Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 65 | 25d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: tunnelbox 的 Cursor 适配器（独立进程）：手机远程驱动本机 Cursor CLI（agent acp：会话/流式/审批/中止/删除，选择/计划经注入 MCP 工具）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 25d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: This repo contains the Pulumi Cert Manager component for Kubernetes. This add-on automates the management and issuance of TLS certificates from various issuing sources. It ensures certificates are valid and up to date periodically, and attempts to renew c
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 25d | — | — | — |
Unverified Signal
|
— | npm | latest | Matias Gonzalez | — | 🪝 | |
|
Package purpose: Node.js GPU adapter for vgpu, using Dawn-based WebGPU bindings.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 25d | — | — | — |
Unverified Signal
|
— | pypi | 0.8.48 | Ed Cherednik | — | 🪝 | |
|
Package purpose: Executable contracts for AI agents: scoped changes, frozen verification, and signed evidence
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 25d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Claude Code adapter for dotdotgod project memory workflows.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 25d | — | — | — |
Unverified Signal
|
— | npm | latest | Peter Steinberger | — | 🪝 | |
|
Package purpose: macOS automation MCP server with screen capture, UI interaction, and AI analysis
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 25d | — | — | — |
Unverified Signal
|
— | npm | latest | Endor Labs | — | 🪝 | |
|
Package purpose: Endor Labs CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 26d | — | — | — |
Unverified Signal
|
— | npm | latest | Vanyangyang | — | 🪝 🌐 | |
|
Package purpose: Windows only. Use Cursor Context Engine and bounded, explicitly continuous Cursor Agent execution from the Pi coding agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 26d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: See your Claude limits, exact reset times, burn rate and full usage history — on your own machine, from your own data.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 27d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A command-line interface for EDINET.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 27d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Google Home export — hub-side smart-home fulfillment (SYNC / QUERY / EXECUTE / DISCONNECT) for the non-camera fleet, served over the hub's own OAuth account link. No Google credential is stored, sent or required.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 27d | — | — | — |
Unverified Signal
|
— | pypi | 1.5.0 | ninjasin-labs | — | 🪝 | |
|
Package purpose: Zero-dependency local document search engine — SQLite index, millisecond retrieval, CLI + Web UI with upload
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 27d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Nuxt module that adds a complete AI chat interface to your app. Server-side chat behavior is delegated to the dedicated Chat API; the Nuxt module owns the UI, auth bridge, and local proxy routes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 27d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The boxes.dev CLI: run Claude Code and Codex on cloud devboxes from your terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 28d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Hum: a self-improving coding agent for your terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 28d | — | — | — |
Unverified Signal
|
— | npm | latest | vanillagreen | — | 🪝 | |
|
Package purpose: Pi extension and CLI for controlling visible interactive Pi sessions over a structured Unix-socket side channel.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 28d | — | — | — |
Unverified Signal
|
— | npm | latest | vanillagreen | — | 🪝 | |
|
Package purpose: Pi extension for structured multi-tab inline questions and bridge-driven replies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 28d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: screenpipe CLI — AI that knows everything you've seen, said, or heard
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 28d | — | — | — |
Unverified Signal
|
— | npm | latest | Wolfware LLC | — | 🪝 | |
|
Package purpose: Moonlit CLI: run release pipelines and render their execution.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 28d | — | — | — |
Unverified Signal
|
— | npm | latest | plogme | — | 🪝 🌐 | |
|
Package purpose: Production-ready Baileys fork ⚉ with AI groups, Meta AI prompting, safe compositing fallbacks, rich responses, interactive messages, albums, newsletters, and communities — without antiban wrappers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 28d | — | — | — |
Unverified Signal
|
— | npm | latest | OneKey | — | 🪝 | |
|
Package purpose: Shared Trezor connector base for Hardware Wallet Kit
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 28d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Astrale Kernel Core - Types, Invariants, and Pure Logic
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 29d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Busabase MCP, cards, and live inspector for DeepSeek Harness
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 29d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cloudflare bundle — Tunnel (network-access) + TURN relay (turn-provider). Multi-entry npm package shipping 2 addons under a single bundle.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 29d | — | — | — |
Unverified Signal
|
— | pypi | 1.15.39 | — | — | 🪝 | |
|
Package purpose: Python Interface to the Allen Institute For Immunology's Human Immune System Explorer (HISE)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 29d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Decentraland authoritative scene server (bevy engine) — drop-in replacement for @dcl/hammurabi-server
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 29d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TypeScript-first developer supertool — a fast script runner and TS runtime powered by Node.js
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 29d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The AI coding agent built for the terminal. Generate code from natural language, automate tasks, and run terminal commands -- powered by 500+ AI models.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 30d | — | — | — |
Unverified Signal
|
— | npm | latest | Suraj Patel | — | 🪝 | |
|
Package purpose: The package "cmp-aws-database" is for its database, which defines global tables. These tables are designed to be imported and used across multiple applications of "craft-my-plate."
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 30d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: GObject-Introspection runtime for Node.js — load gi:// namespaces (GLib/GObject/Gio/…) with GJS-compatible semantics. Vendored + rewritten from node-gtk under MIT.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 30d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CLI for operating agents on the Introspection platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 30d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Flare Superhero FastTrack Middleware Component
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 30d | — | — | — |
Unverified Signal
|
— | npm | latest | agnusdei1207 | — | 🪝 | |
|
Package purpose: Multi-agent mission control for OpenCode with Commander, Planner, Worker, and Reviewer workflows.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 30d | 79 | 105 | ↑2.6/day |
SUSPICIOUS
|
vllm | pypi | 0.1.0 | — | — | ||
|
Package purpose: DLA: decode-length-aware preemption & admission for vLLM-HUST
Claimed homepage: https://pypi.org/project/vllm-hust-dla/
Matched naming pattern: vllm-vllm-dla
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 30
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 79/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 105 lines, 5.4 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 31d | — | — | — |
Unverified Signal
|
— | npm | latest | SylphAI | — | 🪝 | |
|
Package purpose: AdaL is no longer distributed through npm. Install it with: curl -fsSL https://adal.sylph.ai/install.sh | bash
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 31d | — | — | — |
Unverified Signal
|
— | pypi | 1.7.0 | — | — | 🪝 | |
|
Package purpose: Push notifications and phone approvals for AI coding agents and scripts (ntfy, Telegram, OS fallback).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 31d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Shared UI components, hooks, and utilities
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 31d | — | — | — |
Unverified Signal
|
— | npm | latest | Medical Informatics Engineering, Inc. | — | 🪝 🌐 | |
|
Package purpose: A themeable, accessible React component library built with Tailwind CSS
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 31d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 31d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: E2E parity validator for site migrations. Compares prod vs cand and reports UI, functional, SEO, visual, and Web Vitals deltas with an LLM-ranked HTML report.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 31d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Precompiled pre-commit and pre-push checks for repositories that use `mx`.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 31d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The command line interface for PostHog 🦔
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 32d | — | — | — |
Unverified Signal
|
— | npm | latest | Webiny Ltd | — | 🪝 | |
|
Package purpose: A DynamoDB driver for the @webiny/db database client.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 32d | — | — | — |
Unverified Signal
|
— | npm | latest | Cube Dev, Inc. | — | 🪝 | |
|
Package purpose: Cube pre-aggregation storage layer.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 32d | — | — | — |
Unverified Signal
|
— | npm | latest | Hinkal Protocol | — | 🪝 🌐 | |
|
Package purpose: Prebundled Hinkal SDK for React Native — no Metro config required.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 32d | — | — | — |
Unverified Signal
|
— | npm | latest | Openfort | — | 🪝 🌐 | |
|
Package purpose: Openfort Node SDK
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Prebuilt cratestack-cli binary, fetched from GitHub Releases on install. No Rust toolchain required.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Internal component library and server toolkit for the LetItRip collectibles marketplace.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Agent-board dashboard for Pi: dispatch, monitor, peek/reply, and attach to background Pi sessions.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | dotcms | — | 🪝 | |
|
Package purpose: Official command-line tool to manage dotCMS content.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||