Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Actions-native repository steward: compile .gardener tasks into GitHub Actions workflows and deploy the Gardener runtime to Cloudflare
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Segmented append-only agent log with pure context and handoff projections
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Chilkat Software, Inc. | — | 🪝 🌐 | |
|
Package purpose: The Chilkat class library for React Native (a Nitro Module): HTTP, REST, email (SMTP/POP3/IMAP), FTP, SFTP, SSH, zip, encryption, digital signatures, certificates, XML, JSON and more.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: OpenCode plugin — remote-control your local opencode from Telegram and a mobile web console (channels, schedules, skills, files, worktrees).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Core invariants, capability dependency resolver, file ownership classifier, and API contracts for Platform Kit
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Upgrade a self-hosted EasyPanel instance to Pro (portal-license bypass). Run `npx easypanel-pro` on any VPS running EasyPanel in Docker.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Windows-native developer environment engine
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | ghoker143 | — | 🪝 🌐 | |
|
Package purpose: Cursor provider for pi: fully Pi-owned tool execution (no Cursor-side exec, audited) using your Cursor subscription quota. AgentService channel by default, optional RunInference.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for testing, debugging, and controlling Roblox Studio from AI coding tools
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DataModel read-only MCP server for inspecting and debugging Roblox Studio from AI coding tools
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Lorenzo Mazzola | — | 🪝 🌐 | |
|
Package purpose: Shared formatting, commit and style configuration for my projects.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: sub — карточки Subject (subject.ru) для кодинг-агентов: /cards в Claude Code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 一条命令装一个地图 skill（Claude Code / Codex）：周边探索、赶车前吃饭。结果上传到 map.zainy.art，回复一个可以转发的链接。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The Spicrawl CLI is a command-line web scraper that turns any URL into Markdown, HTML, text or JSON, batch-scrapes up to 10,000 URLs per job, and connects Claude Code, Cursor, Codex and VS Code to Spicrawl over MCP, with JSON output and 13 stable exit cod
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Creative Customs | — | 🪝 | |
|
Package purpose: Universal local development and web serving orchestrator with project management
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP Server pour FounderAI — connecte vos coding agents aux agents IA FounderAI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Lightweight, language-independent knowledge and learning runtime for AI agents and developer tooling
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | RAG Laboratory Team | — | 🪝 🌐 | |
|
Package purpose: Central Command CLI and Local Runtime Bootstrapper for RAG Laboratory
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Muhammed Hanzala Gün | — | 🪝 🌐 | |
|
Package purpose: Sezinim MCP sunucusu — ajanlar için proje, kanban, wiki ve denetim erişimi.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: SUPPLY installer. Command: supply.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Rory Eckel | — | 🪝 🌐 | |
|
Package purpose: Hooknostic — portable hooks, skills, and MCP with native harness packaging and project integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
SUSPICIOUS
|
— | npm | latest | zjp179280 | — | 🪝 🌐 | |
|
Package purpose: Audio/Video WebRTC call components as native Web Components (Vue2/Vue3/vanilla compatible), backed by MQTT signaling.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | lbz | — | 🪝 🌐 | |
|
Package purpose: Echo desktop plugin: install and update AI CLIs, manage Claude Code / Codex / Gemini CLI providers, and report token usage per Echo message.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: etoo connect: Claude Code и Codex на этом компьютере берут задачи etoo
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Real-time WebRTC client SDK for Gravity Compile (white-label fork of the upstream browser SDK).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Automates a Microsoft 365 Copilot chat: sends prompts, extracts commands, runs them, reports back.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: sessionpipe: an open protocol for what your coding agents are doing. One install hooks Claude Code, Codex, Gemini CLI, Antigravity and more; four privacy tiers; secrets removed on your machine; sent to your server or to none.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Core cross-platform Agent logic for Cline
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: SonarQube pre-push 本地质量门禁：一条命令把 Maven 构建 + sonar-scanner 分析 + Quality Gate 判定前移到 git push 之前
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Independent native sparse optimization engine for Node.js
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.1 | Azzy-H | — | 🪝 | |
|
Package purpose: MCP server that lets models without video input look at video: frames with timecodes, plus measurable video properties.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | devmster | — | 🪝 🌐 | |
|
Package purpose: Memory for AI coding agents that outlives the session: save where the work stands, pick it up in the next session or from another agent. An MCP server for Claude Code, Cursor and other MCP apps; notes are kept on Agent Memory Bank (x402trinity.com Marketp
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Harry | — | 🪝 🌐 | |
|
Package purpose: Local dev proxy on Bun that puts remote APIs behind their own https://*.localhost domains via portless, with local CORS, cookie and redirect rewrites, WebSockets, and a small web UI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: ModelGo 文档内容与渲染器的单一真源（SSOT）：内容 + 纯渲染器，供文档站与官网共用
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Queen Senaya | — | 🪝 🌐 | |
|
Package purpose: Queen/Senaya Modified WhatsApp Web API Library — Fixed Auto Status Emoji React (LID + PN), Built-in Anti-Delete Message Recovery, Interactive Buttons & Turbo Media Upload.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Queen Senaya | — | 🪝 🌐 | |
|
Package purpose: Queen/Senaya Modified WhatsApp Web API Library — Fixed Auto Status Emoji React (LID + PN), Built-in Anti-Delete Message Recovery, Interactive Buttons & Turbo Media Upload.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Stackbit Inc. | — | 🪝 🌐 | |
|
Package purpose: stackbit-dev (HarmonyOS port with @ohos-ports native dependency overrides)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Preloop CI command-line interface
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Rob Higgins | — | 🪝 🌐 | |
|
Package purpose: More human in the loop: a voice intercom MCP server that lets coding agents call you, ask before acting, and page you when they're done.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | jijialun | — | 🪝 🌐 | |
|
Package purpose: 旗驭小智AI网关一键接入：浏览器完成钉钉 SSO 登录后，自动开通网关令牌并把全部可用模型注册进 DSH
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Pedro Flaminio | — | 🪝 🌐 | |
|
Package purpose: Motor fiscal TypeScript/Node para NF-e, NFC-e e NFS-e: XML, assinatura, transmissão, journal durável e recuperação
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 | |
|
Package purpose: Local ElevenLabs twin for batch and realtime speech-to-text flows.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 | |
|
Package purpose: Local Google Cloud Storage twin: buckets, objects with generations and preconditions, media/multipart/resumable uploads, Range-capable media downloads, copy/rewrite/compose, metadata patch, bucket IAM, and the V4 signed-URL surface (signature accepted loc
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Termux wrapper for OpenCode CLI (upstream: @opencode/cli-linux-arm64)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 | |
|
Package purpose: Local Moonshot (Kimi) twin — a faithful, stateful local Moonshot Platform API your real `openai` / `anthropic` SDKs (swapped base URL) talk to unmodified. The model is stubbed (deterministic), but the protocol envelope across three inference protocols (Op
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 | |
|
Package purpose: Local Stigg twin — the real published GraphQL SDL over the @volter/world-core kernel; your real `@stigg/node-server-sdk` talks to it unmodified. Mirror, simulate, and fork.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 | |
|
Package purpose: Local Tinybird twin for the real-time analytics surface: Events API ingest (NDJSON/JSON, wait, schema-mismatch quarantine), typed Data Sources (create/list/get/truncate/delete-by-condition/drop), Pipes published from REAL SQL and executed by a determinist
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 | |
|
Package purpose: Local Google Cloud Web Risk twin built on @volter/world-core.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The app host: run and test an ExternalSoul app (esoul-sdk) in a plain Node project — the Forge box, with no platform source, token or secret in it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||