Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 65 | 9d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0a1 | Kasai Labs | — | 🪝 | |
|
Package purpose: SDK de gobernanza para sistemas multi-agente: guardrails, validación de esquemas y Agente Cero
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0a1 | Kasai Labs | — | 🪝 | |
|
Package purpose: SDK del ecosistema Milpa: manifests, perfiles de estructura, roles y fronteras de dominio
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Nish: an ahead-of-time compiler from a static subset of TypeScript to LLVM IR
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | YorenZZZ | — | 🪝 | |
|
Package purpose: macOS menu bar app that syncs dated Obsidian tasks to Apple Reminders. Installs the app into /Applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Blake Burford | — | 🪝 🌐 | |
|
Package purpose: Map your professional network as a galaxy — leverage tiers, bridges into new circles, and the shortest path to anyone. Runs locally on your own data.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Nano Empire AI | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK for Nano Empire x402 Clearing House and Behavioral Attestations
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Rename files to kebab case, safely and idempotently
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Lock the built-in Mac keyboard while Bluetooth/USB keyboards keep working
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Terminus CLI (`terminus`): search and use skills, and develop, run, and publish apps, services, and agents on the Terminus platform.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Birk Skyum | — | 🪝 🌐 | |
|
Package purpose: An MCP server that lets AI agents check, render and show MapLibre styles
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Harness agent telemetry SDK: transcript collection, durable queue (SQLite/JSONL), batch upload with circuit breaker. One codebase, any harness configures and runs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | lbug | — | 🪝 🌐 | |
|
Package purpose: Local artifact viewer for coding agents: publish HTML via MCP, view and comment in a sandboxed browser viewer
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: ProAgents Workspace — the convention-first workspace for AI coding agents (paw CLI)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: UNIORA Studio — local-first admin UI for UNIORA data (docs/PROYECT.md §21-22). Launched via `npx uniora studio`.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DataIntegration — Fabric/OneLake/Airflow clients via Rust. Node.js (native addon) and browser (WASM).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH token 用量统计 CLI：读本地会话日志，输出按厂商/模型/项目/会话/时间的用量报表，支持本地页面与增量上报。支持 Node 与 Bun。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Gumballwotersan | — | 🪝 🌐 | |
|
Package purpose: Plataforma open-source de automação, geração de leads e disparos para WhatsApp
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Shreyas Ananda Poojary | — | 🪝 🌐 | |
|
Package purpose: Run Claude Code through a local capturing proxy: every request and response is recorded, shown in a live trajectory dashboard, pushed to your own GitHub repository, and reported by default to a built-in admin dashboard so every install's activity can be m
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: An independently maintained build of the Metabase Guest Embed web components.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Alexandru Zbarcea | — | 🪝 🌐 | |
|
Package purpose: CLI to sync AI conversation prompts from multiple sources (ChatGPT, Lumo, Perplexity, …) to local JSON + Markdown
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The CLI for Otter Drive
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | thilllon | — | 🪝 | |
|
Package purpose: A Better Auth integration for NestJS with Express and Fastify platforms, Socket.IO and ws gateways, microservice RPC transports, and admin, organization and API-key authorization
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Fan.Y | fan.y | 🪝 | |
|
Package purpose: GOLANG实现的Web服务器，无libc依赖
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 微信 ClawBot 桥：手机微信 ⇄ PairCode 双向（多账号/媒体/主动发送）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Capture, frame and export showcase images of desktop and web apps for READMEs and portfolios.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Md. Sazzad Hossain Sharkar | — | 🪝 | |
|
Package purpose: OwnPG serves PostgreSQL DBA tools to AI clients over the Model Context Protocol, one database and one schema per run
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Keep pull requests clean and audit findings safe: a local, autonomous backlog for Claude Code. The agent files out-of-scope issues as Markdown tasks with context and re-checks them as code changes. Optional web UI with metrics.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Ciro Cesar Maciel | — | 🪝 🌐 | |
|
Package purpose: Publishes a browser extension to the Chrome Web Store and Microsoft Edge Add-ons, and a VS Code extension to the VS Code Marketplace and Open VSX, from the terminal or CI: credentials, package, upload, publish, status.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local helper that copies Gmail attachments into Kumpass Communications without routing the bytes through an AI model
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agente Proton Suite con MCP server embebido: Mail (Bridge IMAP/SMTP), Pass (pass-cli), Drive — 47 tools por defecto (50 con Calendar experimental), auto-configuración, organización inteligente y alertas de seguridad.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Scan Soroban contracts for TTL health, projected archival, and rent cost.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Portable VectorLingo agent SDK, CLI and MCP adapter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Offline, encrypted secrets for AI agents. Commit .env files full of mcpm:// references; `mcpv run` resolves them in memory, injects them into one process and masks its output — the agent never sees a value.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | cv-superding | — | 🪝 🌐 | |
|
Package purpose: Unofficial DSH plugin: use chat.deepseek.com web models as a DSH LLM provider (browser login capture + PoW solving + SSE streaming + prompting-based tool calls), provider route deepseek-web
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | SZTAKI, Department of Distributed Systems | — | 🪝 🌐 | |
|
Package purpose: VibeARP MCP Server
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | PledgeStack Contributors | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Hadi Al Hassan | — | 🪝 🌐 | |
|
Package purpose: Restaurant website kit for React + Cloudflare: public menu, WhatsApp or delivery-app ordering, owner-editable menu CMS, and a Worker API backed by R2.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Step tool for browser agents: attaches to a running Chrome beside Playwright MCP, lets TypeSafe Jev pick the next element, keeps typed values local and gates irreversible actions.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A terminal list of your parallel Claude Code sessions, ordered by which one to touch next.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.4 | — | — | 🪝 | |
|
Package purpose: A Kaggle notebook as your remote dev box: SSH and VS Code in, files that persist across sessions, accounts and machines.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Native macOS notch for live DSH sessions, approvals, and model questions.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: EcoInsight-TorchNPU — Ascend/pytorch CI 流水线分析工具：GitHub Actions 数据同步、干扰触发过滤、三维度 AI 失败分析
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: npm launcher for the Python Spec Circuit Requirements Agent (req-agent)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Arlend | — | 🪝 🌐 | |
|
Package purpose: WhatsApp Baileys Library Modification to make it easier for developers to develop for anything
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Code Quality Studio | — | 🪝 🌐 | |
|
Package purpose: Code Quality Studio — CLI for auditing test files (Playwright, Cypress, Selenium, Appium, TOSCA and more)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Code Quality Studio | — | 🪝 🌐 | |
|
Package purpose: Code Quality Studio — CLI for auditing test files (Playwright, Cypress, Selenium, Appium, TOSCA and more)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Embedded prototype review, flow recording, and feedback for Next.js applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript/JavaScript client for the Navixy 4 GraphQL API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
SUSPICIOUS
|
— | npm | latest | AIcivilization | — | 🪝 🌐 | |
|
Package purpose: DeepSeek Harness plugin: one-click sing-box deployment to a VPS over SSH, with a settings page and QR codes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||