Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 65 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.3 | simplemind | — | 🪝 | |
|
Package purpose: Read-only Monarch Money MCP server and CLI. Pull accounts, transactions, cash flow, spending and income into Claude or your terminal. Zero dependencies, token in the macOS Keychain.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Connect a computer with the command shown on your Iteration workspace's overview:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The homer Go binary distribution wrapper
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Inspect local instructions, rules, skills, MCP servers, commands, subagents, and plugins for Paseo providers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mythos Code – KI-Coding-Agent im Terminal (by Mythoscraft)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Durable local PostgreSQL memory engine for AI agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Nodo de n8n que lee el QR fiscal de AFIP/ARCA de facturas electrónicas argentinas en PDF
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Tita Data Agent knowledge lifecycle console: intent recording, source truth, wiki compiler, memory, retrieval evaluation, and the multi-format conversion host
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DataStudio-inspired browser notebook for DSH: WASM SQL, Markdown, charts, Agent tools, and conversation context in the official right Sidebar
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP, ingestion, health, evaluation and operations for ai-memory
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | kylebrodeur | — | 🪝 🌐 | |
|
Package purpose: Leave visual annotations and threaded comments on the Storybook canvas, anchored to components or text ranges.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Model Context Protocol server giving agents access to knowledge namespaces
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Keyboard Backlight Controls — control RGB del teclado AERO X16 vía HID LampArray, sin dependencias (binario precompilado + instalación automática de servicios)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Aptivate Pty Ltd | — | 🪝 🌐 | |
|
Package purpose: kipmox Guardrails — deterministic Salesforce code review + independent fix verification, as an MCP server for AI coding agents (Claude Code, Cursor, …).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run a pi-factory app in the browser: a session list and the app's Pi TUI in a web terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Interactive draw.io SVG diagrams
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The portable Nomos application runtime, reception contracts, and Node/browser runners.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Very Risky
|
— | pypi | 0.3.1 | — | — | 🪝 | |
|
Package purpose: Display lyrics of playing song in terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: ProofBridge: a multi-agent CLI workspace and cross-provider collaboration layer.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: promptFigure 本地插件：在你的 AI 宿主（Codex / Claude Code 等）里为论文配科研图。开文档（LaTeX 本地编译）、画锚点、本地规则层组装提示词、调出图、收审批。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
SUSPICIOUS
|
— | npm | latest | spica | — | 🪝 🌐 | |
|
Package purpose: Plan and apply Spica resource files against a Spica instance from code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Dmitry Andriyanov | — | 🪝 🌐 | |
|
Package purpose: @spec-box/sdd: автономная реализация продуктовых фич ИИ-агентами
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Compose multi-layer deployment scripts for NexusEPM agents (L0 → L1 → L2 pipeline)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: SDK CLI for lsuperagent.docs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Ciro Cesar Maciel | — | 🪝 🌐 | |
|
Package purpose: Operations Analytics from the terminal and from code: `analytics web init` puts the tracker in a site, `analytics mcp init` measures an MCP server, and withAnalytics/trackGoal (from /mcp) report every tool call.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run Pi and Claude Code as first-class external harnesses inside Codex Desktop.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run Pi and Claude Code as first-class external harnesses inside Codex Desktop.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run Pi and Claude Code as first-class external harnesses inside Codex Desktop.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run Pi and Claude Code as first-class external harnesses inside Codex Desktop.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | ice5kysl | — | 🪝 🌐 | |
|
Package purpose: Live-Video —— 把 HTML 页面做成汇报级演示视频的 Agent Skill：网页当画面 + TTS 旁白 + 无头浏览器逐帧录屏，改一句台词改一行代码就能重出
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Zero-touch Langfuse tracing and heartbeat for Claude Code and Cursor, with one-time-token enrollment
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Sayandeep | — | 🪝 🌐 | |
|
Package purpose: AI-powered CLI PR review bot using Google Gemini — posts inline comments and a structured summary to GitHub pull requests
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Téo Brondel | — | 🪝 | |
|
Package purpose: Find what your web app exposes to anyone: leaked API keys in client code and Supabase tables readable without logging in. One command, no install.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Ciro Cesar Maciel | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Unofficial exploratory browser tester: it maps your app, a small decision model (Jev) picks the clicks, your spec supplies the typing, and code decides pass/fail.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The local Zhanla TUI: chat with the god agent, browse cards, all running on your machine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Lightweight MorozCorporation authentication library
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | linyq | — | 🪝 🌐 | |
|
Package purpose: 原神·千星奇域（Miliastra Wonderland）UGC 工具链：活文件定位与部署、地图存档 .gil 读取、运行时日志 .gia 取证、画面截图、试玩探针模板化，外加一个侧边栏状态面板。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | chengsongren | — | 🪝 🌐 | |
|
Package purpose: Single general-purpose forge agent for opencode: static worker subagents defined in forge.json (pinned model + thoughtLevel pair, or an Auto worker inheriting the parent model; dispatched through the native task tool — TUI-visible), a plan harness (file-b
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Watch the Jev decision model (typesafe.ai) play 2048 live in your terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Artificer identity eval driver and maintainer bench harness
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
SUSPICIOUS
|
— | npm | latest | unhappychoice | — | 🪝 🌐 | |
|
Package purpose: A markdown preview server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Browser preview of coding-agent responses (Claude Code, Codex, Pi, OpenCode) and local Markdown, LaTeX, code and diff files, with math, syntax highlighting and Mermaid.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Amir Rouhollahi | — | 🪝 🌐 | |
|
Package purpose: Always-on local voice hub for coding agents: talk hands-free to your Pi, OpenCode, and Claude Code sessions from any browser or phone. Private on-device speech (Parakeet + Kokoro). No cloud speech APIs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: UI control for configuring zen-fs-config sync groups (config-sync / data-sync). Provides both Web Component and React bindings.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server that smarts up free opencode models: context digesting, persistent memory, plan-first discipline, self-review, token ledger, big-model escalation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Ylhow06 | — | 🪝 🌐 | |
|
Package purpose: Agnes AI 图像 / 视频生成插件：注册 agnes_image 与 agnes_video 工具，内置跨进程 RPM 限流、429 退避与本地 ffmpeg 转 GIF；带 Web 配置卡（API Key / RPM 预设 / ffmpeg 检测）。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Self-healing for Playwright tests. A drop-in replacement for @playwright/test that recovers broken locators at run time — offline by default.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Edge TTS 语音大集成插件：消息朗读按钮、自动朗读开关、语音设置面板（Edge TTS / RVC / Index-TTS2 / CosyVoice / Google Cloud TTS）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: AWS CDK construct that receives feedback via a Lambda Function URL and emails it through an SNS topic
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||