FlagThis | Sentinel Threat Feed

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference

Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.

Package	Score ▼	Age	Users	Lines	Growth	Verdict	Targeted	Ecosystem	Version	Author	Email domain	Signals
	65	126d	15	122	↑0.1/day	SUSPICIOUS	llama	pypi	0.1.0	Voxell, Inc.	—	🪝
Package purpose: LlamaIndex embeddings for Forge — Voxell's text-embedding API (turbo/pro/ultra; ultra = Qwen3-Embedding-8B, ~75+ avg MTEB, #4 English). Claimed homepage: https://pypi.org/project/llama-index-embeddings-forge/ Matched naming pattern: llama-llama-embeddings Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 126 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 15/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 122 lines, 5.4 kB across 2 files (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'None' is not affiliated with official vendor domain. HIGHPackage registered recently (100 days ago) during the active AI hallucination slopsquatting wave. HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_index_embeddings_forge-0.1.0/llama_index/embeddings/forge/base.py:65 Static code signals: SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_index_embeddings_forge-0.1.0/llama_index/embeddings/forge/base.py:65 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	137d	15	106	↑0.1/day	SUSPICIOUS	chroma	pypi	0.1.0	— rajarajeswaran2001@gmail.com	gmail.com
Package purpose: A production-grade custom LangChain retriever combining Chroma vector search and local BM25 search with Reciprocal Rank Fusion (RRF). Claimed homepage: https://pypi.org/project/chroma-hybrid-rrf/ Matched naming pattern: chroma-chroma-rrf Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 137 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 15/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 106 lines, 7.1 kB across 2 files (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('CHROMA'). HIGHPublisher email 'rajarajeswaran2001@gmail.com' is not affiliated with official vendor domain. HIGHPackage registered recently (111 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	137d	—	—	—	Unverified Signal	—	npm	latest	—	—	🪝
Package purpose: Google Workspace MCP server for Gmail, Calendar, Drive, Docs, Sheets, Slides, Contacts, Tasks, and Forms Static code signals: SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/modules/sheets/cellShape.js:139 (+3 more occurrence(s) elsewhere) SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/dist/modules/sheets/cellShape.js:139 (+1 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/oauth/client.js:21 (+9 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	144d	17	142	↑0.1/day	SUSPICIOUS	llama	pypi	0.3.2	cvfile.org	cvfile.org
Package purpose: LlamaIndex reader for the .cv open file format. Claimed homepage: https://pypi.org/project/llama-index-readers-cvfile/ Matched naming pattern: llama-llama-readers Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 144 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 17/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 142 lines, 6.1 kB across 2 files (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'None' is not affiliated with official vendor domain. HIGHPackage registered recently (118 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	145d	11	124	↑0.1/day	SUSPICIOUS	sol	pypi	0.1.0	— your.email@example.com	example.com
Package purpose: A professional Python Library for automated data cleaning, model selection, and visualization. Claimed homepage: https://pypi.org/project/sol-ai-core/ Matched naming pattern: sol-sol-core Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 145 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 124 lines, 6.2 kB across 2 files (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('SOL'). HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain. HIGHPackage registered recently (119 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	151d	13	30	↑0.1/day	SUSPICIOUS	google	pypi	0.0.5	— you@example.com	example.com
Package purpose: Python client for scraping Google Search results using the ScrapingBee Google Search API Claimed homepage: https://pypi.org/project/google-search-scraper-api/ Matched naming pattern: google-google-scraper Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 151 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 13/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 30 lines, 891 Bytes across 2 files (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('GOOGLE'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. HIGHPackage registered recently (125 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	153d	—	—	—	Unverified Signal	—	npm	latest	Dale Xiao	—	🪝 🌐
Package purpose: Use Codex App with GitHub Copilot Static code signals: SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/src/dashboard/ui.js:32 (+1 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/adapter.mjs:164 (+27 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/benchmark.mjs:15 SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/src/image-mcp.mjs:22 (+3 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	165d	21	83	↑0.1/day	SUSPICIOUS	llama	pypi	0.1.1	Santiago Fernández Muñoz	—
Package purpose: LlamaIndex reader for oxidize-pdf — fast, Rust-powered PDF parsing with element-disjoint RAG chunking Claimed homepage: https://pypi.org/project/llama-index-readers-oxidize-pdf/ Matched naming pattern: llama-llama-readers Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 165 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 21/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 83 lines, 3.7 kB across 2 files (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'None' is not affiliated with official vendor domain. HIGHPackage registered recently (139 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	166d	29	138	↑0.2/day	SUSPICIOUS	amazon	npm	0.1.5	Amazon Scraper API	—	🪝
Package purpose: Command-line interface for Amazon Scraper API - scrape products directly from your terminal Claimed homepage: https://amazonscraperapi.com Matched naming pattern: amazon-amazon-api Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 166 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 29/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 138 lines, 4.7 kB across 1 file (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('AMAZON'). HIGHPublisher email 'None' is not affiliated with official vendor domain. HIGHPackage registered recently (140 days ago) during the active AI hallucination slopsquatting wave. HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:23 Static code signals: SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:23 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	168d	18	109	↑0.1/day	SUSPICIOUS	llama	pypi	0.2.0	—	—
Package purpose: LlamaIndex tools for instanode.dev — provision Postgres + webhooks from LlamaIndex agents Claimed homepage: https://pypi.org/project/llama-index-tools-instanode/ Matched naming pattern: llama-llama-tools Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 168 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 18/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 109 lines, 4.7 kB across 2 files (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'None' is not affiliated with official vendor domain. HIGHPackage registered recently (142 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	171d	0	93	↑0.0/day	SUSPICIOUS	llama	pypi	0.1.1	— pim@toplistbot.com	toplistbot.com
Package purpose: llama-index readers scrappey integration Claimed homepage: https://pypi.org/project/llama-index-readers-scrappey/ Matched naming pattern: llama-llama-readers Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 171 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 93 lines, 5.0 kB across 2 files (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'pim@toplistbot.com' is not affiliated with official vendor domain. HIGHPackage registered recently (145 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	174d	26	8	↑0.1/day	SUSPICIOUS	grok	npm	0.1.0	Grok AI Image	—
Package purpose: Minimal npm package for Grok AI Image tool page metadata. Claimed homepage: https://www.seedance2ai.app/tools/grok-ai-image Matched naming pattern: grok-grok-image Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 174 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 26/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 236 Bytes across 1 file (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('GROK'). HIGHPublisher email 'None' is not affiliated with official vendor domain. HIGHPackage registered recently (148 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	176d	25	32	↑0.1/day	SUSPICIOUS	qdrant	pypi	0.1.4	Shivam Rastogi	—	🪝
Package purpose: Full-coverage CLI for the Qdrant vector search API Claimed homepage: https://pypi.org/project/qdrant-rest-cli/ Matched naming pattern: qdrant-qdrant-cli Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 176 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 25/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 32 lines, 1.5 kB across 2 files (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('QDRANT'). HIGHPublisher email 'None' is not affiliated with official vendor domain. HIGHPackage registered recently (166 days ago) during the active AI hallucination slopsquatting wave. HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in qdrant_rest_cli-0.1.4/src/qdrant_rest_cli/cli.py:6 Static code signals: SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in qdrant_rest_cli-0.1.4/src/qdrant_rest_cli/cli.py:6 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	177d	28	32	↑0.2/day	SUSPICIOUS	openai	pypi	0.1.3	Shivam Rastogi	—	🪝
Package purpose: A full-coverage CLI for the OpenAI REST API Claimed homepage: https://pypi.org/project/openai-rest-cli/ Matched naming pattern: openai-openai-cli Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 177 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 28/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 32 lines, 1.5 kB across 2 files (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('OPENAI'). HIGHPublisher email 'None' is not affiliated with official vendor domain. HIGHPackage registered recently (165 days ago) during the active AI hallucination slopsquatting wave. HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in openai_rest_cli-0.1.3/src/openai_rest_cli/cli.py:6 Static code signals: SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in openai_rest_cli-0.1.3/src/openai_rest_cli/cli.py:6 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	177d	14	132	↑0.1/day	SUSPICIOUS	llama	pypi	0.1.0	— ahsan@example.com	example.com
Package purpose: OSINT intelligence platform integration for LlamaIndex — 15-category intelligence reports, domain recon, and social media lookup Claimed homepage: https://pypi.org/project/llama-index-tools-osint/ Matched naming pattern: llama-llama-tools Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 177 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 14/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 132 lines, 5.8 kB across 2 files (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'ahsan@example.com' is not affiliated with official vendor domain. HIGHPackage registered recently (151 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	181d	14	90	↑0.1/day	SUSPICIOUS	llama	pypi	0.1.0	— hi@meetdewey.com	meetdewey.com
Package purpose: LlamaIndex retriever integration for Dewey — managed RAG backend Claimed homepage: https://pypi.org/project/llama-index-retrievers-dewey/ Matched naming pattern: llama-llama-retrievers Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 181 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 14/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 90 lines, 3.8 kB across 4 files (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'hi@meetdewey.com' is not affiliated with official vendor domain. HIGHPackage registered recently (155 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	186d	—	—	—	Unverified Signal	—	npm	latest	—	—	🪝
Package purpose: DingTalk Workspace CLI - AI-powered productivity tools Static code signals: LIFECYCLE_SCRIPT: 'postinstall' -> 'node install.js' SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/dws.js:7 (+1 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/install.js:137 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/install.js:74 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	188d	13	38	↑0.1/day	SUSPICIOUS	vllm	pypi	0.0.0	Development Team test@test.com	test.com
Package purpose: This name has been reserved using Reserver Claimed homepage: https://url.com Matched naming pattern: vllm-vllm-apis Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 188 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 13/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 38 lines, 1.4 kB across 2 files (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('VLLM'). HIGHPublisher email 'test@test.com' is not affiliated with official vendor domain. HIGHPackage registered recently (161 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	188d	13	38	↑0.1/day	SUSPICIOUS	vllm	pypi	0.0.0	Development Team test@test.com	test.com
Package purpose: This name has been reserved using Reserver Claimed homepage: https://url.com Matched naming pattern: vllm-vllm-stack Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 188 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 13/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 38 lines, 1.4 kB across 2 files (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('VLLM'). HIGHPublisher email 'test@test.com' is not affiliated with official vendor domain. HIGHPackage registered recently (161 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	188d	—	—	—	Unverified Signal	—	npm	latest	danixx	—	🪝
Package purpose: Embedded vector search for React Native powered by Qdrant Edge Static code signals: LIFECYCLE_SCRIPT: 'postinstall' -> 'node scripts/postinstall.js' SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/app.plugin.js:39 (+3 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/app.plugin.js:41 (+3 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/postinstall.js:35 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	188d	—	—	—	Unverified Signal	—	npm	latest	—	—	🪝 🌐
Package purpose: Browser dashboard for Claude Code and Codex — monitor every agent session live, chat with agents, and manage all your sessions from one screen. Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/assets/index-D3IJElM-.js:1 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/server-lib/remote-pty.js:39 (+2 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/server-lib/remote-workspaces.js:65 (+2 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/server.js:488 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	202d	20	51	↑0.1/day	SUSPICIOUS	supabase	npm	0.2.0	alfredo salzillo alfredosalzillo93@gmail.com	gmail.com
Package purpose: A proxy utility to integrate Supabase with Next.js Middleware. It helps protect specific routes by checking Supabase session claims and handles redirects for unauthorized access. Claimed homepage: https://github.com/alfredosalzillo/supabase-next-auth-proxy#readme Matched naming pattern: supabase-supabase-auth Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 202 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 20/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 51 lines, 2.7 kB across 3 files (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('SUPABASE'). HIGHPublisher email 'alfredosalzillo93@gmail.com' is not affiliated with official vendor domain. HIGHPackage registered recently (176 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	204d	—	—	—	Unverified Signal	—	npm	latest	Quantiya	—	🪝 🌐
Package purpose: Control Claude Code from your iPhone and Android — real-time sync, approve file edits, send prompts by voice. Part of CodeVibe. Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/server.js:1 SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/server.js:14 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/server.js:1 SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/dist/server.js:2 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	204d	—	—	—	Unverified Signal	—	npm	latest	Gyanesh Kumar	—	🪝
Package purpose: Run multiple Claude CLI accounts with shared settings, plugins, marketplace sync, and backup/restore Static code signals: LIFECYCLE_SCRIPT: 'postinstall' -> 'node bin/postinstall.js' SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/bin/claude-multi.js:2 (+1 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/bin/claude-multi.js:11 (+1 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/postinstall.js:22 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	206d	15	130	↑0.1/day	SUSPICIOUS	llama	pypi	0.1.0	—	—
Package purpose: LlamaIndex tools for DocAPI — generate PDFs, screenshots, and invoices Claimed homepage: https://pypi.org/project/llama-index-tools-docapi/ Matched naming pattern: llama-llama-tools Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 206 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 130 lines, 5.4 kB across 2 files (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'None' is not affiliated with official vendor domain. HIGHPackage registered recently (179 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	206d	35	146	↑0.2/day	SUSPICIOUS	perplexity	pypi	0.2.2	— reto@retostamm.com	retostamm.com	🪝
Package purpose: Tiny MCP server for Perplexity Sonar web search Claimed homepage: https://pypi.org/project/perplexity-sonar-mcp/ Matched naming pattern: perplexity-perplexity-mcp Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 206 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 35/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 146 lines, 6.2 kB across 2 files (TINY_CODEBASE) Automated signals flagged: HIGHClaims critical enterprise brand identity ('PERPLEXITY'). HIGHPublisher email 'reto@retostamm.com' is not affiliated with official vendor domain. HIGHPackage registered recently (180 days ago) during the active AI hallucination slopsquatting wave. HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in perplexity_sonar_mcp-0.2.2/src/perplexity_sonar_mcp/server.py:44 Static code signals: SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in perplexity_sonar_mcp-0.2.2/src/perplexity_sonar_mcp/server.py:44 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	206d	—	—	—	Unverified Signal	—	npm	latest	APort Technologies Inc.	—	🪝
Package purpose: APort guardrails for Claude Code — PreToolUse hook Static code signals: MISSING_SOURCE_REPOSITORY_URL CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/dist/index.js:25 (+2 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:29 (+1 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	221d	—	—	—	Unverified Signal	—	npm	latest	—	—	🪝
Static code signals: LIFECYCLE_SCRIPT: 'postinstall' -> 'bun ./postinstall.mjs \|\| node ./postinstall.mjs' MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/postinstall.mjs:122 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	222d	—	—	—	Unverified Signal	—	npm	latest	Leonardo Gomide	—	🪝 🌐
Package purpose: CLI tool to manage multiple API providers and launch Claude Code with the correct environment variables Static code signals: SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/cli.js:2171 (+2 more occurrence(s) elsewhere) SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/cli.js:34 (+1 more occurrence(s) elsewhere) SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/cli.js:1318 (+1 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cli.js:381 (+2 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/dist/cli.js:848 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	234d	—	—	—	Unverified Signal	—	npm	latest	Nomadcxx	—	🪝 🌐
Package purpose: No prompt limits. No broken streams. Full thinking + tool support. Your Cursor subscription, properly integrated. Static code signals: SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cli/discover.js:223 (+26 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/index.js:9157 (+3 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/index.js:13839 (+3 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/index.js:2678 (+7 more occurrence(s) elsewhere) SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index.js:4677 (+3 more occurrence(s) elsewhere) SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:14289 (+5 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	234d	—	—	—	SUSPICIOUS	—	npm	latest	Cognium Labs	—	🪝 🌐
Package purpose: High-performance Static Application Security Testing (SAST) library for detecting security vulnerabilities through taint analysis Static code signals: SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/core/circle-ir-core.cjs:2446 (+10 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/core/circle-ir-core.cjs:4116 (+3 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/core/circle-ir-core.cjs:13002 (+3 more occurrence(s) elsewhere) SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/core/circle-ir-core.cjs:1584 (+8 more occurrence(s) elsewhere) ANTI_ANALYSIS_EVASION: 'TLS / SSL Verification Bypass (Defense Evasion)' found in package/dist/browser/circle-ir.js:46346 (+4 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'vm.runInContext' found in package/dist/browser/circle-ir.js:17817 (+1 more occurrence(s) elsewhere) SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/browser/circle-ir.js:43423 (+1 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/browser/circle-ir.js:25263 (+8 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	238d	—	—	—	Unverified Signal	—	npm	latest	Demian Ilnutskyi	—	🪝 🌐
Package purpose: Optimized Next Intl Package Special for App Router and Cloudflare Static code signals: SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/src/vite/build_id_asset.js:8 (+14 more occurrence(s) elsewhere) SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/src/firebase_auth/decode_jwt_payload.js:7 SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/src/cloudflare_fetch/fetch_with_fallback.js:5 (+7 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/src/vite/react_eval_stub.js:32 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	241d	—	—	—	Unverified Signal	—	npm	latest	—	—	🪝 🌐
Package purpose: CmdCtrl daemon for VS Code + GitHub Copilot - connects Copilot Chat sessions to the CmdCtrl orchestration server Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/dist/adapter/cdp-client.js:42 (+1 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/config/config.js:74 (+3 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/commands/register.js:42 SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/commands/register.js:151 (+3 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	241d	—	—	—	Unverified Signal	—	npm	latest	nitishxyz	—	🪝
Package purpose: AI-powered development assistant CLI - npm installer Static code signals: LIFECYCLE_SCRIPT: 'postinstall' -> 'node start.js' SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/start.js:42 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/start.js:32 SYSTEM_PERSISTENCE_TAMPERING: 'Shell Profile Backdoor Injection' found in package/start.js:242 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	255d	—	—	—	Unverified Signal	—	npm	latest	—	—	🪝 🌐
Package purpose: BIM Engine SDK for Vue2, Vue3, React and HTML Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/basis/basis_transcoder.js:9 (+13 more occurrence(s) elsewhere) SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/draco/draco_decoder.js:22 SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/chunks/engine-gaussian-CQdrGBYh.js:6617 (+1 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/distGaussian/gaussian.es.js:2555 (+2 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	258d	—	—	—	Unverified Signal	—	pypi	0.106.0	—	—	🪝
Package purpose: Multi-account manager and skills suite for Claude Code and Codex: live usage tracking, evidence-safe account switching, swap recommendations, tray app, and web dashboard Static code signals: CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in claude_jacked-0.106.0/jacked/cli.py:1345 SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_jacked-0.106.0/jacked/cli.py:569 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_jacked-0.106.0/jacked/cli.py:143 SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_jacked-0.106.0/jacked/dcr_settings.py:527 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_jacked-0.106.0/jacked/findbin.py:36 SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_jacked-0.106.0/jacked/launch.py:356 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in claude_jacked-0.106.0/jacked/launch.py:1081 SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in claude_jacked-0.106.0/jacked/packs.py:765 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	279d	—	—	—	Unverified Signal	—	npm	latest	Anne Schuth	—	🪝 🌐
Package purpose: Run Claude Code from Slack or Mattermost. Sessions stream live into threads where your whole team can watch and steer. Static code signals: SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/mcp/mcp-server.js:2907 SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/mcp/mcp-server.js:13182 SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/mcp/mcp-server.js:13191 SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/mcp/mcp-server.js:19393 SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/dist/mcp/mcp-server.js:17246 SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/mcp/mcp-server.js:38602 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/mcp/mcp-server.js:12754 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	65	377d	9	19	↑0.0/day	SUSPICIOUS	langchain	pypi	0.1.0	—	—
Package purpose: Utility package for LangChain support Claimed homepage: https://pypi.org/project/langchain-support/ Matched naming pattern: python-langchain-support Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 377 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 9/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 19 lines, 779 Bytes across 2 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'langchain-support' matches AI hallucination template [python] + [langchain] + [support]. HIGHClaims critical enterprise brand identity ('LANGCHAIN'). HIGHPublisher email 'None' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	387d	2	69	↑0.0/day	SUSPICIOUS	amazon	pypi	1.0.2	Zhongshuizhou zhongshuizhou@qq.com	qq.com
Package purpose: RPA automated execution program for TikTok Claimed homepage: https://www.jeoshi.com Matched naming pattern: rpa-amazon-buyer Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 387 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 2/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 69 lines, 3.5 kB across 12 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'rpa-amazon-buyer' matches AI hallucination template [rpa] + [amazon] + [buyer]. HIGHClaims critical enterprise brand identity ('AMAZON'). HIGHPublisher email 'zhongshuizhou@qq.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	389d	19	17	↑0.0/day	SUSPICIOUS	amazon	pypi	0.1.2	— daviddum345@gmail.com	gmail.com
Package purpose: A package to fetch Amazon product prices. Claimed homepage: https://pypi.org/project/amazon-pricepal/ Matched naming pattern: python-amazon-pricepal Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 389 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 19/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 17 lines, 765 Bytes across 1 file (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'amazon-pricepal' matches AI hallucination template [python] + [amazon] + [pricepal]. HIGHClaims critical enterprise brand identity ('AMAZON'). HIGHPublisher email 'daviddum345@gmail.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	396d	11	17	↑0.0/day	SUSPICIOUS	openai	pypi	3.584.43.3842	— mcpbind@example.com	example.com
Package purpose: MCP Server Package: openai-websearch-mcp Claimed homepage: https://pypi.org/project/mcpbind-openai-websearch-mcp/ Matched naming pattern: mcpbind-openai-websearch Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 396 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 11/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 17 lines, 471 Bytes across 2 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'mcpbind-openai-websearch-mcp' matches AI hallucination template [mcpbind] + [openai] + [websearch]. HIGHClaims critical enterprise brand identity ('OPENAI'). HIGHPublisher email 'mcpbind@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	396d	9	17	↑0.0/day	SUSPICIOUS	google	pypi	3.577.30.9953	— mcpbind@example.com	example.com
Package purpose: MCP Server Package: google-analytics-mcp Claimed homepage: https://pypi.org/project/mcpbind-google-analytics-mcp/ Matched naming pattern: mcpbind-google-analytics Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 396 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 9/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 17 lines, 471 Bytes across 2 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'mcpbind-google-analytics-mcp' matches AI hallucination template [mcpbind] + [google] + [analytics]. HIGHClaims critical enterprise brand identity ('GOOGLE'). HIGHPublisher email 'mcpbind@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	396d	0	17	↑0.0/day	SUSPICIOUS	stripe	pypi	3.573.44.3084	— mcpbind@example.com	example.com
Package purpose: MCP Server Package: stripe-agent-toolkit Claimed homepage: https://pypi.org/project/mcpbind-stripe-agent-toolkit/ Matched naming pattern: mcpbind-stripe-agent Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 396 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 17 lines, 471 Bytes across 2 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'mcpbind-stripe-agent-toolkit' matches AI hallucination template [mcpbind] + [stripe] + [agent]. HIGHClaims critical enterprise brand identity ('STRIPE'). HIGHPublisher email 'mcpbind@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	396d	7	17	↑0.0/day	SUSPICIOUS	microsoft	pypi	3.458.56.9547	— mcpbind@example.com	example.com
Package purpose: MCP Server Package: microsoft-fabric-rti-mcp Claimed homepage: https://pypi.org/project/mcpbind-microsoft-fabric-rti-mcp/ Matched naming pattern: mcpbind-microsoft-fabric Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 396 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 7/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 17 lines, 487 Bytes across 2 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'mcpbind-microsoft-fabric-rti-mcp' matches AI hallucination template [mcpbind] + [microsoft] + [fabric]. HIGHClaims critical enterprise brand identity ('MICROSOFT'). HIGHPublisher email 'mcpbind@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	396d	0	17	↑0.0/day	SUSPICIOUS	binance	pypi	3.451.45.1959	— mcpbind@example.com	example.com
Package purpose: MCP Server Package: binance-mcp-server Claimed homepage: https://pypi.org/project/mcpbind-binance-mcp-server/ Matched naming pattern: mcpbind-binance-mcp Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 396 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 17 lines, 463 Bytes across 2 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'mcpbind-binance-mcp-server' matches AI hallucination template [mcpbind] + [binance] + [mcp]. HIGHClaims critical enterprise brand identity ('BINANCE'). HIGHPublisher email 'mcpbind@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	396d	4	17	↑0.0/day	SUSPICIOUS	workspace	pypi	3.378.19.9413	— mcpbind@example.com	example.com
Package purpose: MCP Server Package: workspace-mcp Claimed homepage: https://pypi.org/project/mcpbind-workspace-mcp/ Matched naming pattern: mcpbind-workspace-mcp Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 396 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 4/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 17 lines, 443 Bytes across 2 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'mcpbind-workspace-mcp' matches AI hallucination template [mcpbind] + [workspace] + [mcp]. HIGHClaims critical enterprise brand identity ('WORKSPACE'). HIGHPublisher email 'mcpbind@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	396d	0	17	↑0.0/day	SUSPICIOUS	chroma	pypi	3.330.43.4976	— mcpbind@example.com	example.com
Package purpose: MCP Server Package: chroma-mcp Claimed homepage: https://pypi.org/project/mcpbind-chroma-mcp/ Matched naming pattern: mcpbind-chroma-mcp Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 396 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 17 lines, 431 Bytes across 2 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'mcpbind-chroma-mcp' matches AI hallucination template [mcpbind] + [chroma] + [mcp]. HIGHClaims critical enterprise brand identity ('CHROMA'). HIGHPublisher email 'mcpbind@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	396d	0	17	↑0.0/day	SUSPICIOUS	google	pypi	3.241.33.7653	— mcpbind@example.com	example.com
Package purpose: MCP Server Package: mcp_google_email Claimed homepage: https://pypi.org/project/mcpbind-mcp-google-email/ Matched naming pattern: mcpbind-google-google Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 396 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 17 lines, 455 Bytes across 2 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'mcpbind-mcp-google-email' matches AI hallucination template [mcpbind] + [google] + [google]. HIGHClaims critical enterprise brand identity ('GOOGLE'). HIGHPublisher email 'mcpbind@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	397d	38	8	↑0.1/day	SUSPICIOUS	mistral	pypi	0.0.4	Florian Peschke florian.peschke@hyand.com	hyand.com
Package purpose: Mistral AI integration for AeroAI Claimed homepage: https://pypi.org/project/aeroai-mistral/ Matched naming pattern: python-mistral-aeroai Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 397 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 38/month, 14/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 218 Bytes across 2 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'aeroai-mistral' matches AI hallucination template [python] + [mistral] + [aeroai]. HIGHClaims critical enterprise brand identity ('MISTRAL'). HIGHPublisher email 'florian.peschke@hyand.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	420d	9	8	↑0.0/day	SUSPICIOUS	langchain	pypi	0.0.1	— you@example.com	example.com
Package purpose: A lean, lightweight version of LangChain. Claimed homepage: https://pypi.org/project/langchain-lean/ Matched naming pattern: python-langchain-lean Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 420 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 9/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 306 Bytes across 2 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'langchain-lean' matches AI hallucination template [python] + [langchain] + [lean]. HIGHClaims critical enterprise brand identity ('LANGCHAIN'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →

Package: pypi · 0.1.0

Author: Voxell, Inc.

Package purpose: LlamaIndex embeddings for Forge — Voxell's text-embedding API (turbo/pro/ultra; ultra = Qwen3-Embedding-8B, ~75+ avg MTEB, #4 English).

Claimed homepage: https://pypi.org/project/llama-index-embeddings-forge/

Official vendor account: No

Days since publish: 126

Code-only verdict: BENIGN_COMMUNITY

Registry downloads: 15/month

Codebase size: 122 lines (TINY_CODEBASE)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('LLAMA').
HIGHPublisher email 'None' is not affiliated with official vendor domain.
HIGHPackage registered recently (100 days ago) during the active AI hallucination slopsquatting wave.
HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_index_embeddings_forge-0.1.0/llama_index/embeddings/forge/base.py:65

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: npm · 0.2.0

Author: alfredo salzillo (alfredosalzillo93@gmail.com)

Package purpose: A proxy utility to integrate Supabase with Next.js Middleware. It helps protect specific routes by checking Supabase session claims and handles redirects for unauthorized access.

Claimed homepage: https://github.com/alfredosalzillo/supabase-next-auth-proxy#readme

Official vendor account: No

Days since publish: 202

Code-only verdict: BENIGN_COMMUNITY

Registry downloads: 20/month

Codebase size: 51 lines (TINY_CODEBASE)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('SUPABASE').
HIGHPublisher email 'alfredosalzillo93@gmail.com' is not affiliated with official vendor domain.
HIGHPackage registered recently (176 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

SHARE INTELLIGENCE WIRE