Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cuty image and video generation for coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: OpenCard Taro compiler and runtime toolchain
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Eva.js glTF resources and Model3D hierarchy integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Very Risky
|
— | pypi | 0.1.2 | — | — | 🪝 | |
|
Package purpose: EPyT-first WDN Synthetic Dataset Generator
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Ten working Quilt tool prototypes on the vendored @quilt/core dist — plus a springboard lab for JEV/MothQuantum experiments.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: RenderAI standalone video editor (Vue 3 component). Styles are bundled into the JS.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Deep, verifiable peer review for research papers, from your terminal or your agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Shopwell | — | 🪝 🌐 | |
|
Package purpose: Shopwell CLI for API client generation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CRDT synchronization and Git worktree orchestration for concurrent AI coding agents, including Codex and Claude Code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MeowCode — a Claude Code–style agentic coding CLI (framework skeleton).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | ISS FETC | — | 🪝 🌐 | |
|
Package purpose: ISS FETC LIBRARY: FORM DESIGNER BASE ON VUE.JS, MAKE FORM DEVELOPMENT SIMPLE AND EFFICIENT.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | ISS FETC | — | 🪝 🌐 | |
|
Package purpose: ISS FETC LIBRARY: FORM RENDERER BASE ON VUE.JS, MAKE FORM DEVELOPMENT SIMPLE AND EFFICIENT.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local drag-and-drop attachments for DeepSeek Harness, delivered as an external plugin
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local SSH tunnel and HTTP proxy manager with a web dashboard
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Very Risky
|
— | pypi | 0.1.0.dev1 | — | — | 🪝 | |
|
Package purpose: Python access to simdpunk, a header-only quantized-tensor kernel library
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | creative-int | — | 🪝 🌐 | |
|
Package purpose: Command line client for saving, recalling, and asking over Webu memory.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.2 | CoreWeave | — | 🪝 | |
|
Package purpose: CoreWeave Forge Agent Lens tracing for Google Antigravity
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript-first cross-platform 2D and 3D game engine
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Stateful mock of the Paddle Billing API (customers, addresses, businesses, products, prices, transactions with computed totals, subscriptions with pause/resume/cancel and renewals, events) with Paddle-Signature webhooks and admin routes that simulate chec
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Automaton Sovereign | — | 🪝 | |
|
Package purpose: Coinbase AgentKit ActionProvider for Automaton Pre-Flight AI Firewall: simulation, anti-honeypot and MEV safe slippage guard on Base.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: One plugin for a calmer DeepSeek Harness: reading view + message rail + smart history loading, for Harness 0.1.7.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Mamoun Hisham | — | 🪝 | |
|
Package purpose: softland-moch — one command to install and control Moch, your AI agent at home, in your pocket. Mobile backend fork of hermes-agent (MIT, Nous Research). The command you type is `moch`.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Richard Torcato | — | 🪝 🌐 | |
|
Package purpose: Banner, social card and favicon for a repo — SVG sources you can regenerate, rendered to PNG.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: AilaFlow is a low-code platform for automating business processes across people, AI agents, and connected systems. Build workflows visually or with AI, coordinate tasks, approvals, and handoffs, and connect your tools with JavaScript.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Enkeon CLI — `npx enkeon connect` wires Enkeon MCP and its rules into every AI tool (Claude Code, Cursor, Antigravity, OpenClaw, Hermes, Codex, Windsurf) plus SDK/terminal. JSON-first for humans and agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Blair Currey | — | 🪝 🌐 | |
|
Package purpose: Render Strudel pattern files to audio from the command line — strudel's own engine in headless Chrome, several chunks in parallel
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Seedhape local wallet: keeps your agent's keys in the OS keychain and signs payments on your machine. CLI: seedhape
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | fin.cx | fin.cx | 🪝 🌐 | |
|
Package purpose: Open-source, self-hosted document intake and management application
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A studio for games, music and video on its own Cloudflare: scaffold, multiplayer starters on the netplay contract, a port toolkit that makes existing single-player web games multiplayer, the site Worker with public rooms (Table/Lobby Durable Objects and D
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Nehanth Narendrula | — | 🪝 🌐 | |
|
Package purpose: Use a Pooled room from the command line: pooled serve <ROOM CODE> (a local OpenAI and Anthropic compatible endpoint), pooled chat <ROOM CODE> (talk to its model), pooled join <ROOM CODE> and pooled host (lend this computer's GPU).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | — | — | 🪝 | |
|
Package purpose: The smells a linter can't see, because they live between files: indirection and work for nobody in Python and TypeScript.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Flowrunner CLI for deploying Custom Extensions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Set up verified AI integrations from wirestack.site in your project with one command.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Alan Reis | — | 🪝 | |
|
Package purpose: Unofficial SigNoz SDK (REST API v0.142.1, typed), with an MCP server (stdio and HTTP) and a CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
SUSPICIOUS
|
— | npm | latest | jeffreydpayne | — | 🪝 🌐 | |
|
Package purpose: Stax Payments JavaScript Client
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MC 资产面板 + 「MC 模组工作室」模式 + mc-mod / mc-art 两个 skill：3D+物品栏、像素/结构编辑器、出错的报告自动放进输入框、GameTest 判定闭环。原生 Windows 可用（不需要 WSL），不绑定任何具体 mod。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Plugin-owned whiteboards with a card gallery and fullscreen draw.io editing for DeepSeek Harness
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The web runtime of LeCodes: the engines as wasm profiles (native/dist) + the generated bridges over them
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | eghrhegpe | — | 🪝 🌐 | |
|
Package purpose: 将本机已登录的 Qoder（国内版 Qoder CN / 国际版 Qoder）模型接入 Pi coding agent，零配置；复用 DSH 插件的凭据读取、回环 shim、上游协议与目录逻辑，附额度查看与每日签到命令。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Quilonix | — | 🪝 | |
|
Package purpose: Open-source, 100% free AI capability platform and MCP server for ChatGPT and AI assistants.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for Dreamward — connect Claude, Codex, Gemini, Cursor and any MCP agent to your private life-vision system.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Run a UiPath Delegate agent as a subprocess speaking JSON-Lines over stdio. Self-contained: installing this package pulls in @uipath/delegate-sdk — no separate SDK install.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Favio Vazquez | — | 🪝 🌐 | |
|
Package purpose: A local video studio for your coding agent: showtime's MCP server and command line. Describe a video. Your agent directs. Your machine renders.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agent-era publishing pipeline for WeChat Official Accounts: Markdown typesetting, xiaolvshu card rendering, reliable publishing
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 5.0.3 | Fusion Technology Strategies | — | 🪝 | |
|
Package purpose: Evidence-first WCAG 2.2 scanning for websites, local HTML, and PDF documents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local tools for the ZoneQ .zq project file format
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Finipe Ventures | — | 🪝 🌐 | |
|
Package purpose: Proof-based code verification: every finding carries a runnable proof, every check has a negative control, and a check that cannot run is NOT_MEASURED, never PASS.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | VideoSDK | — | 🪝 🌐 | |
|
Package purpose: VideoSDK command-line tool: get a video calling app running in one command
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | kuhuna | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | yanic0de | — | 🪝 🌐 | |
|
Package purpose: Storybook + Playwright for MCP Apps widgets: stories with mocked tool calls, a faithful local host, and headless story runs in CI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||