime for unit testing
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 19h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH SlideStudio — AI presentations with editable PPTX export for DeepSeek Harness
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 20h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Semantic archaeology for Git. Find the history that explains the code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 20h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Build, preview, and check Rafflex marketplace games and blocks locally, with the platform's own rules.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 20h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Shipd admin CLI — run quest checks on Harbor tasks or existing tasks
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 21h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cerebral estate agent skills: one install for every harness, on both sides of WSL
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 23h | — | — | — |
Unverified Signal
|
— | npm | latest | Roman Krejcik | — | 🪝 🌐 | |
|
Package purpose: Compile Pegmatite Script models to 3MF or PNG from the terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 23h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Sanity-check CLAUDE.md, project docs, and code against each other for coherence drift.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 24h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Open source code review that runs inside your coding agent, before you push.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 24h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Foundry-style fork tests in TypeScript, for any test runner.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 24h | — | — | — |
Unverified Signal
|
— | npm | latest | Coflazo | — | 🪝 🌐 | |
|
Package purpose: Offline practice app for the Optiver online assessment: Beat the Odds, NumberLogic, Likelihood List, Intervals, Orderbooks and Zap-N. Not affiliated with Optiver.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 24h | — | — | — |
Unverified Signal
|
— | npm | latest | Mohamed Mustafa | — | 🪝 🌐 | |
|
Package purpose: Zero-config API documentation for NestJS, Express, Fastify and Hono: OpenAPI docs, live REST/WebSocket/GraphQL consoles, mock server, Postman export and typed SDKs from static analysis — no decorators, no setup
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 25h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Control your Herdr agents from anywhere.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 26h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Euro-Office's document editors running entirely in the browser, with x2t as WebAssembly (part eurooffice-sdkjs-common of: @kreijstal/eurooffice @kreijstal/eurooffice-fonts-1 @kreijstal/eurooffice-fonts-2 @kreijstal/eurooffice-sdkjs-common @kreijstal/euroo
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 26h | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | — | — | 🪝 | |
|
Package purpose: AST-driven codeflow analysis engine: call graphs, symbol topology, and LLM context maps for Python codebases
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 26h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The ritual command: register, check, and publish apps on the Ritual Engine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 27h | — | — | — |
Unverified Signal
|
— | npm | latest | Smash&Clash | — | 🪝 | |
|
Package purpose: The official Smash&Clash CLI: a full-screen game in your terminal - against the house, a friend, an agent, or whoever is in the online quick-match queue - plus a stable JSON contract for agents (start, move, state, duels, invites, matches, replays, review
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 27h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Set up TagSentry's consent banner and event monitoring in your website: sign in once in the browser, and the CLI does the rest.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 28h | — | — | — |
Unverified Signal
|
— | npm | latest | Leniwy Poseł | — | 🪝 🌐 | |
|
Package purpose: Serwer MCP do publicznych API Sejmu RP: posłowie, głosowania, interpelacje, procesy legislacyjne i akty prawne (ELI). Działa lokalnie, rozmawia wyłącznie z api.sejm.gov.pl.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 28h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 30h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Make launch videos with Claude, in your browser, on your own Claude subscription.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 30h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Provider quota widget for the DSH web surface, built for the 0.2.0-rc.2 host line: collapsed capsule expanding into a Harness-native card. Host half resolves keys via ctx.credentials and queries zai-coding-cn / zai / zhipu / deepseek quota endpoints over
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 30h | — | — | — |
Unverified Signal
|
— | npm | latest | Google LLC | — | 🪝 🌐 | |
|
Package purpose: MCP server for Chrome DevTools
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 30h | — | — | — |
Unverified Signal
|
— | npm | latest | Google LLC | — | 🪝 🌐 | |
|
Package purpose: MCP server for Chrome DevTools
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 30h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run Switchyard modules in n8n workflows
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 31h | — | — | — |
Unverified Signal
|
— | npm | latest | Something11235 | — | 🪝 🌐 | |
|
Package purpose: DSH 视频皮肤：一段短片循环铺成整个界面的聊天背景（无声、可调透明度），另一段做有声的开机动画（片尾交叉溶解进界面、点击画面随时跳过）。零依赖。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 31h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A browser-based form interface for CLI prompts.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 31h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Tiny, extremely fast data sanitisation, normalisation, transformation, validation and PII/secret scrubbing. Zero runtime dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 31h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Off-chain ZK proof builder for Nulth smart accounts on Stellar
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 32h | — | — | — |
Unverified Signal
|
— | npm | latest | TSUNAGI | — | 🪝 🌐 | |
|
Package purpose: A local-only AI workbench for correcting IBM Maximo data: every change is staged, diffed and approved by a human before it is written to Maximo.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Consented browser recording for your website
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 34h | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | NinjaSln | — | 🪝 | |
|
Package purpose: Smart Web Search MCP server — 5-provider fusion routing (wigolo+keenable → tinyfish→tavily → serper) with a one-click installer for 10 AI agent CLIs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 34h | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | Konstantinos Georgiou | — | 🪝 | |
|
Package purpose: Tools for running many Claude Code chats on one machine: find any chat, send a message into a running one, start chats in tmux, wake a chat from a scheduled job, and a few hooks
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 35h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The package manager for AI coding-agent engineering standards. Install, link and update rules across Claude Code, Cursor, Codex, Gemini and Copilot.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||