Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Cintelis Pty Limited | — | 🪝 🌐 | |
|
Package purpose: MCP server for Ads Optimiser: generate TikTok ad images and videos from Claude, with local file upload and download. Device-flow sign-in, no API keys.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Noqta | — | 🪝 🌐 | |
|
Package purpose: Noqta Studio CLI (nqs): build themes for Noqta stores locally with live preview.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Groth16 predicate circuits over Poseidon commitments (threshold, range, set membership, non-membership, equality), a multi-party key ceremony CLI, and off-chain / on-chain verification.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Vinayak Deshmuk | — | 🪝 🌐 | |
|
Package purpose: TraceReel turns AI-agent browser traces into polished demo videos: normalize any agent's trace, reconstruct the interaction timeline, render smooth 1080p60 MP4. Muse is the first integration.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 本地生图工作台,Lovart 平价平替:开自己的 API 生图(任意 OpenAI 兼容接口,零订阅),画布排版+修图/擦除/去背景/OCR/转矢量,可编辑 PSD/AI 交付,Photoshop/Illustrator 图层级双向桥接
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Block.io, Inc. | block.io | 🪝 | |
|
Package purpose: Command-line interface for Dogechain.com
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | BenchFlow | — | 🪝 🌐 | |
|
Package purpose: PostTrain: run and track post-training (data, RL environments, SFT, preference tuning, RL, evals, deploy) from the terminal or the browser.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Let Claude Code drive your real Arc browser through a local extension bridge.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | eghrhegpe | — | 🪝 🌐 | |
|
Package purpose: Bring the Qoder models already signed in on this machine into DeepSeek Harness with zero configuration.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Xatanchiixxiv | — | 🪝 🌐 | |
|
Package purpose: WhatsApp Baileys Library Modification to make it easier for developers to develop for anything
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Reigns: a desktop horse that watches your Claude chats, catches hallucinations, and helps fix them (macOS).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | axiomantic | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | axiomantic | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Lucas | — | 🪝 | |
|
Package purpose: Shared engineering workflows for Codex, Claude Code, Grok Build, and OpenCode.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: sovereign embedded vector database: single-file .urna container with content-addressable citations, offline-first
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Vinayak Deshmuk | — | 🪝 🌐 | |
|
Package purpose: Turn workflows performed in Muse's managed browser into polished demo videos: capture real browser states, reconstruct the interaction timeline, render smooth 1080p60 MP4. Built on TakeOne.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | nodesemesta | — | 🪝 🌐 | |
|
Package purpose: Zero-friction CLI and Package Manager for IBM Bob 2.0 AI extensions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | 7figures | — | 🪝 | |
|
Package purpose: Agent Skill + MCP wiring for portfolio-wide technical SEO and GEO (AI answer-engine) audits: installs the seo-geo-empire skill into Claude/Gemini/Qoder/Unchained surfaces and registers the seo-geo-mcp-server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Install Agentic World skills and its local hardware-backed MCP for Codex and Claude Code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | KarmicSoft | — | 🪝 | |
|
Package purpose: E-mail sign-in and pull-request writer for git-backed content — one contribution, one branch, one pull request. A LightCode brick, shipped as a container.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Pezhman | — | 🪝 🌐 | |
|
Package purpose: Persian/Arabic RTL + Vazirmatn for the Qoder desktop app: CDP live injection by default (no install files touched), archive patch kept behind an explicit command
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Jan Hoppe | — | 🪝 🌐 | |
|
Package purpose: Terminal split pane for Claude Code: the session rendered as Markdown with subagents and attachments, git diffs with syntax highlighting, plan-mode plans with version diffs, and a session browser across projects
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for umicat — work with your games from your own machine
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Githumbi | — | 🪝 🌐 | |
|
Package purpose: Point at any UI element, leave a comment, and hand the feedback to an AI coding agent. Works with React, Angular, Vue, Svelte and plain HTML.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Codingns4DSH 插件骨架与连接契约
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Dodgy Bigfoot LLC | — | 🪝 🌐 | |
|
Package purpose: Keep dev agents alive and responsive in Relay workspaces
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP server for Verdix: check an EVM address on Base before sending it funds (safe/caution/danger). Pays per call via x402 from your own wallet, with a max-price cap.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | olevatorr | — | 🪝 🌐 | |
|
Package purpose: The hozu command: validate, inspect, graph, explain, impact, plan, build and skill (all with --json)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Zhao Liu | — | 🪝 | |
|
Package purpose: Install Zhao Liu's native Codex Account Switcher for macOS and Windows from verified GitHub Release packages (liuzhao1225/codex-account-switcher).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 0.38.0 | — | — | 🪝 | |
|
Package purpose: Multi-model read-only code review + AI panels.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | Urvin | — | 🪝 | |
|
Package purpose: Daily work log and token report across Claude Code accounts and devices, synced through your own private git repo
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A local 3D office for your Claude Code and Codex agents, with real terminals and GitHub boards.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Embedded browser seam for the Hydra harness — an owner-scoped Electron child process running the upstream PageAgent engine behind Hydra controls
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Plan/harden/code/review orchestration CLI and Agent Skill for cross-model, parallel, evidence-gated feature delivery.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DeepSeek Harness 第三方插件市场，支持通过官方插件管理器安装，并可对已安装插件进行 AI 安全审查。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Terminal-native agentic coding CLI: persistent manager, evidence-based completion gate, hard runtime budgets. Command: telos.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Install and update your licensed Aeyho reel kit.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | Sahasra Ranjan | — | 🪝 | |
|
Package purpose: File rules for AI agents, enforced by the OS kernel (no-read, read-only, append-only). macOS + Linux.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Plan/harden/code/review orchestration CLI and Agent Skill for cross-model, parallel, evidence-gated feature delivery.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Shared OpenCode 4-agent orchestration layer (router/builder/fixer/architect) for the team. Installs additively via OPENCODE_CONFIG_DIR; never touches your existing opencode.json, opencode.jsonc, or provider secrets.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Shared OpenCode 4-agent orchestration layer (router/builder/fixer/architect) for the team. Installs additively via OPENCODE_CONFIG_DIR; never touches your existing opencode.json, opencode.jsonc, or provider secrets.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.4 | — | — | 🪝 | |
|
Package purpose: Soi Gia agent package — scaffolding + publish workflow, published to PyPI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: VisionForge: vision understanding + image generation for DeepSeek Harness (DSH)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | DaVaL Co., Ltd. | — | 🪝 | |
|
Package purpose: Measures how you work with AI coding agents (Claude Code, Codex, Cursor, Copilot CLI, Antigravity) from your local logs and git — facts only leave the machine, DaVaL scores them and returns a PDF report, a sealed .daval and a type guide
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Git-agnostic local file browser in the right sidebar: a lazy file tree with structured HTML/Markdown/JSON/CSV/image previews over its own Typert Remote, defaulting to the session's workspace but not limited to it
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | REBORN LABS | — | 🪝 🌐 | |
|
Package purpose: 270억 파라미터 AI(Qwen3.8 27B)를 LM Studio 로 내 컴퓨터에서 — 램·그래픽 메모리를 읽기만 해서 재고 어느 판(Q4·Q6·Q8)이 맞는지 고르는 한국어 스킬을 한 줄로 깔고, 깔자마자 한 번 재서 보여 줍니다.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH plugin marketplace: sidebar catalog tab + agent tools (mp_search, mp_similar, mp_details, mp_install, mp_trending) over dsh-plugins-mp.com
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Dave | — | 🪝 🌐 | |
|
Package purpose: Lightning-fast NPM package manager with directory links, central store, and stack presets
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||