Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 60 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Antigravity Open Source Community | — | 🪝 🌐 | |
|
Package purpose: Open Source Visual Decision Plane & Shotgunning for AI Coding Agents (Google Antigravity, Claude Code, OpenAI Codex, Cursor)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Matat Technologies LTD | — | 🪝 🌐 | |
|
Package purpose: Model Context Protocol (MCP) server for Clokio — manage tasks, projects, clients, employees and attendance from Claude and any MCP client.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: nx-apiserver — auth gateway & safe launcher base image (nginx + nx-as); any target process behind one login
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cognee persistent memory for the pi coding agent — native extension with auto-capture, auto-recall, and knowledge-graph tools. Fail-soft by design: pi keeps working when the cognee server is down.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 내 PC의 Codex / Claude Code 구독을 웹앱에 연결하는 CLI (bri)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Intutic pre-execution tool gate for JS/TS agent frameworks without a shipped Intutic harness (Mastra, the Vercel AI SDK, LangChain.js, dsh, and hand-rolled agent loops)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: SDK TypeScript de Rayito: sandboxes de ejecución para agentes de IA sobre AWS Lambda MicroVMs, dentro de tu propia cuenta.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Tadeu Reinaldo | — | 🪝 🌐 | |
|
Package purpose: Gerador de fluxogramas BPMN interativos e animados em SVG puro com Tailwind CSS para qualquer IA.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | CohostSTR authors | — | 🪝 🌐 | |
|
Package purpose: CohostSTR — MCP server for Guesty property management — 44 registered tools, all free (43 Guesty tools + get_license_info), + 7 addressable resource templates covering reservations, guests, messaging, pricing, revenue, tasks, webhooks, and IoT/property-he
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: dydt Solana market and wallet data for AI agents: a CLI over the dydt Data API plus agent skills.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run Laya typed-decision models locally on Apple Silicon behind a Jev (TypeSafe System One) compatible API, with a dashboard and playground.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Vincent | — | 🪝 🌐 | |
|
Package purpose: x402 batch-settlement on Cardano over Subbit.xyz payment channels: binding spec draft and reference implementation, preprod only
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Max Muyalwa | — | 🪝 🌐 | |
|
Package purpose: MCP server for colorsbymax: lets AI agents set up the theme switcher, find and build themes, check contrast and finish a site's colours.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | AI Build Infra | — | 🪝 🌐 | |
|
Package purpose: Evidence-first knowledge and entity graph MCP server for AI agents to verify claims, discover relationships, and retrieve compact evidence packets. By AI Build Infra.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Lacspace | — | 🪝 🌐 | |
|
Package purpose: MCP server that gives AI agents (Claude Code, Claude Desktop, Cursor, VS Code, Windsurf) the Lacspace tools: fetch and scrape pages, crawl sites, extract PDF/DOCX/PPTX/EPUB, audit SEO, enrich domains, check uptime and TLS, validate emails, find leads. One
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Ephox Corporation DBA Tiny Technologies, Inc | — | 🪝 🌐 | |
|
Package purpose: Security-maintained fork of the TinyMCE 6 rich text editor
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Rishu Yadav | — | 🪝 🌐 | |
|
Package purpose: Zero-config adversarial API fuzzer that finds unhandled 500 crashes in your REST APIs before they hit production
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A local software factory: watches your repositories, turns issues into reviewed draft pull requests.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A Component Library for Vue 3
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Client-side bridge between a PowerSync local SQLite database and a conventional HTTP API: raced first paint, pending-write-aware reconcile, bounded partition escalation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | ControleOnline | — | 🪝 🌐 | |
|
Package purpose: ControleOnline CRM Quasar UI Component
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cognee persistent memory for the pi coding agent — native extension with auto-capture, auto-recall, and knowledge-graph tools. Fail-soft by design: pi keeps working when the cognee server is down.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A git backend for an Ambion workspace: read-only templates, forks, and pushes, over an in-process just-git server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: T3 Code CLI executable for darwin-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: T3 Code CLI executable for linux-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: T3 Code CLI executable for linux-x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Set up Boundless as the inference provider for your coding harness. Run: npx -y @boundless.network/setup@latest
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | HookArmor Team | — | 🪝 🌐 | |
|
Package purpose: Zero-loss Webhook Dead-Letter Queue (DLQ), Reliability Proxy, and Replay Gateway for Stripe, Shopify, Clerk, and B2B SaaS.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for managing a Shopify store and a Horoshop store
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | owgreen-dev | — | 🪝 🌐 | |
|
Package purpose: Readiness checker for Meta Muse connectors: score an OpenAPI spec or MCP tool list before you submit it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Drop-in x402 payments for your own API and your own agent - require payment on any route in minutes, or pay for x402-gated resources from an agent, without tying yourself to one CDN/cloud vendor's gateway.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | naldomadeira | — | 🪝 🌐 | |
|
Package purpose: Framework-agnostic authentication middleware (Basic, Keycloak/OIDC, static token and custom) for the Worker Manager dashboard.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: One memory across every AI tool. Signs in through your browser, configures every MCP client on your machine, and imports the context you already wrote for your agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local web UI for the pi coding agent — one directory per workspace, in the shell of deepseek-harness
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Global services → Add tools installs PostgreSQL, MongoDB, Redis or a JSON HTTP server into the manager's private directory. Installed versions are pinned; removing an entry preserves its database and binaries. PostgreSQL uses loopback-only trust authentic
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Timothy Schneider | — | 🪝 🌐 | |
|
Package purpose: Interim npm home for @distilled.cloud/litellm — see docs/distilled-interim.md. Not published upstream yet; the kit aliases @distilled.cloud/litellm onto this package until it is.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Browser-only H5P player web component. Plays arbitrary .h5p archives from a URL or a local file, with no server-side extraction.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Zweer | — | 🪝 🌐 | |
|
Package purpose: A TypeScript client for StoryNavigation's internal API. Fetch Instagram profiles, recent posts, and download media.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Better IAM contributors | — | 🪝 🌐 | |
|
Package purpose: OAuth 2.0 and OpenID Connect for Better IAM: sign-in with Google, GitHub, Entra ID, or any OIDC provider, and a tenant-aware authorization server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Adds Tnega's read-only MCP server to your client: tokenized stocks and ETFs with what each version costs to buy, stablecoin vaults read on chain, curated baskets, on-chain agents and Hyperliquid post-only rejection, each answer carrying its own coverage.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | WebLab LLC | — | 🪝 🌐 | |
|
Package purpose: Framework-free payment gateway abstractions: invoice, LiqPay, WayForPay, NOWPayments; Checkbox (PRRO) fiscalization client and orchestrator
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Arif Sardar | — | 🪝 🌐 | |
|
Package purpose: Manage Minecraft mods and plugins from a local web UI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Matt Cochran | — | 🪝 🌐 | |
|
Package purpose: Jevitate CLI — author, run, and orchestrate browser-automation Journeys from the command line.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | jsk4581 | — | 🪝 🌐 | |
|
Package purpose: Shows what your Claude Code or Codex prompt did not think to consider. A side panel driven by a TypeSafe jev gate and a light model brain.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Kobo UI Team | — | 🪝 | |
|
Package purpose: A beautifully crafted Angular component library with Tailwind CSS v4 and CDK.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | linbin-mk | — | 🪝 🌐 | |
|
Package purpose: Session-sync plugin for DeepSeek Harness: git-backed cross-machine session sync with its own web settings surface, row-menu action, and sync-records dialog
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Tom Gringauz | — | 🪝 🌐 | |
|
Package purpose: Records Claude plan-usage history and lets a Paseo agent manage its own context.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Superlayer's platform package for managing Superlayer apps.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 60 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ChatCode CLI Plugin Market — browse, search, and one-click install community plugins. · ChatCode CLI 可视化插件市场：逛一逛，点一下，装好。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||