Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 65 | 2280d | 21 | 122 | ↑0.0/day |
SUSPICIOUS
|
crypto-com | pypi | 1.2 | Alvaro Garcia maxpowel@gmail.com | gmail.com | 🪝 | |
|
Package purpose: Crypto.com websocket api client
Claimed homepage: https://github.com/maxpowel/crypto_com_client
Matched naming pattern: crypto-crypto-com-client
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2280
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 21/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 122 lines, 8.4 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 2381d | — | — | — |
Unverified Signal
|
— | npm | latest | Itential | — | 🪝 | |
|
Package purpose: This adapter integrates with system described as: networkmanagementclient.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 2509d | 33 | 19 | ↑0.0/day |
Possible Squatted Stub
|
pypi | 12.0.1.1.0.99.dev2 | Open Source Integrators, Odoo Community Association (OCA) support@odoo-community.org | odoo-community.org | |||
|
Package purpose: Google map widget allowing to set marker's color
Claimed homepage: https://github.com/OCA/geospatial
Matched naming pattern: odoo12-google-web
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2509
Registry downloads: 33/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 19 lines, 729 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 2567d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A graph conversion tool for https://azure.microsoft.com/.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 2745d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: NodeJS/browser bindings to the aws-c-* libraries
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 2832d | — | — | — |
Unverified Signal
|
— | pypi | 4.55.0 | Michael Mintz | — | 🪝 | |
|
Package purpose: SeleniumBase is a framework for web crawling, scraping, and testing. Supports pytest. CDP Mode adds stealth. Includes many tools.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 3113d | — | — | — |
Unverified Signal
|
— | pypi | 4.55.0 | Michael Mintz | — | 🪝 | |
|
Package purpose: SeleniumBase is a framework for web crawling, scraping, and testing. Supports pytest. CDP Mode adds stealth. Includes many tools.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 65 | 3515d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Provides access to the application instance in SharePoint Framework components.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3642d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: SharePoint Framework support for building web parts
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 65 | 3992d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Dev tools, env vars, and tasks in one CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 4h | — | — | — |
Unverified Signal
|
— | npm | latest | Hemant Rao | — | 🪝 | |
|
Package purpose: AI Agent Bell: a loud alarm when your AI coding agent finishes, fails, or needs your input. Works with OpenCode, Claude Code, Codex CLI and any terminal tool. Global-only: zero project impact, never ships in your build.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 12h | — | — | — |
Unverified Signal
|
— | npm | latest | Keelson | — | 🪝 🌐 | |
|
Package purpose: Keelson Tasks SDK for Node.js (enqueue background tasks declared under tasks:)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 12h | — | — | — |
Unverified Signal
|
— | npm | latest | William Khoo | — | 🪝 🌐 | |
|
Package purpose: nax's native coding agent: session contract, native loop, tools, permissions, sandbox, command-safety.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 15h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Headless storefront logic for ecomweb: auth, cart, checkout, API proxy
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 16h | — | — | — |
SUSPICIOUS
|
— | npm | latest | Douglas Christopher Wilson | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 17h | — | — | — |
Unverified Signal
|
— | npm | latest | visualnaut | — | 🪝 🌐 | |
|
Package purpose: Editorial-grade writing review surface for human-in-the-loop AI generation
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 21h | — | — | — |
Unverified Signal
|
— | npm | latest | mfasolver | — | 🪝 🌐 | |
|
Package purpose: Production-grade Discord MFA authentication library. Connection pooling, TOTP, Cloudflare bypass, automatic token refresh. Zero runtime dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 21h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The adoc web UI: React 19 + react-router, bundled into dist/ for @agent-workshop/adoc-core to serve.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 26h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Meeting recordings for a dreamteamer workspace — imported by content hash, matched to their meeting, and transcribed offline in Hebrew and English.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 29h | — | — | — |
Unverified Signal
|
— | npm | latest | RugSnare Releases | — | 🪝 🌐 | |
|
Package purpose: Runtime integrity gateway for AI agents: pin MCP tool descriptions, snare rug-pulls and drift, log every tool call.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 32h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: OMP rules port for DeepSeek Harness: rulebook, always-apply injection, rule:// addressing, and time-traveling stream rules that interrupt violating model output
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 34h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Named profiles for self-hosted and Convex Cloud deployments; wraps the official Convex CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 35h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: [](https://buildwithfern.com?utm_source=github&utm_medium=github&utm_campaign=readme&utm_source=https%3A%2F%2Fgithub.com%2FPen-and-Paper-AI%2Fuserintuition-sdk-typesc
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 38h | — | — | — |
Unverified Signal
|
— | npm | latest | QuickAuth | — | 🪝 🌐 | |
|
Package purpose: QuickAuth React Native SDK — phone OTP authentication and WhatsApp marketing attribution
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 53h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: See what your Claude Code and Codex usage costs at list price, and what it would cost on any other LLM provider.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 54h | — | — | — |
Unverified Signal
|
— | npm | latest | putnami | — | 🪝 🌐 | |
|
Package purpose: SQL database integration with PostgreSQL support, migrations, and repository pattern
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Topic rendezvous and peer discovery for iroh, from the browser, with no backend of your own
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI for reading secrets from Vault
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 58h | — | — | — |
Unverified Signal
|
— | npm | latest | Anlyon | — | 🪝 🌐 | |
|
Package purpose: The Anlyon command-line interface. Authenticate with your Anlyon account and operate the platform from a terminal, with the same permissions and execution guarantees as the API and dashboard.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Node-RED node for tracking, replaying, and automatically retrying workflow executions, with a dashboard for execution history and system health
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 67h | — | — | — |
Unverified Signal
|
— | npm | latest | Sean Morris | — | 🪝 🌐 | |
|
Package purpose: Browser PHP runtime with SDL2, image, mixer, TrueType and OpenGL bindings
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 71h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Keeps AI coding tools to a senior team's standard: planning, testing, security and compliance, with proof of every check
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: OpenNodes (ONP) client: search verified AI nodes, pre-price chains, invoke with signed receipts; OpenAI-compatible gateway with onp/auto routing; stdio MCP server for Cursor, VS Code, and Claude Desktop
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Tanvir Ahmed | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Octopi Gateway — HTTP/WS process plane, channel adapters, and Web runtime
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Connect any agent harness to a Marginalia library through Marginalia Relay, end-to-end encrypted
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | cristibcf (https://github.com/cristibcf) | github.com | 🪝 🌐 | |
|
Package purpose: RaptorRuntime: host contracts, capability broker and standalone launcher CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Sagarithm | — | 🪝 | |
|
Package purpose: Universal Cross-Agent Engineering Framework for AI Coding Agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Connect your AI tools to the Backrefs MCP server
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Lamaste server daemon — REST API and plugin host
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Code Lama Software | — | 🪝 | |
|
Package purpose: One-command setup for secure reverse tunnels with a management dashboard
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | ADM Media Consulting SA | — | 🪝 🌐 | |
|
Package purpose: Production-grade, framework-agnostic TypeScript player library based on Video.js
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local web UI for the pi coding agent — one directory per workspace, in the shell of deepseek-harness
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: AXI-compliant wrapper around the GA4 and Google Tag Manager APIs - TOON output, cached property/container defaults, diffed GTM writes, exit codes you can gate on
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: OGC map services: streaming Capabilities parsing, normalization, and a TTL cache
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Pair AI coding clients with Memorify (MCP gateway) — device-flow pairing, no secrets pasted into chats
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Marcelino Sandroni | — | 🪝 | |
|
Package purpose: Cria um projeto pronto para agentes de IA com Spec-Driven Development: regras SDD + template Next.js 16 + design system.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Jesper Andersson | — | 🪝 🌐 | |
|
Package purpose: TypeScript client library for the Vesta protocol
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Toby Godat | — | 🪝 🌐 | |
|
Package purpose: Shows what your coding agent is doing on Fiada's map of your codebase: a tool hook and an MCP server for Claude Code, Cursor and Codex.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Jaltech | — | 🪝 🌐 | |
|
Package purpose: Keycloak provider (OIDC discovery + JWKS + UMA) for @jaltech/nestjs-auth-core.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||