Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Leigh Efford | — | 🪝 🌐 | |
|
Package purpose: A growing kit of Jev-powered tools for Claude, ChatGPT, your browser and your terminal, starting with Laugh Track.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | nickthelegend | — | 🪝 🌐 | |
|
Package purpose: Copy-paste Expo and React Native components and theme packs for people who ship on-chain.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | ulykbek11 | — | 🪝 | |
|
Package purpose: Review and sandbox npm and pnpm dependency lifecycle scripts on Windows, Linux, and macOS.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Vitalii Ionov | — | 🪝 🌐 | |
|
Package purpose: Thunderbird email for AI agents: the tb CLI, the tb-bridge daemon and the tb-mcp MCP server in one package. Enhanced fork of thunderbird-cli by Vitalii Ionov.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: AgentCode 的工具集
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | betterclever | — | 🪝 🌐 | |
|
Package purpose: Music videos rendered live in your terminal, in characters, locked to every beat. Follows the song playing in your music app.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Keep your agent skills deployed identically to Claude Code and Codex from one manifest, and audit projects so either agent sees the same instructions, skills and hooks.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | La grande Ourse | — | 🪝 🌐 | |
|
Package purpose: L'Ourson — l'agent UX de La grande Ourse pour Claude Code et Codex (serveur MCP local).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | raultov | — | 🪝 | |
|
Package purpose: Rust MCP Server for full Chrome CDP control and interactive JS debugging
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | msout@tuta.io msout@tuta.io | tuta.io | 🪝 🌐 | |
|
Package purpose: Export Microsoft OneNote notebook to Obsidian Markdown via Playwright — extracted from MSOneNote Exporter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Installed calculation verification and development export/render commands.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Read-only code review through MiniRouter for GitHub Actions and the terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server and CLI for md2slides: open and preview decks, or let Claude write slide decks validated by the md2slides engine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Optional in-guest agent for AWS Lambda MicroVMs - exec and filesystem API plus lifecycle hooks
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Judah Aragao | — | 🪝 | |
|
Package purpose: SSH access plugin for OpenCode - secure remote command execution with command blocking
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Runs a project's checks and records evidence showing what passed, what failed, and what remains unverified. No model, no key, no configuration.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | kasabaileys | — | 🪝 🌐 | |
|
Package purpose: Enhanced Baileys v7 with fixes for newsletter media uploads, plus support for interactive messages, albums, and additional message types.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: IC design MCP server with automatic open-source toolchain setup
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Andreas Pappas | — | 🪝 🌐 | |
|
Package purpose: See which AI agents use your CLI or MCP server, and for which commands. Never arguments, paths or personal data.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | P31 Labs | — | 🪝 | |
|
Package purpose: Sovereign, agent-native CLI for the P31 ecosystem — Oasis TUI, MCP server, and --agent JSON mode for AI agents and CI/CD.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Share files directly over your local network. No cloud, no accounts.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Abhijeet Jain | — | 🪝 | |
|
Package purpose: Indus Code — Claude-Code-level AI coding agent. Run with `npx indus-code`.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: pdt42 — the Platform Design Toolkit as a language: validate, query and get guided through a platform design.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Leon van Zyl | — | 🪝 🌐 | |
|
Package purpose: A cartoon 3D office where a team of AI coding agents works through your GitHub issues.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | Luca Zagaia, Himanshu Yadav | — | 🪝 | |
|
Package purpose: Spot the work you keep repeating with Claude Code, and turn it into skills you review.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | meganemura | — | 🪝 | |
|
Package purpose: Turn V8 CPU and heap profiles into short, ranked reports with runnable next commands for coding agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | OneHuman | — | 🪝 🌐 | |
|
Package purpose: Access control for the AI agents your customers log in with (Claude in Chrome, ChatGPT agent, Codex, Comet): hide private data from them, ask the account owner's passkey before anything risky, sign every decision on your own server. Node.js middleware + b
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Installs Herta (黑塔) as a DeepSeek Harness agent — persona, memory, narrative layer, voice and UI. · DSH 插件：把 Herta（黑塔）作为一个 agent 装进 DeepSeek Harness —— 人设、记忆、语音与界面。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A local terminal broker for AI pair development — observe a developer (Claude) and reviewer (Codex) terminal and coordinate a diff-driven review loop.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: BoringSec Security Scanner CLI — scan your websites and code from the terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: dsh 插件 · 使用量仪表盘：离线扫描会话日志，统计每日/每周/每月 token、估算费用、模型/工具/技能/命令榜、输出速度、工作时段与质量指标；gridstack+ECharts 卡片可拖拽编排，支持自定义公式与 AI 编排（提示词往返导入）。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Install Gamestage UI components into your app from the Gamestage registry.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Evidence-driven debugging and trust monitoring for AI-assisted software development.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Brenda & Naran | — | 🪝 🌐 | |
|
Package purpose: 360° vision into any codebase — an adaptive code comprehension tool
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | R1ck404 | — | 🪝 🌐 | |
|
Package purpose: Browser-native Node.js runtime environment
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH Web GUI 底部终端面板插件——node-pty 驱动的多标签交互式终端（Windows ConPTY / POSIX openpty）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A calmer reading view for DeepSeek Harness: native process details, live reasoning, and clean final answers. Fork adds answer message bubbles with a settings switch.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Gilang Albathin Nurhabibi | — | 🪝 🌐 | |
|
Package purpose: Metadata-driven headless CMS and application platform for Cloudflare Workers — core API, generated console and panels, MCP server, and a scaffolding CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Gilang Albathin Nurhabibi | — | 🪝 🌐 | |
|
Package purpose: The Hamolus core API: a Hono + Drizzle Cloudflare Worker that turns collection metadata into a dynamic, multi-tenant CRUD API on D1, with KV settings, R2 media/file libraries, panel ACLs and an MCP-ready surface.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Vibe coding for integration tests: coding agents write and run multi-user Playwright suites, one browser per person; people watch every screen live in a cockpit and pin notes for the agent to fix.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Kxa Function | — | 🪝 🌐 | |
|
Package purpose: WhatsApp Baileys Library Modification to make it easier for developers to develop for anything
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Document builder, safe submission client, XML validator, local mock server and AI agent skill for JoFotara (Jordan ISTD e-invoicing) integrations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Stable local port allocations for projects, worktrees, and parallel environments
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | jperelli | — | 🪝 | |
|
Package purpose: A modernized Vercel Python runtime with GIS libraries
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Pix3 command line: create a project from a recipe, and link your own coding agent (Claude Code, Codex, ...) to an open Pix3 editor window over a loopback MCP channel.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Brenda & Naran | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Directory-based RPC contracts and process entry generation for ProcLink
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Adaptive Intelligence Routing & Orchestration for coding-agent CLIs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | johnnren | — | 🪝 🌐 | |
|
Package purpose: Live2D session view with realtime voice: continuous voice input, streaming TTS, subtitle translation, multi-model catalog, standalone entry / Live2D 实时语音会话视图：连续语音输入、流式 TTS、字幕翻译、多模型目录、独立入口
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||