Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 65 | 35h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: An interactive terminal UI for building Kubernetes YAML manifests
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 35h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agente terminale INSWISS: accesso sicuro al servizio INSWISS
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 36h | — | — | — |
Unverified Signal
|
— | npm | latest | A2chitect | — | 🪝 🌐 | |
|
Package purpose: OpenViking in the DSH web GUI: a Studio panel, a per-session memory-commit status pill with its commit timeline, and a right-sidebar tab showing what the current session retrieves.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 36h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Native computer-use CLI and MCP tools for existing coding agents, with browser automation and a live desktop viewer.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 36h | — | — | — |
Very Risky
|
— | pypi | 2.3.2 | Hexadexa | — | 🪝 | |
|
Package purpose: Analytics suite for Pretix: sales against previous editions, first-timers and returning people, audience, tickets and check-in — without storing personal data
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 37h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Manage your Plugin RPC keys, usage, logs and alerts from the terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 38h | — | — | — |
Unverified Signal
|
— | npm | latest | Mailo037 | — | 🪝 | |
|
Package purpose: Download, trim and manage Smolish videos from the command line.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 39h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Build map stories from Markdown and local assets
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 41h | — | — | — |
SUSPICIOUS
|
— | npm | latest | KW-Yeh | — | 🪝 🌐 | |
|
Package purpose: Intent-driven local kanban for coding agents: git worktree per card, Web UI and TUI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 41h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 为 DSH Web 入口加一道 HTTP Basic Auth 门卫：浏览器原生弹出账号密码框，凭据由浏览器/密码管理器保管并跨设备同步，不再依赖 30 天过期的 token cookie。校验通过的请求会被标记为已认证，交给 DSH 原生链路继续处理。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 43h | — | — | — |
Unverified Signal
|
— | npm | latest | Riverloop SRLS | — | 🪝 🌐 | |
|
Package purpose: Annotate your app under development (web, Electron or native window) and send the changes to Claude Code, in the same terminal session. Independent project, not affiliated with Anthropic.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 44h | — | — | — |
Unverified Signal
|
— | npm | latest | YongSu Jo | — | 🪝 🌐 | |
|
Package purpose: AI가 초안을 쓰고 사람이 승인하는, Git 기반 스펙 거버넌스 도구 — DB·서버 없이, 의존성 0. AI writes, humans approve, Git remembers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 45h | — | — | — |
Unverified Signal
|
— | npm | latest | Ninedrive | — | 🪝 🌐 | |
|
Package purpose: 9Drive - Personal Cloud Storage & Universal API Gateway
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 45h | — | — | — |
Unverified Signal
|
— | npm | latest | Haywood-Marx | — | 🪝 🌐 | |
|
Package purpose: Durable local messaging between agent implementations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 47h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run any project. Get a live link. Zero-config local hosting for any language or framework.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 47h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP server for Solana and EVM Watchdog: who can change a program or contract, dependency advisories, repo scans and watches, paid per call over x402.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 48h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Viber Design studio in your browser: describe a design, a coding agent builds it, the studio previews, gates, versions and exports it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 48h | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | — | — | 🪝 | |
|
Package purpose: Meu cliente SSH para Termux
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 48h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Connects Yurt workspaces to agent CLIs on your machine over ACP. One command, config in the browser.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 49h | — | — | — |
Unverified Signal
|
— | npm | latest | Anam Ahmed | — | 🪝 🌐 | |
|
Package purpose: Stream your local videos or torrents to any device on your network.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 50h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Read SnapBuddy captures from a coding agent: list them, get the repro steps, get the document.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 50h | — | — | — |
Unverified Signal
|
— | npm | latest | Daniel Swick | — | 🪝 🌐 | |
|
Package purpose: Total Chat codebase scanner — maps your Next.js app's routes and features so the Total Chat assistant can navigate it
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 50h | — | — | — |
Unverified Signal
|
— | pypi | 0.4.2 | — | — | 🪝 | |
|
Package purpose: Zero-Copy Contract Engine & Native MCP Protocol for AI Coding Agents (Cursor, Claude, Antigravity).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 51h | — | — | — |
Unverified Signal
|
— | npm | latest | jianshangquan | — | 🪝 | |
|
Package purpose: Code agent — terminal REPL or WebSocket multi-agent server
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 51h | — | — | — |
Unverified Signal
|
— | npm | latest | Er. Anil Kumar Thakur | — | 🪝 | |
|
Package purpose: Mason database layer: connections, a fluent query builder, SQL grammar, and a driver seam (node:sqlite first).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 54h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Framework-neutral Playwright testing utilities
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 54h | — | — | — |
Unverified Signal
|
— | npm | latest | VD Enterprises | — | 🪝 | |
|
Package purpose: Point Claude Code, Codex, OpenCode, Continue, Zed, Aider and other AI coding tools at Top Billing in one command.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 54h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 55h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Markdown-нативный таск-менеджер для git-репозиториев, совместимый с Backlog.md. Чистый Node.js, без нативных зависимостей.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 55h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Expert folders for DeepSeek Harness — hand-written expert directories (role.md + skills) discovered under project and user roots, listed and switched via /expert. · DSH 专家文件夹：手写专家目录，/expert 列表与软切换。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 56h | — | — | — |
Very Risky
|
— | pypi | 2.0.0 | — | — | 🪝 | |
|
Package purpose: Rules, skills and a protective hook for AI coding assistants - one rule source, installed per project.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run the real Claude Code CLI on ElevenLabs models (GPT-6 Astra, Opus 5.5, Gemini, GLM...) with your own ElevenLabs key — like Ollama, but for ElevenLabs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | Mahy KANE | — | 🪝 🌐 | |
|
Package purpose: The Forge command line: create apps, generate code, manage the database
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 57h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A build system for talks.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 57h | — | — | — |
Unverified Signal
|
— | npm | latest | kvdecvlt | — | 🪝 | |
|
Package purpose: MCP-сервер: статистика Яндекс Вордстата и поиск Яндекса
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 58h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Privacy-preserving local AlignDiff CLI for comparison and .adreview pack creation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 58h | — | — | — |
Unverified Signal
|
— | npm | latest | REBORN LABS | — | 🪝 🌐 | |
|
Package purpose: 클로드 답이 마음에 안 들 때 같은 과제를 하위 에이전트 여럿에게 풀게 하고 토너먼트로 한 답만 남기는 원본 arena 스킬(Jakeschincariol/arena-skill · MIT)을 실행할 때 GitHub 에서 받아 스킬 폴더에 놓고, 한국어 안내 스킬을 더하고, 파이썬이 도는지 확인합니다. 원본은 이 패키지에 들어 있지 않습니다.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agent App Framework plugin for OpenClaw: agent-app CLI passthrough + Control-UI entry form + the six framework skills, driving the agent-app and a2app CLIs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agent App Framework bundle for deepseek-harness (dsh): the agent tools plus an 'Agent Apps' manager (build, embed, per-app session, lifecycle) shown in the dsh UI, driving the agent-app and a2app CLIs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | Kamil Mysliwiec | — | 🪝 | |
|
Package purpose: Nest - modern, fast, powerful node.js web framework (@workflows)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 59h | — | — | — |
Very Risky
|
— | pypi | 0.1.0 | Persistent Browser Bridge contributors | — | 🪝 | |
|
Package purpose: Give AI coding agents a real persistent browser.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The latch command: launch tokens on locked pools, create hosted Launchpad and DEX sites, airdrops, splits and locks, check a chain with latch doctor, and scaffold hooks and front ends. MIT; signs only with an encrypted keystore, never a raw key.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 60h | — | — | — |
Unverified Signal
|
— | pypi | 0.3.9 | Pulkit Batra | — | 🪝 | |
|
Package purpose: Brakes for AI agents: every tool call is checked against your rules, risky ones wait for a human, and everything lands in a tamper-evident audit trail.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 60h | — | — | — |
Unverified Signal
|
— | npm | latest | Singtaa | — | 🪝 🌐 | |
|
Package purpose: OJPlay from the terminal: add carts to carts, build, run and test them like the site does. The runtime carts import as "oj".
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 63h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Development and verification tools for Tauri desktop apps: drive the WebView2 window over CDP, check installers, and keep public text clean. Nothing here ships inside an app.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 63h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Check whether a GitHub issue is already taken before you volunteer for it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 63h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The host package (feature 080, T042a). Publishes the surface an installed extension package compiles against: five enumerated subpaths, one per platform directory that has published API. No root export and no wildcard (D-160.7). The remaining subpaths are
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 63h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The `endora` command line: scaffolding and conformance tooling for Endora Commerce modules and integrations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||