Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 65 | 64h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The `endora` command line: scaffolding and conformance tooling for Endora Commerce modules and integrations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 64h | — | — | — |
Unverified Signal
|
— | npm | latest | kukson777 | — | 🪝 🌐 | |
|
Package purpose: Counter-Strike 1.6 plugins in TypeScript: compiled ahead of time and run inside AMX Mod X, next to Pawn plugins.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 65h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A small, fast, customizable terminal coding agent
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 65h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A modern hybrid CMS and API documentation platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 65h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run Pi and Claude Code as first-class external harnesses inside Codex Desktop.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 65h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A terminal coding agent with inspectable requests and configurable tools and context.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 65h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Independent literature library with portable PDF annotations for DeepSeek Harness
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 66h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Unified subscription providers and usage dashboard for DeepSeek Harness
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 67h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Docker Compose generator written in Rust
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 68h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Open-source, DOM-native design canvas driven by agents over MCP. Designs are JSON files you own.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 68h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agnes AI coding agent CLI —— 终端内直连 Agnes 对话，支持 run_shell/write_file/read_file/use_skill 工具、SKILL.md 与 zip 技能自动加载、流式对话及真 TUI（悬浮命令菜单 + 底部状态栏）。社区第三方客户端。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 70h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK for the Flower reactive database
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 70h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 案件管理システムを自分の Cloudflare アカウントに導入・更新するインストーラ
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 70h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Parle extension for Pi.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 70h | — | — | — |
Unverified Signal
|
— | npm | latest | Studio Agartha | — | 🪝 | |
|
Package purpose: MCP bridge for editing open EPUB files in Sigil
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 71h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CLI for Pawpado — single-user AWS GPU gaming portal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 72h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 72h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Runsera CLI and MCP server — the agent's interface to a Runsera workspace (tasks, context, decisions, runs).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 72h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Runsera Manager — CLI and MCP server that lets a coding agent act as project manager of a Runsera workspace: read everything, plan, and propose changes a human approves.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 72h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Runsera instance administration from the command line: bootstrap, workspaces, invites, users, usage, errors, banner, beta requests, export, deletion.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Jesús Goterris | — | 🪝 🌐 | |
|
Package purpose: Terminal UI to launch, control and monitor local services
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local Apple simulator and device MCP server with a bundled MCP App viewer
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ChatGPT plugin with Apple device skills and a bundled Apple Device Hub MCP server and viewer
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Set up a repository for Impeccable for PRs from your terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH plugin marketplace: sidebar catalog tab + agent tools (mp_search, mp_similar, mp_details, mp_install, mp_trending) over dsh-plugins-mp.com
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | pypi | 1.0.0 | Ebuka | — | 🪝 | |
|
Package purpose: Switch the default AWS SSO profile in ~/.aws/config with one command
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Mark Scherer | — | 🪝 🌐 | |
|
Package purpose: Write reveal.js presentations in Carve markup - a runtime plugin and a static build step.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Solumbe: deterministic local repository context, impact analysis, and merge evidence.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | tastypear | — | 🪝 🌐 | |
|
Package purpose: Node.js child_process-compatible module backed by HTTP. Drop-in replacement for require('child_process') that routes exec/spawn to a remote server — non-interactive SSH exec replacement.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The LimOS harness for an external agent: dials into LimOS, drives an ACP agent, streams the reply back.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Packaged WebAssembly library for CL24 distributed key management.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Ali Comert and Harpy Contributors | — | 🪝 🌐 | |
|
Package purpose: Self-hosted control plane for AI coding agents — web, mobile and desktop
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | pypi | 1.4.0 | Traffic Builders | — | 🪝 | |
|
Package purpose: Traffic Builders' MCP server for creating and manipulating Microsoft Word documents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | keyon | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | ZVN DEV | — | 🪝 🌐 | |
|
Package purpose: Set up Little Friend analytics from the terminal: projects, install snippets, keys, goals, funnels, session replay, the agent door, log drains and install checks.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Sanjay Sivakumar | — | 🪝 🌐 | |
|
Package purpose: Sirius by SruSan: a security and control layer for AI agents that move money, and a compliance linter for money-handling code. Runs locally, no account.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Savantis | — | 🪝 🌐 | |
|
Package purpose: Savantis Memory connector for Paperclip: company-scoped recall, policy-controlled retention and OAuth PKCE.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Проверка навыков для ИИ-агентов на Битриксе: lint, eval, feedback
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Yilmaz Tool - kurumsal AI kodlama asistani (Linux x64)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agentic QA CI agent — detect/ingest/cases/scripts/run/classify/heal for customer GitHub Actions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A plugin-driven Pi agent server for Discord
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agent-facing desktop control CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ## Local development
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Prince Hasn | — | 🪝 🌐 | |
|
Package purpose: Onchain crypto payment database SDK for EVM chains: accept crypto payments, manage products, register merchants, run staking and fetch live token rates in TypeScript for Node.js and the browser.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Petr Tripolsky | — | 🪝 🌐 | |
|
Package purpose: Full-stack UI framework for visualizing cryptocurrency trading signals, backtests, and real-time market data. React dashboard with candlestick charts, signal tracking, and risk analysis.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Suneet Kumar | — | 🪝 🌐 | |
|
Package purpose: n8n community node for NeMo-Speech.cpp — offline speech-to-text, diarization, VAD, punctuation, inverse text normalization, and translation using the parakeet-tdt-0.6b-v3 model (Q8_0 GGUF) and official companion models. Downloads a prebuilt static nemo-sp
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Garth White | — | 🪝 🌐 | |
|
Package purpose: Your week, written from your real work. Reads your local git and writes it up with the AI of your choice — Claude, OpenAI, Gemini, or a local model.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Yilmaz Tool - kurumsal AI kodlama asistani
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | lovehlmmm | — | 🪝 🌐 | |
|
Package purpose: Universal AI Coding Tool Suite Generator inspired by AgentKit
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Sai MCP server — drive your Sai computer-use agent from Claude Code, Codex, or Cursor.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||