🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
65 669d 14 34 ↑0.0/day
SUSPICIOUS
langgraph pypi 0.1.1 Airtop —
Package purpose: A small package containing class definitions and helpers for integrating Airtop into your LangGraph application
Claimed homepage: https://github.com/airtop-ai/airtop_langgraph_helpers
Matched naming pattern: airtop-langgraph-helpers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 669
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 14/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 34 lines, 2.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'airtop-langgraph-helpers' matches AI hallucination template [airtop] + [langgraph] + [helpers].
  • HIGHClaims critical enterprise brand identity ('LANGGRAPH').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 671d 10 141 ↑0.0/day
SUSPICIOUS
hf pypi 1.0.4 LEL 2324171649@qq.com qq.com
Package purpose: A tool to download files from Hugging Face repositories.
Claimed homepage: https://pypi.org/project/hf-down/
Matched naming pattern: python-hf-down
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 671
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 141 lines, 5.6 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'hf-down' matches AI hallucination template [python] + [hf] + [down].
  • HIGHClaims critical enterprise brand identity ('HF').
  • HIGHPublisher email '2324171649@qq.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 677d 21 36 ↑0.0/day
SUSPICIOUS
vllm pypi 0.1.2 valogan vaiden.logan@yahoo.com yahoo.com
Package purpose: A tool that allows you to use the OpenAI API with vLLM generate function
Claimed homepage: https://github.com/yourusername/my_package
Matched naming pattern: caai-vllm-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 677
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 21/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 36 lines, 1.6 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'caai-vllm-tools' matches AI hallucination template [caai] + [vllm] + [tools].
  • HIGHClaims critical enterprise brand identity ('VLLM').
  • HIGHPublisher email 'vaiden.logan@yahoo.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 679d 16 75 ↑0.0/day
SUSPICIOUS
supabase pypi 0.2.0 — —
Package purpose: Integrate supabase to FastAPI with less effort
Claimed homepage: https://pypi.org/project/fastapi-supabase/
Matched naming pattern: python-supabase-fastapi
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 679
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 75 lines, 3.1 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'fastapi-supabase' matches AI hallucination template [python] + [supabase] + [fastapi].
  • HIGHClaims critical enterprise brand identity ('SUPABASE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 683d 28 123 ↑0.0/day
SUSPICIOUS
llama pypi 0.2.0 — ll_nwpu@qq.com qq.com 🪝
Package purpose: OCR using LLAMA vision model, allowing configuring any OpenAI compliant endpoints and model names.
Claimed homepage: https://pypi.org/project/llama-ocr/
Matched naming pattern: python-llama-ocr
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 683
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 28/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 123 lines, 4.3 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-ocr' matches AI hallucination template [python] + [llama] + [ocr].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'll_nwpu@qq.com' is not affiliated with official vendor domain.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_ocr-0.2.0/src/llama_ocr/llama_ocr.py:12
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in llama_ocr-0.2.0/src/llama_ocr/llama_ocr.py:12

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 683d 9 117 ↑0.0/day
SUSPICIOUS
together pypi 0.0.1 — ahsen.khaliq@gmail.com gmail.com 🪝
Package purpose: A Python package for replicating Gradio applications using Together AI
Claimed homepage: https://pypi.org/project/together-gradio/
Matched naming pattern: python-together-gradio
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 683
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 117 lines, 4.9 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'together-gradio' matches AI hallucination template [python] + [together] + [gradio].
  • HIGHClaims critical enterprise brand identity ('TOGETHER').
  • HIGHPublisher email 'ahsen.khaliq@gmail.com' is not affiliated with official vendor domain.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in together_gradio-0.0.1/together_gradio/__init__.py:106
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in together_gradio-0.0.1/together_gradio/__init__.py:106

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 685d 9 109 ↑0.0/day
SUSPICIOUS
xai pypi 0.0.2 — ahsen.khaliq@gmail.com gmail.com 🪝
Package purpose: A Python package for creating Gradio applications with XAI models
Claimed homepage: https://pypi.org/project/xai-gradio/
Matched naming pattern: python-xai-gradio
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 685
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 109 lines, 4.3 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'xai-gradio' matches AI hallucination template [python] + [xai] + [gradio].
  • HIGHClaims critical enterprise brand identity ('XAI').
  • HIGHPublisher email 'ahsen.khaliq@gmail.com' is not affiliated with official vendor domain.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in xai_gradio-0.0.2/xai_gradio/__init__.py:93
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in xai_gradio-0.0.2/xai_gradio/__init__.py:93

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 685d 7 81 ↑0.0/day
SUSPICIOUS
perplexity pypi 0.0.1 — ahsen.khaliq@gmail.com gmail.com 🪝
Package purpose: A Python package for creating Gradio applications with Perplexity models
Claimed homepage: https://pypi.org/project/perplexity-gradio/
Matched naming pattern: python-perplexity-gradio
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 685
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 81 lines, 3.4 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'perplexity-gradio' matches AI hallucination template [python] + [perplexity] + [gradio].
  • HIGHClaims critical enterprise brand identity ('PERPLEXITY').
  • HIGHPublisher email 'ahsen.khaliq@gmail.com' is not affiliated with official vendor domain.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in perplexity_gradio-0.0.1/perplexity_gradio/__init__.py:64
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in perplexity_gradio-0.0.1/perplexity_gradio/__init__.py:64

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 692d 7 74 ↑0.0/day
SUSPICIOUS
chroma pypi 0.1.0 Amitav samit.rkl@gmail.com gmail.com
Package purpose: A helper library for Chroma database operations
Claimed homepage: https://github.com/amitwangdu/my_chroma_helper
Matched naming pattern: my-chroma-helper
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 692
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 74 lines, 3.7 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'my-chroma-helper' matches AI hallucination template [my] + [chroma] + [helper].
  • HIGHClaims critical enterprise brand identity ('CHROMA').
  • HIGHPublisher email 'samit.rkl@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 693d 29 3 ↑0.0/day
SUSPICIOUS
openai pypi 0.1.0 — rob@303sec.com 303sec.com
Package purpose: This package is an example of a Dependency Hallucination. There is no code in this package, it is just a placeholder to prevent exploitation.
Claimed homepage: https://pypi.org/project/openai-gym/
Matched naming pattern: python-openai-gym
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 693
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 29/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 3 lines, 218 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'openai-gym' matches AI hallucination template [python] + [openai] + [gym].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'rob@303sec.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 695d 50 124 ↑0.1/day
SUSPICIOUS
google pypi 1.1.1 — introboy333@gmail.com gmail.com
Package purpose: Google Dorking CLI Tool without API
Claimed homepage: https://pypi.org/project/google-dork/
Matched naming pattern: python-google-dork
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 695
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 50/month, 18/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 124 lines, 5.2 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'google-dork' matches AI hallucination template [python] + [google] + [dork].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'introboy333@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 698d 18 73 ↑0.0/day
SUSPICIOUS
xai pypi 0.2 Nick Mystic —
Package purpose: LLM plugin for models hosted by OpenRouter
Claimed homepage: https://pypi.org/project/llm-xai/
Matched naming pattern: python-xai-llm
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 698
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 73 lines, 3.0 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llm-xai' matches AI hallucination template [python] + [xai] + [llm].
  • HIGHClaims critical enterprise brand identity ('XAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 698d 27 57 ↑0.0/day
SUSPICIOUS
llama pypi 0.0.3 — jeffxtang@gmail.com gmail.com
Package purpose: A Quick Library with Llama 3.1/3.2 Tokenization - source https://github.com/jeffxtang/llama-tokens
Claimed homepage: https://pypi.org/project/llama-tokens/
Matched naming pattern: python-llama-tokens
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 698
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 27/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 57 lines, 2.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-tokens' matches AI hallucination template [python] + [llama] + [tokens].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'jeffxtang@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 700d 5 85 ↑0.0/day
SUSPICIOUS
workspace pypi 0.0.2 — maxm.dufresne@gmail.com gmail.com
Package purpose: Command Line Interface for managing projects in a multi-repository context by configuration.
Claimed homepage: https://pypi.org/project/multi-repo-workspace/
Matched naming pattern: multi-workspace-workspace
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 700
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 85 lines, 3.1 kB across 6 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'multi-repo-workspace' matches AI hallucination template [multi] + [workspace] + [workspace].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'maxm.dufresne@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 714d 4 117 ↑0.0/day
SUSPICIOUS
google pypi 1.0.0 Pyjri admin@pyjri.com pyjri.com
Package purpose: A Python library for scraping the Google search engine.
Claimed homepage: https://www.pyjri.com/
Matched naming pattern: ini-google-search
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 714
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 4/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 117 lines, 3.8 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'ini-google-search' matches AI hallucination template [ini] + [google] + [search].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'admin@pyjri.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 714d 9 47 ↑0.0/day
SUSPICIOUS
microsoft pypi 2.3.0.post1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winrt-Microsoft.Windows.Widgets.Notifications/
Matched naming pattern: winrt-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 714
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 47 lines, 1.9 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winrt-microsoft-windows-widgets-notifications' matches AI hallucination template [winrt] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 714d 1 45 ↑0.0/day
SUSPICIOUS
microsoft pypi 2.3.0.post1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winrt-Microsoft.Windows.Storage/
Matched naming pattern: winrt-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 714
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 1/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 45 lines, 1.8 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winrt-microsoft-windows-storage' matches AI hallucination template [winrt] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 714d 5 31 ↑0.0/day
SUSPICIOUS
microsoft pypi 2.3.0.post1 — —
Package purpose: Python projection of Windows Runtime (WinRT) APIs
Claimed homepage: https://pypi.org/project/winrt-Microsoft.Windows.Globalization/
Matched naming pattern: winrt-microsoft-windows
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 714
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 31 lines, 1.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'winrt-microsoft-windows-globalization' matches AI hallucination template [winrt] + [microsoft] + [windows].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 720d 7 24 ↑0.0/day
SUSPICIOUS
together pypi 1.0.6 Wael Hkiri wael.hkiri.dev@gmail.com gmail.com
Package purpose: A Python package capable of crawling Facebook page information.
Claimed homepage: https://github.com/wael-sudo2/together-forever
Matched naming pattern: python-together-forever
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 720
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 24 lines, 740 Bytes across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'together-forever' matches AI hallucination template [python] + [together] + [forever].
  • HIGHClaims critical enterprise brand identity ('TOGETHER').
  • HIGHPublisher email 'wael.hkiri.dev@gmail.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 724d 20 100 ↑0.0/day
SUSPICIOUS
elevenlabs pypi 0.4.5 Andy andychert@protonmail.com protonmail.com 🪝
Package purpose: ElevenLabs Text-to-Speech components for Haystack.
Claimed homepage: https://pypi.org/project/elevenlabs-haystack/
Matched naming pattern: python-elevenlabs-haystack
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 724
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 20/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 100 lines, 4.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'elevenlabs-haystack' matches AI hallucination template [python] + [elevenlabs] + [haystack].
  • HIGHClaims critical enterprise brand identity ('ELEVENLABS').
  • HIGHPublisher email 'andychert@protonmail.com' is not affiliated with official vendor domain.
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in elevenlabs_haystack-0.4.5/elevenlabs_haystack/component.py:34
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in elevenlabs_haystack-0.4.5/elevenlabs_haystack/component.py:34

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 734d 0 110 ↑0.0/day
SUSPICIOUS
mistralai pypi 0.5.1 — you@example.com example.com
Package purpose: llama-index multi-modal-llms mistral integration
Claimed homepage: https://pypi.org/project/llama-index-multi-modal-llms-mistralai/
Matched naming pattern: llama-mistralai-multi
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 734
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 110 lines, 4.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-multi-modal-llms-mistralai' matches AI hallucination template [llama] + [mistralai] + [multi].
  • HIGHClaims critical enterprise brand identity ('MISTRALAI').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 737d 20 30 ↑0.0/day
SUSPICIOUS
google pypi 14.0.1.0.1.dev5 Camptocamp, Odoo Community Association (OCA) support@odoo-community.org odoo-community.org
Package purpose: Configure Gmail mail servers with server_environment_files
Claimed homepage: https://github.com/OCA/server-env
Matched naming pattern: odoo14-google-mail
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 737
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 20/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 30 lines, 1.4 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'odoo14-addon-mail-environment-google-gmail' matches AI hallucination template [odoo14] + [google] + [mail].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'support@odoo-community.org' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 761d 8 15 ↑0.0/day
Possible Squatted Stub
huggingface pypi 0.0.3 — starworks5@gmail.com gmail.com
Package purpose: A scraper of huggingface repositories, invoking an IPFS model manager.
Claimed homepage: https://pypi.org/project/ipfs-huggingface-scraper-py/
Matched naming pattern: ipfs-huggingface-scraper
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 761
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 246 Bytes across 3 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ipfs-huggingface-scraper-py' matches AI hallucination template [ipfs] + [huggingface] + [scraper].
  • HIGHClaims critical enterprise brand identity ('HUGGINGFACE').
  • HIGHPublisher email 'starworks5@gmail.com' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 753 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (15 LOC, 3 file(s), 246 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 766d 39 113 ↑0.1/day
SUSPICIOUS
eth npm 1.2.0 0xisk 0xisk@proton.me proton.me
Package purpose: A Web-Worker package for generating spartan ECDSA proves in the browser using wasm.
Claimed homepage: https://github.com/anonklub/anonklub
Matched naming pattern: node-eth-halo2-eth-membership-worker
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 766
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 39/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 113 lines, 16.2 kB across 8 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@anonklub/halo2-eth-membership-worker' matches AI hallucination template [node] + [eth] + [halo2-eth-membership-worker].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • HIGHPublisher email '0xisk@proton.me' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 740 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/utils.js:22 (+1 more occurrence(s) elsewhere)
Static code signals:
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/utils.js:22 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 772d 14 20 ↑0.0/day
Possible Squatted Stub
openai pypi 0.1.1 Mahul Rana mahulrana007@gmail.com gmail.com
Package purpose: A module for interacting with OpenAI using prompt.
Claimed homepage: https://pypi.org/project/mr-openai-module/
Matched naming pattern: mr-openai-module
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 772
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 644 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'mr-openai-module' matches AI hallucination template [mr] + [openai] + [module].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'mahulrana007@gmail.com' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 764 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (20 LOC, 1 file(s), 644 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 774d 15 128 ↑0.0/day
SUSPICIOUS
coinbase npm 1.2.0 — —
Package purpose: SwapKit Wallet - Coinbase
Claimed homepage: https://github.com/thorswap/SwapKit
Matched naming pattern: node-coinbase-wallet-coinbase
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 774
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 128 lines, 6.5 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@lastnetwork/wallet-coinbase' matches AI hallucination template [node] + [coinbase] + [wallet-coinbase].
  • HIGHClaims critical enterprise brand identity ('COINBASE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 748 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 775d 18 127 ↑0.0/day
SUSPICIOUS
coinbase npm 1.0.21 — —
Package purpose: SwapKit Wallet - Coinbase
Claimed homepage: https://github.com/thorswap/SwapKit
Matched naming pattern: node-coinbase-wallet-coinbase
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 775
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 127 lines, 6.5 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@stormcloud266/wallet-coinbase' matches AI hallucination template [node] + [coinbase] + [wallet-coinbase].
  • HIGHClaims critical enterprise brand identity ('COINBASE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 749 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 778d 12 0 ↑0.0/day
Possible Squatted Stub
openai pypi 0.1.0 — srinathmkce@gmail.com gmail.com
Package purpose: Default template for PDM package
Claimed homepage: https://pypi.org/project/openai-batcher/
Matched naming pattern: python-openai-batcher
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 778
Registry downloads: 12/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 5 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'openai-batcher' matches AI hallucination template [python] + [openai] + [batcher].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'srinathmkce@gmail.com' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 771 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 5 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 780d 5 74 ↑0.0/day
SUSPICIOUS
google npm 0.1.0 Jiatong Wang —
Package purpose: record your website rank in google.com, developed by Microsoft MSN Money team
Matched naming pattern: msn-google-rank
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 780
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 74 lines, 3.1 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'msn-google-rank-recorder' matches AI hallucination template [msn] + [google] + [rank].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 754 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 795d 57 50 ↑0.1/day
SUSPICIOUS
amazon pypi 0.35 dgtlmoon dgtlmoon@gmail.com gmail.com
Package purpose: # Amazon price scraper plugin for changedetection.io This small plugin enhances the **"Restock & Price detection"** website watch mode for amazon.com URLs. A small scraper to get the price data from Amazon pages which can be used to improve the ["restock and price detection" mode in changedetectio
Claimed homepage: https://changedetection.io
Matched naming pattern: changedetection-amazon-amazon
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 795
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 57/month, 13/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 50 lines, 2.8 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'changedetection-io-amazon-price-scraper' matches AI hallucination template [changedetection] + [amazon] + [amazon].
  • HIGHClaims critical enterprise brand identity ('AMAZON').
  • HIGHPublisher email 'dgtlmoon@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 769 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 799d 0 16 ↑0.0/day
SUSPICIOUS
clerk pypi 0.0.1 Zeeland zeeland4work@gmail.com gmail.com
Package purpose: 🚀Python client of clerk.
Claimed homepage: https://github.com/Undertone0809/pyclerk
Matched naming pattern: python-clerk-python
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 799
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 16 lines, 548 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'python-clerk' matches AI hallucination template [python] + [clerk] + [python].
  • HIGHClaims critical enterprise brand identity ('CLERK').
  • HIGHPublisher email 'zeeland4work@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 789 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 801d 29 143 ↑0.0/day
SUSPICIOUS
google pypi 0.7.2 — —
Package purpose: Automate Google Forms
Claimed homepage: https://pypi.org/project/python-selenium-google-form/
Matched naming pattern: python-google-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 801
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 29/month, 13/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 143 lines, 6.7 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'python-selenium-google-form' matches AI hallucination template [python] + [google] + [google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 789 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 804d 16 19 ↑0.0/day
SUSPICIOUS
gemini pypi 0.2.0 — —
Package purpose: # hello_gemini `hello_gemini` is a simple Python package that contains a method to print a greeting message. Additionally, it includes a command line script to execute the method directly from the terminal. ## Features - `hello_gemini()`: Prints "Hi, this is gemini here". - Command line sc
Claimed homepage: https://pypi.org/project/hello-gemini/
Matched naming pattern: python-gemini-hello
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 804
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 19 lines, 534 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'hello-gemini' matches AI hallucination template [python] + [gemini] + [hello].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 797 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 811d 5 26 ↑0.0/day
SUSPICIOUS
google pypi 0.1.0 — —
Package purpose: nlpbridge google packge
Claimed homepage: https://github.com/Vitalis001/google/tree/main
Matched naming pattern: python-google-nlpbridge
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 811
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 26 lines, 927 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'nlpbridge-google' matches AI hallucination template [python] + [google] + [nlpbridge].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 800 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 813d 53 47 ↑0.1/day
SUSPICIOUS
metamask npm 1.0.10 William Bermudez — 🪝
Package purpose: Quickly pay with MetaMask. Pay with crypto
Claimed homepage: https://github.com/yourusername/leumas-metamask-quickpay#readme
Matched naming pattern: leumas-metamask-quickpay
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 813
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 53/month, 13/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 47 lines, 204.4 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'leumas-metamask-quickpay' matches AI hallucination template [leumas] + [metamask] + [quickpay].
  • HIGHClaims critical enterprise brand identity ('METAMASK').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 787 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.esm.js:1 (+1 more occurrence(s) elsewhere)
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.esm.js:1 (+1 more occurrence(s) elsewhere)
Static code signals:
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.esm.js:1 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.esm.js:1 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 814d 5 28 ↑0.0/day
SUSPICIOUS
ethereum npm 0.8.4 — —
Package purpose: 0.4.0
Claimed homepage: https://github.com/Kujian95/repo-for-tea#readme
Matched naming pattern: audio-ethereum-hail
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 814
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 28 lines, 685 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'audio-sill-hail-mood-ethereum' matches AI hallucination template [audio] + [ethereum] + [hail].
  • HIGHClaims critical enterprise brand identity ('ETHEREUM').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 788 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 814d 6 97 ↑0.0/day
SUSPICIOUS
arbitrum pypi 0.0.5 — developer@tirinox.ru tirinox.ru
Package purpose: XChainPy2 Arbitrum Client
Claimed homepage: https://pypi.org/project/xchainpy2-arbitrum/
Matched naming pattern: python-arbitrum-xchainpy2
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 814
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 97 lines, 3.2 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'xchainpy2-arbitrum' matches AI hallucination template [python] + [arbitrum] + [xchainpy2].
  • HIGHClaims critical enterprise brand identity ('ARBITRUM').
  • HIGHPublisher email 'developer@tirinox.ru' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 808 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 828d 6 23 ↑0.0/day
Possible Squatted Stub
crewai pypi 0.1 AI Anytime contact@aianytime.net aianytime.net
Package purpose: A library for monitoring CrewAI agents, including token usage, cost calculation, logging, carbon emissions, and more.
Claimed homepage: https://github.com/aianytime/crewai_monitoring
Matched naming pattern: python-crewai-monitoring
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 828
Registry downloads: 6/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 23 lines, 802 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'crewai-monitoring' matches AI hallucination template [python] + [crewai] + [monitoring].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • HIGHPublisher email 'contact@aianytime.net' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 820 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (23 LOC, 1 file(s), 802 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 830d 8 20 ↑0.0/day
SUSPICIOUS
sol npm 1.0.0 Ayowel —
Package purpose: CSL style for Journal of Sol-Gel Science and Technology
Claimed homepage: https://github.com/Ayowel/csl-support-js
Matched naming pattern: node-sol-csl-style-journal-of-sol-gel-science-and-technology
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 830
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 557 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@citation/csl-style-journal-of-sol-gel-science-and-technology' matches AI hallucination template [node] + [sol] + [csl-style-journal-of-sol-gel-science-and-technology].
  • HIGHClaims critical enterprise brand identity ('SOL').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 804 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 852d 6 28 ↑0.0/day
SUSPICIOUS
bybit npm 1.1.4 — —
Package purpose: Bybit integration providing list-bybit utility for Node
Claimed homepage: https://github.com/dropdisco/disco#readme
Matched naming pattern: node-bybit-list-bybit
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 852
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 28 lines, 685 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@vedrichz/list-bybit' matches AI hallucination template [node] + [bybit] + [list-bybit].
  • HIGHClaims critical enterprise brand identity ('BYBIT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 826 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 852d 5 111 ↑0.0/day
SUSPICIOUS
auth0 pypi 0.0.1 — — 🪝
Package purpose: Auth0 integration providing component utility for Streamlit
Claimed homepage: https://pypi.org/project/streamlit-auth0-component-pw1/
Matched naming pattern: streamlit-auth0-component
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 852
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 111 lines, 3.8 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'streamlit-auth0-component-pw1' matches AI hallucination template [streamlit] + [auth0] + [component].
  • HIGHClaims critical enterprise brand identity ('AUTH0').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 841 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in streamlit-auth0-component-pw1-0.0.1/auth0_component/__init__.py:98
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in streamlit-auth0-component-pw1-0.0.1/auth0_component/__init__.py:98

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 853d 6 67 ↑0.0/day
SUSPICIOUS
workspace npm 0.0.1 — —
Package purpose: This project was generated with [Angular CLI](https://github.com/angular/angular-cli) version 17.0.0.
Matched naming pattern: node-workspace-my-workspace
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 853
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 67 lines, 1.7 kB across 6 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@dineshchinta/my-workspace' matches AI hallucination template [node] + [workspace] + [my-workspace].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 827 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 854d 7 100 ↑0.0/day
SUSPICIOUS
web3 npm 0.0.0 — — 🪝
Package purpose: <div align="center"> <h2>Online React Store (Playwright testing)</h2> </div> A bad looking webstore implementation made with React, Material UI and Firebase for playwright testing.
Matched naming pattern: massa-web3-willard
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 854
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 100 lines, 3.1 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'massa-web3-willard-kerluke' matches AI hallucination template [massa] + [web3] + [willard].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 828 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/playwright.config.ts:17
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/playwright.config.ts:17

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 858d 6 84 ↑0.0/day
SUSPICIOUS
web3 npm 1.0.0 Mahmoud Ibrahiam —
Package purpose: react app with webpack & swc compiler
Matched naming pattern: massa-web3-mrs.
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 858
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 84 lines, 2.3 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'massa-web3-mrs.-bernice' matches AI hallucination template [massa] + [web3] + [mrs.].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 832 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 861d 0 15 ↑0.0/day
Possible Squatted Stub
elevenlabs pypi 0.1.0 Dear Norathee —
Package purpose: create multiple audio files at once
Claimed homepage: https://pypi.org/project/elevenlabs-bulk/
Matched naming pattern: python-elevenlabs-bulk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 861
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 1.3 kB across 6 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'elevenlabs-bulk' matches AI hallucination template [python] + [elevenlabs] + [bulk].
  • HIGHClaims critical enterprise brand identity ('ELEVENLABS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 850 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (15 LOC, 6 file(s), 1340 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 861d 7 78 ↑0.0/day
SUSPICIOUS
web3 npm 1.0.0 Kiril Panayotov Blagoev — 🪝
Package purpose: ![GitHub package.json dependency version (dev dep on branch)](https://img.shields.io/github/package-json/dependency-version/tihawk/browser-extension-boilerplate/dev/webextension-polyfill?style=flat-square) ![GitHub package.json dependency version (dev dep
Matched naming pattern: massa-web3-marvin
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 861
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 78 lines, 2.8 kB across 6 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'massa-web3-marvin-cassin-buckridge' matches AI hallucination template [massa] + [web3] + [marvin].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 835 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/webpack/webpack.config.js:5 (+2 more occurrence(s) elsewhere)
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/webpack/webpack.config.js:5 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 863d 6 20 ↑0.0/day
Possible Squatted Stub
cursor pypi 0.1.0 Sn s2222051@stu.musashino-u.ac.jp stu.musashino-u.ac.jp
Package purpose: This is an app that allows you to move the cursor using your facial movements.
Claimed homepage: https://github.com/suzuchoco/face_cursor
Matched naming pattern: python-cursor-face
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 863
Registry downloads: 6/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 991 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'face-cursor' matches AI hallucination template [python] + [cursor] + [face].
  • HIGHClaims critical enterprise brand identity ('CURSOR').
  • HIGHPublisher email 's2222051@stu.musashino-u.ac.jp' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 852 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (20 LOC, 1 file(s), 991 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 865d 5 88 ↑0.0/day
SUSPICIOUS
web3 npm 1.0.0 — —
Package purpose: HTML5 template with CSS, JavaScript, Chart.js, images, and fonts support. The build tool is included (CSS and JS optimization support).
Matched naming pattern: massa-web3-lauren
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 865
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 88 lines, 2.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'massa-web3-lauren-heaney' matches AI hallucination template [massa] + [web3] + [lauren].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 838 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 868d 30 125 ↑0.0/day
SUSPICIOUS
ripple npm 1.0.5 snskar125 —
Package purpose: Ripple Effect Component for React Native
Matched naming pattern: node-ripple-rn-ripple
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 868
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 30/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 125 lines, 5.0 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name '@snskar125/rn-ripple' matches AI hallucination template [node] + [ripple] + [rn-ripple].
  • HIGHClaims critical enterprise brand identity ('RIPPLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 842 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 869d 6 84 ↑0.0/day
SUSPICIOUS
web3 npm 1.0.0 Mahmoud Ibrahiam —
Package purpose: react app with webpack & swc compiler
Matched naming pattern: massa-web3-thomas
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 869
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 84 lines, 2.3 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'massa-web3-thomas-mosciski' matches AI hallucination template [massa] + [web3] + [thomas].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 843 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
« Prev Next »
LINK COPIED TO CLIPBOARD