🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
65 428d 15 45 ↑0.0/day
SUSPICIOUS
google npm 1.3.0 Florian Traverse —
Package purpose: QS wrapper which Autodetects signature parameter and replace it with a signature according to https://developers.google.com/maps/documentation/business/webservices/auth#digital_signatures
Claimed homepage: https://github.com/temsa/qs-google-signature#readme
Matched naming pattern: qs-google-signature3
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 428
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 45 lines, 1.7 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'qs-google-signature3' matches AI hallucination template [qs] + [google] + [signature3].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 434d 8 46 ↑0.0/day
SUSPICIOUS
chroma pypi 0.1.0 — tomoko.uchida.1111@gmail.com gmail.com
Package purpose: ChromaDB integration for embcli
Claimed homepage: https://pypi.org/project/embcli-chroma/
Matched naming pattern: python-chroma-embcli
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 434
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 46 lines, 2.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'embcli-chroma' matches AI hallucination template [python] + [chroma] + [embcli].
  • HIGHClaims critical enterprise brand identity ('CHROMA').
  • HIGHPublisher email 'tomoko.uchida.1111@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 439d — — —
SUSPICIOUS
— npm latest — — 🪝 🌐
Package purpose: Reusable Shopify components for theme projects
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'process.binding/mainModule' found in package/assets/aliyun-oss-sdk-6.20.0.min.js:4
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/assets/aliyun-oss-sdk-6.20.0.min.js:4
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/assets/aliyun-oss-sdk-6.20.0.min.js:4 (+4 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/scripts/publish-npm.js:6
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/publish-npm.js:39

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 441d 18 53 ↑0.0/day
SUSPICIOUS
microsoft npm 0.0.1 Akshay Panchivala —
Package purpose: NPM tool for converting files and office documents to Markdown.
Claimed homepage: https://github.com/AkshayPanchivala/microsoft-markitdown#readme
Matched naming pattern: node-microsoft-markitdown
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 441
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 53 lines, 2.2 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'microsoft-markitdown' matches AI hallucination template [node] + [microsoft] + [markitdown].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 451d 0 33 ↑0.0/day
SUSPICIOUS
circle pypi 0.1.3 Austine Onwubiko austineonwubiko@gmail.com gmail.com
Package purpose: A simple Pygame utility for rectangle-circle collision detection.
Claimed homepage: https://github.com/austinewoody/collide_circle
Matched naming pattern: python-circle-collide
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 451
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 33 lines, 1.3 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'collide-circle' matches AI hallucination template [python] + [circle] + [collide].
  • HIGHClaims critical enterprise brand identity ('CIRCLE').
  • HIGHPublisher email 'austineonwubiko@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 452d 0 119 ↑0.0/day
SUSPICIOUS
supabase pypi 0.0.0 — darwinsherrerac@gmail.com gmail.com
Package purpose: It is an extension of the bisslog library to support processes with the Supabase service using the official Python SDK.
Claimed homepage: https://pypi.org/project/bisslog-supabase/
Matched naming pattern: python-supabase-bisslog
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 452
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 119 lines, 5.1 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'bisslog-supabase' matches AI hallucination template [python] + [supabase] + [bisslog].
  • HIGHClaims critical enterprise brand identity ('SUPABASE').
  • HIGHPublisher email 'darwinsherrerac@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 455d 7 72 ↑0.0/day
SUSPICIOUS
phantom pypi 0.1.0 Arjun M —
Package purpose: A lightweight data cleaning library for Python
Claimed homepage: https://github.com/yourusername/phantom_cleaner
Matched naming pattern: python-phantom-cleaner
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 455
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 72 lines, 2.8 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'phantom-cleaner' matches AI hallucination template [python] + [phantom] + [cleaner].
  • HIGHClaims critical enterprise brand identity ('PHANTOM').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 456d 26 49 ↑0.1/day
SUSPICIOUS
elevenlabs pypi 0.1.0 — — 🪝
Package purpose: ElevenLabs plugin for GetStream
Claimed homepage: https://pypi.org/project/getstream-plugins-elevenlabs/
Matched naming pattern: getstream-elevenlabs-elevenlabs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 456
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 26/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 49 lines, 2.0 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'getstream-plugins-elevenlabs' matches AI hallucination template [getstream] + [elevenlabs] + [elevenlabs].
  • HIGHClaims critical enterprise brand identity ('ELEVENLABS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ./tts/tts.py:28
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in ./tts/tts.py:28

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 465d 24 98 ↑0.1/day
SUSPICIOUS
workspace pypi 1.1.2 Your Name your.email@example.com example.com
Package purpose: Generate VS Code workspace files for multi-package projects
Claimed homepage: https://pypi.org/project/vscode-workspace-config-generator/
Matched naming pattern: vscode-workspace-config
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 465
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 24/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 98 lines, 3.7 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'vscode-workspace-config-generator' matches AI hallucination template [vscode] + [workspace] + [config].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 465d 6 96 ↑0.0/day
SUSPICIOUS
workspace pypi 1.0.1 Your Name your.email@example.com example.com
Package purpose: Generate VS Code workspace files for multi-package projects
Claimed homepage: https://pypi.org/project/workspace-generator/
Matched naming pattern: python-workspace-generator
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 465
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 6/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 96 lines, 3.4 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'workspace-generator' matches AI hallucination template [python] + [workspace] + [generator].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 487d 38 35 ↑0.1/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.Workloads/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 487
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 38/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 35 lines, 1.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-workloads' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 487d 49 59 ↑0.1/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.AI.Text/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 487
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 49/month, 23/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 59 lines, 2.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-ai-text' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 487d 47 71 ↑0.1/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.AI.Imaging/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 487
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 47/month, 34/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 71 lines, 2.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-ai-imaging' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 487d 44 44 ↑0.1/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.AI.ContentSafety/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 487
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 44/month, 31/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 44 lines, 1.8 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-ai-contentsafety' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 487d 94 45 ↑0.2/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.AI/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 487
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 94/month, 23/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 45 lines, 1.8 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-ai' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 487d 13 41 ↑0.0/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Graphics.Imaging/
Matched naming pattern: winui3-microsoft-graphics
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 487
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 13/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 41 lines, 1.7 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-graphics-imaging' matches AI hallucination template [winui3] + [microsoft] + [graphics].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 493d 18 100 ↑0.0/day
SUSPICIOUS
vllm pypi 0.0.4 — nikolai.rozanov@gmail.com gmail.com
Package purpose: VLLM & Unsloth Wrapper for simple local inference.
Claimed homepage: https://pypi.org/project/simple-vllm/
Matched naming pattern: python-vllm-simple
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 493
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 18/month, 13/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 100 lines, 5.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'simple-vllm' matches AI hallucination template [python] + [vllm] + [simple].
  • HIGHClaims critical enterprise brand identity ('VLLM').
  • HIGHPublisher email 'nikolai.rozanov@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 494d 11 76 ↑0.0/day
SUSPICIOUS
google pypi 0.1.5 — jonesnoah45010@gmail.com gmail.com
Package purpose: An simple extension of gdown that adds redundancy checks
Claimed homepage: https://pypi.org/project/noahs-google-drive-downloader/
Matched naming pattern: noahs-google-drive
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 494
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 76 lines, 3.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'noahs-google-drive-downloader' matches AI hallucination template [noahs] + [google] + [drive].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'jonesnoah45010@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 499d 7 79 ↑0.0/day
SUSPICIOUS
alchemy pypi 1.3.3 JSON Alchemy Team openhands@all-hands.dev all-hands.dev
Package purpose: Python bindings for the JSON Alchemy C library
Claimed homepage: https://github.com/amaye15/AIMv2-rs
Matched naming pattern: aimv2-alchemy-alchemy
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 499
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 79 lines, 2.7 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'aimv2-json-alchemy' matches AI hallucination template [aimv2] + [alchemy] + [alchemy].
  • HIGHClaims critical enterprise brand identity ('ALCHEMY').
  • HIGHPublisher email 'openhands@all-hands.dev' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 499d 18 141 ↑0.0/day
SUSPICIOUS
google pypi 1.1.2 Jankovn — 🪝
Package purpose: Pytest custom features, e.g. fixtures and various tests. Aimed to emulate Google Cloud Storage service
Claimed homepage: https://pypi.org/project/pytest-google-cloud-storage/
Matched naming pattern: pytest-google-cloud
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 499
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 18/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 141 lines, 7.1 kB across 6 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'pytest-google-cloud-storage' matches AI hallucination template [pytest] + [google] + [cloud].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in pytest_google_cloud_storage-1.1.2/pytest_gcs/storage/plugin.py:107
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in pytest_google_cloud_storage-1.1.2/pytest_gcs/storage/plugin.py:107

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 507d 5 31 ↑0.0/day
SUSPICIOUS
gcp pypi 0.1.0 — atoosa.nasiri@gmail.com gmail.com
Package purpose: Utilities for interacting with GCP Storage and Scheduler
Claimed homepage: https://pypi.org/project/gcp-toolkit/
Matched naming pattern: python-gcp-toolkit
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 507
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 31 lines, 1.4 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'gcp-toolkit' matches AI hallucination template [python] + [gcp] + [toolkit].
  • HIGHClaims critical enterprise brand identity ('GCP').
  • HIGHPublisher email 'atoosa.nasiri@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 508d 8 67 ↑0.0/day
SUSPICIOUS
perplexity pypi 0.1.1 — manoj@agentr.dev agentr.dev
Package purpose: A Universal MCP Application: universal_mcp_perplexity
Claimed homepage: https://pypi.org/project/universal-mcp-perplexity/
Matched naming pattern: universal-perplexity-perplexity
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 508
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 8/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 67 lines, 3.1 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'universal-mcp-perplexity' matches AI hallucination template [universal] + [perplexity] + [perplexity].
  • HIGHClaims critical enterprise brand identity ('PERPLEXITY').
  • HIGHPublisher email 'manoj@agentr.dev' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 512d 38 48 ↑0.1/day
SUSPICIOUS
llama pypi 0.2 Simon Willison —
Package purpose: Interact with llama-server models
Claimed homepage: https://pypi.org/project/llm-llama-server/
Matched naming pattern: llm-llama-server
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 512
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 38/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 48 lines, 1.6 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llm-llama-server' matches AI hallucination template [llm] + [llama] + [server].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 515d 15 66 ↑0.0/day
SUSPICIOUS
google pypi 0.1.3 Ivan Khomich —
Package purpose: Асинхронная библиотека для перевода через Google с поддержкой прокси
Claimed homepage: https://pypi.org/project/trs-google-lib/
Matched naming pattern: trs-google-lib
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 515
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 15/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 66 lines, 3.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'trs-google-lib' matches AI hallucination template [trs] + [google] + [lib].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 523d 9 107 ↑0.0/day
SUSPICIOUS
polygon pypi 0.1.1 — igor@dimensionreducers.com dimensionreducers.com 🪝
Package purpose: A simple package to read financial data from Polygon.io
Claimed homepage: https://pypi.org/project/polygon-reader/
Matched naming pattern: python-polygon-reader
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 523
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 107 lines, 6.1 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'polygon-reader' matches AI hallucination template [python] + [polygon] + [reader].
  • HIGHClaims critical enterprise brand identity ('POLYGON').
  • HIGHPublisher email 'igor@dimensionreducers.com' is not affiliated with official vendor domain.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in polygon_reader-0.1.1/polygon_reader/reader.py:13
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in polygon_reader-0.1.1/polygon_reader/reader.py:13

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 523d 30 63 ↑0.1/day
SUSPICIOUS
google pypi 0.1.2 Jerry Ng —
Package purpose: Datasette plugin that adds Google Analytics tracking code to your Datasette instance
Claimed homepage: https://github.com/ngshiheng/datasette-google-analytics
Matched naming pattern: datasette-google-analytics
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 523
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 30/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 63 lines, 2.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'datasette-google-analytics' matches AI hallucination template [datasette] + [google] + [analytics].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 523d 28 36 ↑0.1/day
SUSPICIOUS
binance pypi 0.0.3 Daniel Lasota grossmann.root@gmail.com gmail.com
Package purpose: Orderbook implementation using Pybind11 and C++
Claimed homepage: https://www.youtube.com/watch?v=dQw4w9WgXcQ
Matched naming pattern: cpp-binance-orderbook
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 523
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 28/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 36 lines, 1.2 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'cpp-binance-orderbook' matches AI hallucination template [cpp] + [binance] + [orderbook].
  • HIGHClaims critical enterprise brand identity ('BINANCE').
  • HIGHPublisher email 'grossmann.root@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 525d 9 18 ↑0.0/day
SUSPICIOUS
polygon pypi 0.4.0 — gojunxing@gmail.com gmail.com
Package purpose: Convert Polygon packages to other formats, notably to CMS.
Claimed homepage: https://pypi.org/project/polygon-convert/
Matched naming pattern: python-polygon-convert
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 525
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 18 lines, 541 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'polygon-convert' matches AI hallucination template [python] + [polygon] + [convert].
  • HIGHClaims critical enterprise brand identity ('POLYGON').
  • HIGHPublisher email 'gojunxing@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 530d — — —
Unverified Signal
— npm latest — — 🪝 🌐
Package purpose: Vue 2.0 3D/2D 可视化组件库
Static code signals:
  • LIFECYCLE_SCRIPT: 'postinstall' -> 'patch-package'
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/fl-web-component.common.1.js:5659
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/fl-web-component.common.1.js:440

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 530d 12 30 ↑0.0/day
SUSPICIOUS
cursor pypi 0.7.7 — your.email@example.com example.com
Package purpose: A boilerplate project for Cursor IDE
Claimed homepage: https://pypi.org/project/cursor-boilerplate/
Matched naming pattern: python-cursor-boilerplate
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 530
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 30 lines, 1.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'cursor-boilerplate' matches AI hallucination template [python] + [cursor] + [boilerplate].
  • HIGHClaims critical enterprise brand identity ('CURSOR').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 540d 71 66 ↑0.1/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.Media.Capture/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 540
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 71/month, 45/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 66 lines, 2.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-media-capture' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 540d 14 49 ↑0.0/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.BadgeNotifications/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 540
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 14/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 49 lines, 1.9 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-badgenotifications' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 540d 31 33 ↑0.1/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.ApplicationModel.Background.UniversalBGTask/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 540
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 31/month, 27/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 33 lines, 1.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-applicationmodel-background-universalbgtask' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 540d 13 33 ↑0.0/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.ApplicationModel.Background/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 540
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 13/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 33 lines, 1.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-applicationmodel-background' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 540d 17 62 ↑0.0/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Security.Authentication.OAuth/
Matched naming pattern: winui3-microsoft-security
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 540
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 17/month, 25/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 62 lines, 2.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-security-authentication-oauth' matches AI hallucination template [winui3] + [microsoft] + [security].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 548d — — —
Unverified Signal
— pypi 0.2.7 — — 🪝
Package purpose: Easy AWS SSHing
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in aws_ssh_utils-0.2.7/aws_ssh_utils/cli_utils.py:125
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in aws_ssh_utils-0.2.7/aws_ssh_utils/cli_utils.py:104
  • CREDENTIAL_PATH_HARVESTING: 'SSH Directory / Private Keys (~/.ssh)' found in aws_ssh_utils-0.2.7/aws_ssh_utils/connection.py:40
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in aws_ssh_utils-0.2.7/aws_ssh_utils/connection.py:327
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in aws_ssh_utils-0.2.7/aws_ssh_utils/commands/emr_all.py:105
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in aws_ssh_utils-0.2.7/aws_ssh_utils/commands/healthcheck.py:220

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 555d 18 4 ↑0.0/day
SUSPICIOUS
workspace pypi 0.1.1 — —
Package purpose: A package for ai workspace (project) features.
Claimed homepage: https://pypi.org/project/ai-workspace/
Matched naming pattern: python-workspace-ai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 555
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 18/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 91 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'ai-workspace' matches AI hallucination template [python] + [workspace] + [ai].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 562d 19 89 ↑0.0/day
SUSPICIOUS
xrp pypi 0.2.0 kakz —
Package purpose: A cool XRP conversion library with extra tools.
Claimed homepage: https://pypi.org/project/XRP-CONVERTER/
Matched naming pattern: python-xrp-converter
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 562
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 19/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 89 lines, 3.2 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'xrp-converter' matches AI hallucination template [python] + [xrp] + [converter].
  • HIGHClaims critical enterprise brand identity ('XRP').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 566d 12 81 ↑0.0/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.Widgets.Providers/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 566
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 81 lines, 2.9 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-widgets-providers' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 566d 9 49 ↑0.0/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.Widgets.Notifications/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 566
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 49 lines, 1.9 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-widgets-notifications' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 566d 13 83 ↑0.0/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.Widgets.Feeds.Providers/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 566
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 13/month, 13/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 83 lines, 3.0 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-widgets-feeds-providers' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 566d 12 35 ↑0.0/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.Widgets/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 566
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 35 lines, 1.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-widgets' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 566d 49 79 ↑0.1/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.System.Power/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 566
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 49/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 79 lines, 2.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-system-power' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 566d 25 33 ↑0.0/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.System/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 566
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 25/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 33 lines, 1.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-system' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 566d 11 35 ↑0.0/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.Security.AccessControl/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 566
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 11/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 35 lines, 1.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-security-accesscontrol' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 566d 32 48 ↑0.1/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.PushNotifications/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 566
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 32/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 48 lines, 2.1 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-pushnotifications' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 566d 43 92 ↑0.1/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.Management.Deployment/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 566
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 43/month, 12/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 92 lines, 3.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-management-deployment' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 566d 72 33 ↑0.1/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.Globalization/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 566
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 72/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 33 lines, 1.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-globalization' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 566d 41 93 ↑0.1/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.AppNotifications.Builder/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 566
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 41/month, 14/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 93 lines, 2.9 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-appnotifications-builder' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 566d 30 86 ↑0.1/day
SUSPICIOUS
microsoft pypi 3.2.1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winui3-Microsoft.Windows.AppLifecycle/
Matched naming pattern: winui3-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 566
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 30/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 86 lines, 3.0 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winui3-microsoft-windows-applifecycle' matches AI hallucination template [winui3] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
« Prev Next »
LINK COPIED TO CLIPBOARD