🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
65 871d 15 29 ↑0.0/day
SUSPICIOUS
groq pypi 0.1.0 lavague-ai —
Package purpose: Groq integration for lavague
Claimed homepage: https://lavague.ai
Matched naming pattern: lavague-groq-groq
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 871
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 15/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 29 lines, 1.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'lavague-contexts-groq' matches AI hallucination template [lavague] + [groq] + [groq].
  • HIGHClaims critical enterprise brand identity ('GROQ').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 864 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 879d 9 100 ↑0.0/day
SUSPICIOUS
web3 npm 0.0.0 — — 🪝
Package purpose: <div align="center"> <h2>Online React Store (Playwright testing)</h2> </div> A bad looking webstore implementation made with React, Material UI and Firebase for playwright testing.
Matched naming pattern: massa-web3-meredith
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 879
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 100 lines, 3.1 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'massa-web3-meredith-pacocha' matches AI hallucination template [massa] + [web3] + [meredith].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 853 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/playwright.config.ts:17
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/playwright.config.ts:17

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 880d 11 78 ↑0.0/day
SUSPICIOUS
web3 npm 1.0.0 Kiril Panayotov Blagoev — 🪝
Package purpose: ![GitHub package.json dependency version (dev dep on branch)](https://img.shields.io/github/package-json/dependency-version/tihawk/browser-extension-boilerplate/dev/webextension-polyfill?style=flat-square) ![GitHub package.json dependency version (dev dep
Matched naming pattern: massa-web3-lonnie
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 880
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 78 lines, 2.8 kB across 6 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'massa-web3-lonnie-heathcote' matches AI hallucination template [massa] + [web3] + [lonnie].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 854 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/webpack/webpack.config.js:5 (+2 more occurrence(s) elsewhere)
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/webpack/webpack.config.js:5 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 881d 9 78 ↑0.0/day
SUSPICIOUS
web3 npm 1.0.0 Kiril Panayotov Blagoev — 🪝
Package purpose: ![GitHub package.json dependency version (dev dep on branch)](https://img.shields.io/github/package-json/dependency-version/tihawk/browser-extension-boilerplate/dev/webextension-polyfill?style=flat-square) ![GitHub package.json dependency version (dev dep
Matched naming pattern: massa-web3-alberto
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 881
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 78 lines, 2.8 kB across 6 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'massa-web3-alberto-franecki' matches AI hallucination template [massa] + [web3] + [alberto].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 855 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/webpack/webpack.config.js:5 (+2 more occurrence(s) elsewhere)
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/webpack/webpack.config.js:5 (+2 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 881d 7 84 ↑0.0/day
SUSPICIOUS
web3 npm 1.0.0 Mahmoud Ibrahiam —
Package purpose: react app with webpack & swc compiler
Matched naming pattern: massa-web3-margarita
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 881
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 84 lines, 2.3 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'massa-web3-margarita-williamson' matches AI hallucination template [massa] + [web3] + [margarita].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 855 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 884d 8 55 ↑0.0/day
SUSPICIOUS
web3 npm 1.0.0 — —
Package purpose: <h1 align="center">Welcome to Jass World 👋 </h1>
Matched naming pattern: massa-web3-sidney
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 884
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 55 lines, 1.7 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'massa-web3-sidney-herzog' matches AI hallucination template [massa] + [web3] + [sidney].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 858 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 884d 8 55 ↑0.0/day
SUSPICIOUS
web3 npm 1.0.0 — —
Package purpose: <h1 align="center">Welcome to Jass World 👋 </h1>
Matched naming pattern: massa-web3-sophie
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 884
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 55 lines, 1.7 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'massa-web3-sophie-upton' matches AI hallucination template [massa] + [web3] + [sophie].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 858 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 884d 11 55 ↑0.0/day
SUSPICIOUS
web3 npm 1.0.0 — —
Package purpose: <h1 align="center">Welcome to Jass World 👋 </h1>
Matched naming pattern: massa-web3-hilda
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 884
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 55 lines, 1.7 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'massa-web3-hilda-dare' matches AI hallucination template [massa] + [web3] + [hilda].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 858 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 888d 41 117 ↑0.0/day
SUSPICIOUS
llama pypi 3.0.1 Bjarne Oeverli bjarneocodes@gmail.com gmail.com 🪝
Package purpose: TAI [Terminal AI], a terminal AI assistant
Claimed homepage: https://pypi.org/project/lfg-llama/
Matched naming pattern: python-llama-lfg
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 888
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 41/month, 33/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 117 lines, 4.6 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'lfg-llama' matches AI hallucination template [python] + [llama] + [lfg].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'bjarneocodes@gmail.com' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 877 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in lfg_llama-3.0.1/tai/cli.py:115
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in lfg_llama-3.0.1/tai/cli.py:25
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in lfg_llama-3.0.1/tai/cli.py:115
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in lfg_llama-3.0.1/tai/cli.py:25

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 892d 4 9 ↑0.0/day
SUSPICIOUS
sol npm 1.0.0 — —
Package purpose: 12312312# simple-template
Claimed homepage: https://github.com/edevwarrior/terebro-sol-comptus-solitudo.git
Matched naming pattern: terebro-sol-comptus
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 892
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 4/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 9 lines, 230 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'terebro-sol-comptus-solitudo' matches AI hallucination template [terebro] + [sol] + [comptus].
  • HIGHClaims critical enterprise brand identity ('SOL').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 866 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 895d 5 14 ↑0.0/day
Possible Squatted Stub
eth pypi 0.0.1 yfincears —
Package purpose: A successful sign for python setup
Claimed homepage: https://pypi.org/project/eth-keybind/
Matched naming pattern: python-eth-keybind
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 895
Registry downloads: 5/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 809 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'eth-keybind' matches AI hallucination template [python] + [eth] + [keybind].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 884 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (14 LOC, 1 file(s), 809 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 898d 5 15 ↑0.0/day
Possible Squatted Stub
xai pypi 0.0.2 ucabdv1 ucabdv1@ucl.ac.uk ucl.ac.uk
Package purpose: A short description of your package
Claimed homepage: https://pypi.org/project/lens-xai/
Matched naming pattern: python-xai-lens
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 898
Registry downloads: 5/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 532 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'lens-xai' matches AI hallucination template [python] + [xai] + [lens].
  • HIGHClaims critical enterprise brand identity ('XAI').
  • HIGHPublisher email 'ucabdv1@ucl.ac.uk' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 887 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 532 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 899d 5 20 ↑0.0/day
Possible Squatted Stub
llama pypi 0.0.1 Hammad Saeed hammad@supportvectors.com supportvectors.com
Package purpose: Opinionated, Ollama Client based Python Tools.
Claimed homepage: https://pypi.org/project/oh-llama/
Matched naming pattern: python-llama-oh
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 899
Registry downloads: 5/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 542 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'oh-llama' matches AI hallucination template [python] + [llama] + [oh].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'hammad@supportvectors.com' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 888 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (20 LOC, 2 file(s), 542 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 904d 28 15 ↑0.0/day
SUSPICIOUS
web3 npm 24.3.7 — —
Package purpose: FRO扩展
Claimed homepage: https://github.com/zerokongz/web3-frontiercc
Matched naming pattern: node-web3-frontiercc
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 904
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 28/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 623 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'web3-frontiercc' matches AI hallucination template [node] + [web3] + [frontiercc].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 878 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 923d 2 17 ↑0.0/day
SUSPICIOUS
together npm 1.0.0 — —
Package purpose: together-blow
Claimed homepage: https://github.com/hamzahamru/together-blow#readme
Matched naming pattern: node-together-blow
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 923
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 2/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 17 lines, 694 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'together-blow' matches AI hallucination template [node] + [together] + [blow].
  • HIGHClaims critical enterprise brand identity ('TOGETHER').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 897 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 932d 10 109 ↑0.0/day
SUSPICIOUS
chroma pypi 0.1.0 Juan Luis García juanluis1702@gmail.com gmail.com
Package purpose: ...
Claimed homepage: https://pypi.org/project/harken-chroma_handler/
Matched naming pattern: harken-chroma-handler
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 932
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 109 lines, 4.7 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'harken-chroma-handler' matches AI hallucination template [harken] + [chroma] + [handler].
  • HIGHClaims critical enterprise brand identity ('CHROMA').
  • HIGHPublisher email 'juanluis1702@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 922 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 935d 7 4 ↑0.0/day
SUSPICIOUS
btc npm 1.0.3 — —
Package purpose: Btc integration providing cnxibu utility for Node
Matched naming pattern: node-btc-cnxibu
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 935
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 109 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'btc-cnxibu' matches AI hallucination template [node] + [btc] + [cnxibu].
  • HIGHClaims critical enterprise brand identity ('BTC').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 909 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 939d 16 24 ↑0.0/day
SUSPICIOUS
okx npm 1.0.1 tylanbin —
Package purpose: Get mark price from okx and convert them to CNY.
Claimed homepage: https://github.com/tylanbin/okx-cnyprice#readme
Matched naming pattern: node-okx-cnyprice
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 939
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 24 lines, 798 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'okx-cnyprice' matches AI hallucination template [node] + [okx] + [cnyprice].
  • HIGHClaims critical enterprise brand identity ('OKX').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 913 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/index.js:9
Static code signals:
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/index.js:9

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 941d 8 142 ↑0.0/day
SUSPICIOUS
google pypi 1.0.0 nanh 877007021@qq.com qq.com
Package purpose: Google搜索工具
Claimed homepage: https://github.com/877007021/easy_google_search
Matched naming pattern: nanh-google-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 941
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 142 lines, 6.1 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'nanh-easy-google-search' matches AI hallucination template [nanh] + [google] + [google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email '877007021@qq.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 930 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 945d 6 30 ↑0.0/day
SUSPICIOUS
ethereum npm 0.0.0 vuonghuuhung —
Package purpose: This project demonstrates a basic Hardhat use case. It comes with a sample contract, a test for that contract, and a script that deploys that contract.
Matched naming pattern: node-ethereum-nestquant
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 945
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 30 lines, 1.4 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'nestquant-ethereum' matches AI hallucination template [node] + [ethereum] + [nestquant].
  • HIGHClaims critical enterprise brand identity ('ETHEREUM').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 919 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 945d 11 1 ↑0.0/day
SUSPICIOUS
web3 npm 0.0.1 TiffanyEva49871 —
Package purpose: npm for test
Claimed homepage: https://github.com/TiffanyEva49871/mono-parse-web3#readme
Matched naming pattern: mono-web3-web3
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 945
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 30 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mono-parse-web3' matches AI hallucination template [mono] + [web3] + [web3].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 919 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 946d 7 89 ↑0.0/day
SUSPICIOUS
supabase npm 1.0.1 — — 🪝
Package purpose: Supabase integration providing init utility for Prisma
Claimed homepage: https://github.com/melvynkim/prisma-supabase-init#readme
Matched naming pattern: prisma-supabase-init
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 946
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 89 lines, 2.7 kB across 7 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'prisma-supabase-init' matches AI hallucination template [prisma] + [supabase] + [init].
  • HIGHClaims critical enterprise brand identity ('SUPABASE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 920 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/config/envConfig.js:14
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/src/config/envConfig.js:14

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 947d 6 125 ↑0.0/day
SUSPICIOUS
eth pypi 0.1.1 emliy Zhai zhaixt@gmail.com gmail.com
Package purpose: py_eth_contract
Claimed homepage: https://github.com/zhaixt0203/py_eth_contract
Matched naming pattern: py-eth-contract
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 947
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 6/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 125 lines, 4.7 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'py-eth-contract' matches AI hallucination template [py] + [eth] + [contract].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • HIGHPublisher email 'zhaixt@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 936 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 948d 2 15 ↑0.0/day
Possible Squatted Stub
okta pypi 0.0.1 Subscription-pypi Creatoriq subscription-pypi@creatoriq.com creatoriq.com
Package purpose: Packageholdername okta-integration for circle-area-math function
Claimed homepage: https://pypi.org/project/okta-integration/
Matched naming pattern: python-okta-integration
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 948
Registry downloads: 2/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 15 lines, 449 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'okta-integration' matches AI hallucination template [python] + [okta] + [integration].
  • HIGHClaims critical enterprise brand identity ('OKTA').
  • HIGHPublisher email 'subscription-pypi@creatoriq.com' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 936 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (15 LOC, 1 file(s), 449 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 952d 14 131 ↑0.0/day
SUSPICIOUS
web3 npm 1.0.4 — —
Package purpose: RickAndMortyWeb3
Claimed homepage: https://github.com/EliseTonight/RickAndMortyWeb3#readme
Matched naming pattern: xwz-web3-001
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 952
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 131 lines, 4.0 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'xwz-web3-001' matches AI hallucination template [xwz] + [web3] + [001].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 925 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 952d 95 20 ↑0.1/day
SUSPICIOUS
ethereum npm 1.0.1 danny-pham —
Package purpose: seed ethereum wallet
Claimed homepage: https://github.com/danny-pham/seed-ethereum-wallet#readme
Matched naming pattern: seed-ethereum-wallet
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 952
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 95/month, 23/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 839 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'seed-ethereum-wallet' matches AI hallucination template [seed] + [ethereum] + [wallet].
  • HIGHClaims critical enterprise brand identity ('ETHEREUM').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 926 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 968d 20 59 ↑0.0/day
SUSPICIOUS
binance pypi 2.0 — —
Package purpose: Binance integration providing info utility for Python
Claimed homepage: https://pypi.org/project/binance-info/
Matched naming pattern: python-binance-info
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 968
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 20/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 59 lines, 2.0 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'binance-info' matches AI hallucination template [python] + [binance] + [info].
  • HIGHClaims critical enterprise brand identity ('BINANCE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 957 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 971d 60 105 ↑0.1/day
SUSPICIOUS
auth0 pypi 0.2.10 Serhii Lakodei serhii.lakodei@gmail.com gmail.com
Package purpose: Django Auth0 project for Abex
Claimed homepage: https://pypi.org/project/admin-auth0/
Matched naming pattern: python-auth0-admin
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 971
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 60/month, 24/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 105 lines, 4.3 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'admin-auth0' matches AI hallucination template [python] + [auth0] + [admin].
  • HIGHClaims critical enterprise brand identity ('AUTH0').
  • HIGHPublisher email 'serhii.lakodei@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 960 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 972d 0 10 ↑0.0/day
Possible Squatted Stub
aws pypi 0.0.0.1 VMware Inc. —
Package purpose: Python bindings for vmwarecloud aws provider
Claimed homepage: https://pypi.org/project/vmware-cloud-aws-provider/
Matched naming pattern: vmware-aws-aws
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 972
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 312 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'vmware-cloud-aws-provider' matches AI hallucination template [vmware] + [aws] + [aws].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 963 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 1 file(s), 312 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 972d 7 10 ↑0.0/day
Possible Squatted Stub
aws pypi 0.0.0.1 VMware Inc. —
Package purpose: Python bindings for nsx vmc aws
Claimed homepage: https://pypi.org/project/vmware-nsx-vmc-aws/
Matched naming pattern: vmware-aws-vmc
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 972
Registry downloads: 7/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 292 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'vmware-nsx-vmc-aws' matches AI hallucination template [vmware] + [aws] + [vmc].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 964 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 1 file(s), 292 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 972d 4 10 ↑0.0/day
Possible Squatted Stub
aws pypi 0.0.0.1 VMware Inc. —
Package purpose: Python bindings for vmwarecloud aws cho provider
Claimed homepage: https://pypi.org/project/vmware-cloud-aws-cho-provider/
Matched naming pattern: vmware-aws-aws
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 972
Registry downloads: 4/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 320 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'vmware-cloud-aws-cho-provider' matches AI hallucination template [vmware] + [aws] + [aws].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 964 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 1 file(s), 320 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 977d 14 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.0.1 Yi ZHANG yizhang.dev@gmail.com gmail.com
Package purpose: LangChain interface for baichuanai AI
Claimed homepage: https://pypi.org/project/langchain-baichuanai
Matched naming pattern: python-langchain-baichuanai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 977
Registry downloads: 14/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-baichuanai' matches AI hallucination template [python] + [langchain] + [baichuanai].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'yizhang.dev@gmail.com' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 969 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 977d 17 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.0.1 Yi ZHANG yizhang.dev@gmail.com gmail.com
Package purpose: LangChain interface for Baichuan AI
Claimed homepage: https://pypi.org/project/langchain-baichuan
Matched naming pattern: python-langchain-baichuan
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 977
Registry downloads: 17/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-baichuan' matches AI hallucination template [python] + [langchain] + [baichuan].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'yizhang.dev@gmail.com' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 969 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 992d 12 16 ↑0.0/day
SUSPICIOUS
crewai pypi 0.1.0 João Moura joaomdmoura@mgail.com mgail.com
Package purpose: # CrewAI UI
Claimed homepage: https://pypi.org/project/crewai-ui/
Matched naming pattern: python-crewai-ui
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 992
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 16 lines, 435 Bytes across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'crewai-ui' matches AI hallucination template [python] + [crewai] + [ui].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • HIGHPublisher email 'joaomdmoura@mgail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 984 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 995d 7 7 ↑0.0/day
SUSPICIOUS
qdrant pypi 0.1.0 Andrei Fajardo andrei@nerdai.io nerdai.io
Package purpose: Qdrant integration providing stores utility for Cria
Claimed homepage: https://pypi.org/project/cria-vector-stores-qdrant/
Matched naming pattern: cria-qdrant-stores
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 995
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 254 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'cria-vector-stores-qdrant' matches AI hallucination template [cria] + [qdrant] + [stores].
  • HIGHClaims critical enterprise brand identity ('QDRANT').
  • HIGHPublisher email 'andrei@nerdai.io' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 987 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 995d 21 7 ↑0.0/day
SUSPICIOUS
openai pypi 0.1.0 Andrei Fajardo andrei@nerdai.io nerdai.io
Package purpose: Openai integration providing openai utility for Cria
Claimed homepage: https://pypi.org/project/cria-llms-openai/
Matched naming pattern: cria-openai-openai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 995
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 21/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 185 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'cria-llms-openai' matches AI hallucination template [cria] + [openai] + [openai].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'andrei@nerdai.io' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 987 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 995d 26 7 ↑0.0/day
SUSPICIOUS
huggingface pypi 0.1.0 Andrei Fajardo andrei@nerdai.io nerdai.io
Package purpose: Huggingface integration providing huggingface utility for Cria
Claimed homepage: https://pypi.org/project/cria-llms-huggingface/
Matched naming pattern: cria-huggingface-huggingface
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 995
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 26/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7 lines, 222 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'cria-llms-huggingface' matches AI hallucination template [cria] + [huggingface] + [huggingface].
  • HIGHClaims critical enterprise brand identity ('HUGGINGFACE').
  • HIGHPublisher email 'andrei@nerdai.io' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 987 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 1003d 7 32 ↑0.0/day
SUSPICIOUS
google pypi 0.0.1 Ishan Oshada ic31908@gmail.com gmail.com
Package purpose: unknown
Claimed homepage: https://github.com/ishanoshada/
Matched naming pattern: python-google-dorks
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1003
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 32 lines, 1.1 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'google-dorks' matches AI hallucination template [python] + [google] + [dorks].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'ic31908@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 991 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 1005d — — —
Unverified Signal
— npm latest — — 🪝
Package purpose: Dev tools, env vars, and tasks in one CLI
Static code signals:
  • LIFECYCLE_SCRIPT: 'preinstall' -> 'node installArchSpecificPackage.js'
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/installArchSpecificPackage.js:1
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/installArchSpecificPackage.js:7

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 1008d 14 76 ↑0.0/day
SUSPICIOUS
eth npm 1.0.1 Alberto Miranda —
Package purpose: Speed up ETH transactions
Claimed homepage: https://github.com/codealchemist/eth-canceller#readme
Matched naming pattern: node-eth-canceller
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1008
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 76 lines, 2.0 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'eth-canceller' matches AI hallucination template [node] + [eth] + [canceller].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 982 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 1019d 5 33 ↑0.0/day
SUSPICIOUS
azure pypi 0.0.1 — —
Package purpose: This is my tools package
Claimed homepage: https://pypi.org/project/teste-azure-ai-studio-001/
Matched naming pattern: teste-azure-ai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1019
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 33 lines, 1.6 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'teste-azure-ai-studio-001' matches AI hallucination template [teste] + [azure] + [ai].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1011 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 1029d 5 57 ↑0.0/day
SUSPICIOUS
xai pypi 0.1 davinci003 freegpt00@gmail.com gmail.com
Package purpose: Code for XAI using Shap (Breast Cancer Dataset)
Claimed homepage: https://github.com/savioratharv/prac_testing
Matched naming pattern: ml-xai-xai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1029
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 57 lines, 2.5 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'ml-shap-xai' matches AI hallucination template [ml] + [xai] + [xai].
  • HIGHClaims critical enterprise brand identity ('XAI').
  • HIGHPublisher email 'freegpt00@gmail.com' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 1018 days ago (predates modern AI hallucination waves).
  • HIGHSYNTAX_ERROR_IN_ml_shap_xai-0.1/ml_shap_xai/data/my_code.py: invalid syntax (<unknown>, line 7)
Static code signals:
  • SYNTAX_ERROR_IN_ml_shap_xai-0.1/ml_shap_xai/data/my_code.py: invalid syntax (<unknown>, line 7)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 1029d 8 63 ↑0.0/day
SUSPICIOUS
xai pypi 0.1 davinci003 freegpt00@gmail.com gmail.com
Package purpose: Code for XAI using Lime (Breast Cancer Dataset)
Claimed homepage: https://github.com/savioratharv/prac_testing
Matched naming pattern: ml-xai-xai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1029
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 63 lines, 2.9 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'ml-lime-xai' matches AI hallucination template [ml] + [xai] + [xai].
  • HIGHClaims critical enterprise brand identity ('XAI').
  • HIGHPublisher email 'freegpt00@gmail.com' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 1017 days ago (predates modern AI hallucination waves).
  • HIGHSYNTAX_ERROR_IN_ml_lime_xai-0.1/ml_lime_xai/data/my_code.py: invalid syntax (<unknown>, line 7)
Static code signals:
  • SYNTAX_ERROR_IN_ml_lime_xai-0.1/ml_lime_xai/data/my_code.py: invalid syntax (<unknown>, line 7)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 1041d — — —
Unverified Signal
— npm latest zhijiancloud — 🪝 🌐
Package purpose: 智建云BPM-核心库
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/base.umd.js:2
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'new Function()' found in package/dist/base.umd.js:2
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/base.umd.js:2
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/base.umd.js:2

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 1049d 13 0 ↑0.0/day
Possible Squatted Stub
langchain pypi 0.0.1 Yi ZHANG yizhang.dev@gmail.com gmail.com
Package purpose: LangChain interface for iFLYTEK Spark
Claimed homepage: https://pypi.org/project/langchain-spark
Matched naming pattern: python-langchain-spark
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1049
Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-spark' matches AI hallucination template [python] + [langchain] + [spark].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'yizhang.dev@gmail.com' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 1041 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 1059d 8 104 ↑0.0/day
SUSPICIOUS
kraken pypi 0.2.0 — kyler@abandontech.cloud abandontech.cloud
Package purpose: # kraken-python-client
Claimed homepage: https://pypi.org/project/kraken_client/
Matched naming pattern: python-kraken-client
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1059
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 8/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 104 lines, 4.5 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'kraken-client' matches AI hallucination template [python] + [kraken] + [client].
  • HIGHClaims critical enterprise brand identity ('KRAKEN').
  • HIGHPublisher email 'kyler@abandontech.cloud' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1048 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 1063d — — —
SUSPICIOUS
— npm latest Storm Software — 🪝 🌐
Package purpose: ⚡A CLI tool used to generate and fully configure a Storm Workspace repository.
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:115
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'process.binding/mainModule' found in package/index.js:115
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/index.js:115 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/index.js:113
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/index.js:128
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/index.js:128
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/index.js:18
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/index.js:173

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
65 1066d 5 112 ↑0.0/day
SUSPICIOUS
auth0 pypi 0.0.3 — — 🪝
Package purpose: Auth0 integration providing avs utility for Streamlit
Claimed homepage: https://pypi.org/project/streamlit-auth0-avs/
Matched naming pattern: streamlit-auth0-avs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1066
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 112 lines, 3.9 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'streamlit-auth0-avs' matches AI hallucination template [streamlit] + [auth0] + [avs].
  • HIGHClaims critical enterprise brand identity ('AUTH0').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1055 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in streamlit-auth0-avs-0.0.3/auth0_avs/__init__.py:100
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in streamlit-auth0-avs-0.0.3/auth0_avs/__init__.py:100

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 1075d 6 52 ↑0.0/day
SUSPICIOUS
xai pypi 0.1.1 Isel Grau, Gonzalo Nápoles i.d.c.grau.garcia@tue.nl tue.nl 🪝
Package purpose: Forward Composition Propagation
Claimed homepage: https://github.com/igraugar/fcp
Matched naming pattern: python-xai-fcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1075
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 6/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 52 lines, 2.4 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'fcp-xai' matches AI hallucination template [python] + [xai] + [fcp].
  • HIGHClaims critical enterprise brand identity ('XAI').
  • HIGHPublisher email 'i.d.c.grau.garcia@tue.nl' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 1064 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in fcp-xai-0.1.1/fcp/fcp.py:31
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in fcp-xai-0.1.1/fcp/fcp.py:31

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 1075d 6 121 ↑0.0/day
SUSPICIOUS
workspace npm 0.1.2 — —
Package purpose: This project was generated with [Angular CLI](https://github.com/angular/angular-cli) version 15.1.6.
Matched naming pattern: magma-workspace-validator
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1075
Code-only verdict: Possible Squatted Stub (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 121 lines, 4.0 kB across 7 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'magma-form-validator-workspace' matches AI hallucination template [magma] + [workspace] + [validator].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 1049 days ago (predates modern AI hallucination waves).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
« Prev Next »
LINK COPIED TO CLIPBOARD