Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 跨框架文件预览 Web Components 核心（图片/视频/音频/PDF/TXT/Markdown/Word/Excel）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Standalone CC-WORK command-line client
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Headless browser-only React agent runtime on @earendil-works/pi-ai + @earendil-works/pi-agent-core
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Very Risky
|
— | npm | latest | Insightest | — | 🪝 🌐 | |
|
Package purpose: Desktop app for registering, managing and locally re-running E2E tests.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Ship DeepSeek Harness to your own VPS: one command (or a form in DSH Settings → VPS Deploy) installs a zero-dependency login gateway, automatic HTTPS through Caddy, systemd supervision and one-click DSH upgrades.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | christophesamueldhp | — | 🪝 🌐 | |
|
Package purpose: ccstatusline for the pi coding agent: a customizable, multi-line statusline footer with a TUI editor
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Jason Doyle | — | 🪝 🌐 | |
|
Package purpose: Encrypted browser-first JSON database for small web apps, backed by object storage with in-app or separate Cloudflare and Node authorities.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Verified native context-loader binary for @wrenai/genbi
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: On-device YouTube format fetching, chunked throttle-free downloading, and native audio/video muxing for Expo apps — no server-side yt-dlp required.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | flowstats | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Vis3D 三维 GIS 功能库（基于 Cesium）：地图初始化、底图/地形、图层树、标绘、量算、通视/可视域/日照/地形/倾斜模型分析、卷帘分屏、天气特效、高清导出、无人机回放等，全部以「配置对象 + 方法调用」形式暴露，不含任何 UI，样式由业务方自行编写。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | melkimahdali | — | 🪝 🌐 | |
|
Package purpose: Framework web TypeScript AI-driven asal Nusantara: routing berbasis file, auth, database, dan AI yang membangun aplikasi dari bahasa sehari-hari.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | FallZx | — | 🪝 | |
|
Package purpose: WhatsApp Web API Library
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Sync OpenAI-compatible provider model IDs into Pi models.json with intelligent context window inference, capability upgrades, and deprecated model pruning
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | pypi | 1.9.1 | Steve Shoecraft | — | 🪝 | |
|
Package purpose: Multi-platform OS image builder using HashiCorp Packer
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 10d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: AI Unit Test Workstation desktop client for generating Java unit tests with remote backend services.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Fills out online job applications from a spreadsheet, or finds matching jobs for you, in your own browser from one profile, with you approving every submission. Works with Claude or free/open models.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | AskEleven | — | 🪝 🌐 | |
|
Package purpose: Record an AI agent doing a real task as one uncut vertical video, with captions placed by the agent's own step events. No staging, no edits, no voiceover.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: avlsdk-lite-mcp 的 linux-x64 平台二进制与病毒库。不要直接安装，请装 @antiylabs/avlsdk-lite-mcp。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Korean review and verification layer: deterministic checks plus a local sentence-level review server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | michaelnguyen102 | — | 🪝 🌐 | |
|
Package purpose: Dev-only visual annotation loop: point at any localhost preview, click an element, file a durable change request.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Very Risky
|
— | pypi | 1.3.0 | openPASO Contributors | — | 🪝 | |
|
Package purpose: openPASO — open Platform for Agentic Simulation and Optimization. An MCP server that lets an AI model operate nine finite-element and multiphysics codes: simulation, cross-code coupling, verification and solver development.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Molen agent tooling: molen CLI and MCP server over a shared ops library
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | samsmusa | — | 🪝 🌐 | |
|
Package purpose: JSON-first web testing framework built on Playwright: scenarios as JSON, TypeScript when you need it
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server bridging an AI assistant to the DBHawk /api/v2/mcp REST API (read-only datasource exploration + HawkAI).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | stuplum | — | 🪝 🌐 | |
|
Package purpose: Executable requirements and enforceable architecture decisions for software teams and coding agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Very Risky
|
— | pypi | 0.1.1a4 | — | — | 🪝 | |
|
Package purpose: Skarve Linux x86-64 raster query engine
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run Janet in the browser, on the Janet interpreter compiled to WebAssembly
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Skarve Linux x86-64 raster query engine
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | jssblck | — | 🪝 🌐 | |
|
Package purpose: Discover, search, summarize, classify, watch, and manage T3 Code threads across machines.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Set up AgentMuxer in Codex, Claude Code and OpenCode, and search and call APIs from your terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Deliver project conventions to coding agents at the moment they matter.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Anas Bouzid | — | 🪝 🌐 | |
|
Package purpose: Generate synchronized Before and After UI GIFs and images for pull requests with Playwright.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP server that connects Claude, Codex, Cursor and other coding agents to a live NodeFox workspace. No token, no workspace in the config.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Trevin Lee | — | 🪝 🌐 | |
|
Package purpose: Product demos as code. Write a script, render a demo, re-run it in CI when your UI changes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ShipTrack Otopilot runner: runs your coding agent (Claude Code, Codex, Antigravity) on your own machine for steps you send from ShipTrack.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A useful Chrome DevTools Protocol subset over an existing live DOM surface
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Deterministic, explainable, zero-dependency chat-to-context extractor for Claude and Gemini exports and share links. No API keys, no AI; network only when you pass a URL.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Keycloak login for the SDK CLIs: browser and device-code login, silent token renewal, and credential storage; plus the default deployment the SDK targets
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Alkaness | — | 🪝 🌐 | |
|
Package purpose: MCP server, relay and Figma plugin that let AI agents read, inspect and edit Figma files
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MiruZero local worker agent for multi-device tool execution.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MobileBuildMCP is a Model Context Protocol server that provides tools for Xcode project management, simulator management, and app utilities.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A 3D globe for the web: createGlobe() draws the whole Earth with WebGPU (WebGL2 fallback) and takes your data through a MapLibre-style API. No API key, no server of your own.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Search the PromptMarket catalog, assemble context, and install skills.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Sat Paing Oo | — | 🪝 | |
|
Package purpose: One command-line toolbox for everyday developer work that behaves the same on Windows, Linux and macOS.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Agripp87 | — | 🪝 🌐 | |
|
Package purpose: Memoria — persistent, plain-text memory for Claude over MCP. Markdown files you own, hybrid semantic + keyword search, OAuth 2.1 remote transport, and agentic self-maintenance.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Zero MCP local worker agent for multi-device tool execution.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Reads a repository and reports what a change to it would reach. Runs in your own pipeline; publishes the graph it built, never your source.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Elie Laloum | — | 🪝 🌐 | |
|
Package purpose: Programmable sandboxes, coding agents and typed workflows.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||