Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 55 | 53h | — | — | — |
Unverified Signal
|
— | npm | latest | pooraddyy | — | 🪝 | |
|
Package purpose: Terminal UI toolkit with differential rendering and keyboard-first components.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 54h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: JavaScript SDK, typed with JSDoc, for native TerraBase documents and hosted TerraScale identity.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 57h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 把 DSH 会话事件（中断 / 结束 / 报错 / 等待操作）聚合到一个 IM 通道，推到 QQ / 飞书，带可点按钮与定向回复
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 57h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: ESLint rule that enforces one canonical location per React component: duplicate declarations, raw HTML outside the canonical packages, hand-rolled components by behavior, and styled.* created in the app.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 57h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 57h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 57h | — | — | — |
Unverified Signal
|
— | npm | latest | RonnyJung2021 | — | 🪝 | |
|
Package purpose: MiMo skin for the DSH Web GUI: the warm off-white editorial page, hairline black rules, serif reading face and orange accent of mimo.xiaomi.com
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 58h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Connect Claude Code, Codex, or Mimir to Betterloop governance
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 58h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: DecisionsMemory records each new Git commit as AI-readable Markdown plus a local HTML/CSS page. It is an npm development dependency: it lives with the project whose technical history it documents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mirasim relay subscription in OpenCode and magpie
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 60h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Mermaid and full MathJax rendering patch for Claude Desktop, with an interactive npm CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 60h | — | — | — |
Unverified Signal
|
— | npm | latest | FazzCodeStudio | — | 🪝 | |
|
Package purpose: CLI untuk membuat dan mengelola bot WhatsApp berbasis @fazzcodestudio/baileys
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 60h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Scaffold di un nuovo progetto dallo starter 375
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 61h | — | — | — |
Unverified Signal
|
— | npm | latest | REBORN LABS | — | 🪝 | |
|
Package purpose: FreeLLMAPI(tashfeenahmed/freellmapi · MIT) — 34곳의 무료 등급을 주소 하나로 묶어 클로드 코드를 다른 회사의 무료 모델로 돌리게 하는 오픈소스 라우터를 한국어로 안내하는 클로드 코드 스킬을 깔고, setup-claude 가 settings.json 에 남긴 8칸을 지워 원래 구독으로 되돌립니다(back). 붙는 것은 클로드가 아니라는 사실과 한계 다섯 가지를 먼저 말합니다. --check 가 다섯 칸(노드 20 ·
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 62h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 插件管家——图形化插件管理：中文名与用途说明目录 + 一键启停（写入全局 cordis.patch.yml，实时热生效）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 62h | — | — | — |
Unverified Signal
|
— | npm | latest | Solid Stack Digital | — | 🪝 | |
|
Package purpose: CLI build tool and orchestrator for Solid Stack services.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 63h | — | — | — |
SUSPICIOUS
|
— | npm | latest | Sumit Mahajan | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 64h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Shared Try Demo feature package — session-end redirect claim, expiry polling, persona switching against auth-sso-server's /demo/* endpoints, and the DemoModeBar UI itself. Each consuming app supplies its own cookie adapter and post-switch navigation inste
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 65h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Headless GLM-5.3 / GLM-5.3-Flash coding CLI for agents: streaming thinking, subagents, MCP servers, skills, session continuity. Wraps the ZCode engine. Zero dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 65h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Forgebase PostgreSQL-first platform for host-native deployments.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 67h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Zero-dependency npm/npx install path for opencode-console-notify: copies the Windows toast plugin into the OpenCode plugins directory and registers the OpenCode.Notifier AUMID (HKCU only, no admin).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 67h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Model Context Protocol server exposing TrustRail governed-action evaluation to MCP-capable agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 68h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Per-user Claude accounts for Paperclip: each member signs in to Claude from the browser, picks which agents use it, and it stays signed in. No shell, no re-auth.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 69h | — | — | — |
Unverified Signal
|
— | npm | latest | Nehanth Narendrula | — | 🪝 | |
|
Package purpose: Peer-to-peer inference engine for your claw: run one model across your own devices, each holding part of it on its GPU.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | angkasa | — | 🪝 | |
|
Package purpose: Generate brat-style images with emoji support using @napi-rs/canvas
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A ready-to-use collection of Pi coding agent extensions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: kanban style process manager and dashboard for opencode agent sessions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CLI to scaffold a new Schma project
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: OpenCode plugin exposing Ship-It build, runtime, artifact, filesystem and usage tools to the AI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Strafe Bot | — | 🪝 🌐 | |
|
Package purpose: REST API for Strafe — a federated, self-hostable chat platform.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Standalone AutoX.js device bridge and CLI compatible with the Auto.js VS Code protocol
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local project memory, code intelligence and MCP server for AI coding agents. Preserves canonical source evidence, durable memory, provider-neutral handoff and token-budgeted context.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A fast, validated, zero-dependency environment configuration toolkit for Node.js
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The Bijection SDK: server functions, values and clients for Bijection projects.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Bijection component for AI agents with persistent chat threads, tool calling, streaming, and RAG.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | deciopenquesva@hotmail.com deciopenquesva@hotmail.com | hotmail.com | 🪝 | |
|
Package purpose: Fast and lightweight test runner service integration for Express applications
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: BrowzWork local Agent launcher
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | SMARTR.solutions | smartr.solutions | 🪝 | |
|
Package purpose: Send values from Node-RED to the Andon app for iPhone: end-to-end encrypted tiles, fed by msg.topic.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Scaffold a React + TypeScript + Vite app wired to the four ProCode low-code libraries (core, kendo-widget, vs-template, vs-theme).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Datarails App Space CLI — build, try, push and publish App Space apps
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript client for the Numen sandbox API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | The Cloudtifact authors | — | 🪝 | |
|
Package purpose: Publish pages and docs to Cloudtifact as links people comment on, with every version kept and the comments handed back to your agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Code Lama Software | — | 🪝 | |
|
Package purpose: CLI tool for Lamaste tunnel agent — setup, update, status, and management commands
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Code Lama Software | — | 🪝 | |
|
Package purpose: Upgrade Lamaste admin authentication to hardware-bound (Keychain) certificate
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Code Lama Software | — | 🪝 | |
|
Package purpose: Upgrade Lamaste agent authentication to hardware-bound (Keychain) certificate
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Robert King | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: One secret per name: OS keyring, sealed files, Expo SecureStore, encrypted web storage, or host-passed overrides.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||