Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 65 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: HenergyqueAI coding assistant for your terminal: it reads your project, suggests edits and runs commands with your approval.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Claude Code | — | 🪝 🌐 | |
|
Package purpose: Microsoft Teams MCP server for Claude — developed and maintained by AI (Claude Code)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 12d | — | — | — |
Unverified Signal
|
— | pypi | 1.2.0 | — | — | 🪝 | |
|
Package purpose: Multi-engine static security analysis (SAST, secrets, SCA, AI-security, serialized-model) for code, repos, and AI-agent skills/plugins/MCP servers. Reads, never runs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 用 Markdown 写作、用 GitHub Pages 发布的个人博客引擎。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 12d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Aaron | — | 🪝 🌐 | |
|
Package purpose: Node's own library, in a browser tab.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 12d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.4 | Mohan Kumar Indala | — | 🪝 | |
|
Package purpose: Windows-optimized Model Context Protocol (MCP) suite & interactive CLI hub for Claude Desktop & Claude Code CLI (Excel COM, Word layouts, Workspace Explorer, and TypeScript diagnostic watcher).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 媛媛进销存 · Flutter Web 静态产物（供 jsDelivr 反射加速）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Covey is a minimal, family-focused calendar that brings your iCloud calendars into beautifully designed interface that can live anywhere in your home. It can run locally on a computer or server or can be added to a tablet Home Screen like an app. No third
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Vanyangyang | — | 🪝 🌐 | |
|
Package purpose: Windows only. Generic stdio MCP package for Cursor Bridge: CCE search and bounded Cursor Agent execution.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Becos | — | 🪝 🌐 | |
|
Package purpose: Opencode plugin: capture sessions to + recall memory from the becos brain, with optional redacted command, output, and code evidence. Bundles a vendored Python deliverer for privacy/auth/dedup — requires python3.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cortico 的 Bot 扩展，为机器人带来持续的记忆和鲜明的个性，记住经历，整理往事，延续对话。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Moeen Mahmud | — | 🪝 🌐 | |
|
Package purpose: A lightweight, model-agnostic AI agent runtime — the CLI, the server, and a typed client.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 13d | — | — | — |
Unverified Signal
|
— | pypi | 2.4 | — | — | 🪝 | |
|
Package purpose: Static secrets and credentials scanner with git history analysis, Shannon entropy detection, SARIF 2.1.0 output, Docker runtime scanning and Kubernetes Secrets scanning
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: #### 方式 A：npm 安装（发布到 npm 或公司私有库后） ```bash npm install jvs-ppt-ui # 或者 pnpm add jvs-ppt-ui ```
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | blueprint-works | — | 🪝 🌐 | |
|
Package purpose: BpCode — full-screen terminal AI coding agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Dabloons: findings, not features. Get reviews, bug reproductions and QA from an army of AI agents without unwanted pull requests, and turn your leftover AI usage into dabloons.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TC历史查询插件 · cx 按时刻查询活动系统，xrq/最佳 绘制单系统路径图（xrqa 数据 + NaTyphoon 存档）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | Wijanarko Putra Rajeb | — | 🪝 🌐 | |
|
Package purpose: Developer web console and diagnostic chamber for AI Oh-My-Pi — Elysia + Preact on Bun.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | admin@gec.dev admin@gec.dev | gec.dev | 🪝 🌐 | |
|
Package purpose: Provider-neutral AI client and cluster runtime for the rpi-mega cluster.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Twikoo comment system backend for AWS Lambda
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 13d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.1 | PyOCI contributors | — | 🪝 | |
|
Package purpose: Experimental OCI image builder for Python projects (pure Python, Docker-less, Dockerfile-less).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 13d | — | — | — |
Very Risky
|
— | pypi | 0.1.2 | — | — | 🪝 | |
|
Package purpose: Add your description here
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 14d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0b5 | — | — | 🪝 | |
|
Package purpose: MCP control plane for Hermes Agent durable runs and optional shared live sessions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 14d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.4 | Bayram Kotan | — | 🪝 | |
|
Package purpose: Every Docker and Podman setting, in one interface - a desktop manager for containers, with diagnostics and built-in learning
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 14d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.1 | Sanvio Labs | — | 🪝 | |
|
Package purpose: Use Skippy from Claude, Cursor, Kiro and any other MCP client. Private beta.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 14d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Stateful mock of the Stripe API (accounts by key, customers, payments, subscriptions that renew, pause, resume and cancel, invoices, checkout with a hosted page, a hosted customer portal, a Stripe.js stand-in, signed webhooks) at API versions 2024-06-20 a
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 14d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Clarity CLI npm wrapper package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 14d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local-subprocess implementation of the DeepSeek Harness subprocess seam
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 14d | — | — | — |
Unverified Signal
|
— | npm | latest | Appium Contributors | — | 🪝 | |
|
Package purpose: Native bindings to CoreSimulator.framework for Apple platform simulator control
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 14d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.3 | — | — | 🪝 | |
|
Package purpose: Set up and manage an Ubuntu development box
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 15d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: React Search v2 component for recomnext
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 15d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Node.js server SDK for the recomnext recommendation engine
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 15d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: React header typeahead global search widget for recomnext
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 15d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Header typeahead global search widget for recomnext
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 15d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: React full-page live search widget for recomnext
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 15d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Full-page live search widget with facets and catalog browse for recomnext
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 15d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Drop-in Search v2 widget for recomnext
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 15d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: React carousel component for recomnext recommendations
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 15d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Drop-in recommendation carousel widget for recomnext
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 15d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Lightweight browser SDK for recomnext — recommendations, event tracking, and impression tracking
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 15d | — | — | — |
Unverified Signal
|
— | npm | latest | Salesforce | — | 🪝 | |
|
Package purpose: The Salesforce CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 15d | — | — | — |
Unverified Signal
|
— | pypi | 2.2.0 | Frederik Pasch | — | 🪝 | |
|
Package purpose: Kubernetes execution for RoboVAST: cluster campaigns, deployment, and the operator commands.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 15d | — | — | — |
Unverified Signal
|
— | npm | latest | Rickard von Haugwitz | — | 🪝 | |
|
Package purpose: Persistent operating context and dynamic control for coding agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 15d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: OonaCode — Windows-first multi-provider coding agent: the `oona` CLI, headless host service and local web UI. npm wrapper; the native binary is installed through the per-platform optional dependency.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 16d | — | — | — |
Unverified Signal
|
— | pypi | 0.19.7 | — | — | 🪝 | |
|
Package purpose: Evidence capture and manifest management for autonomous software delivery
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 16d | — | — | — |
Unverified Signal
|
— | npm | latest | Kevin Sawicki | — | 🪝 | |
|
Package purpose: Electron ChromeDriver
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 16d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CMX local context-compression gateway
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 1.5.0rc14 | — | — | 🪝 | |
|
Package purpose: A local orchestrator that takes your coding agent from spec to pull request, stopping only when a decision is yours.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 17d | — | — | — |
Unverified Signal
|
— | npm | latest | Yaroslav Boiko | — | 🪝 | |
|
Package purpose: Notion MCP server for Claude, Cursor, ChatGPT, and Claude Desktop — connect AI agents to Notion via the Model Context Protocol. Create pages, query databases, append blocks, upload files, and more in natural language.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 17d | — | — | — |
Unverified Signal
|
— | npm | latest | MoLines Designs | — | 🪝 🌐 | |
|
Package purpose: BrewTUI-Bar — Visual TUI and menu bar companion for Homebrew
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||