Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 现代化的 React 组件库和工具函数集合，为 FunHub 项目提供统一的设计系统和开发工具。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Funhub UGC discussion comment SDK for React / Next.js projects and Funhub low-code material integration.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Image and video generation for DeepSeek Harness: routes image models to /images/generations and video models to the async /videos API, exposing image_generate and video_generate tools plus a composer text/image/video output-mode switch.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: WeChat ClawBot (Tencent iLink) channel for DeepSeek Harness 0.2.0-rc.2 — talk to DSH from WeChat.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 0.6.0 | — | — | 🪝 | |
|
Package purpose: Offline pcap/pcapng triage: flows, negotiated crypto, weak-cipher and plaintext-exposure detection, Markdown+JSON reports.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: cordis-tavern 全局残留卸载器：幂等清掉内核、插件包、$CT_HOME 数据与 ~/.cordis-tavern 配置。经 npx 运行，自身不落盘。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | SpatialReal | — | 🪝 🌐 | |
|
Package purpose: SpatialReal Web SDK: real-time talking avatars in the browser (Gaussian-splatting renderer, agent and drive sessions)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A high-performance JSON Schema evaluator (draft 4 to 2020-12) that compiles schemas to specialised JavaScript, with results collection and annotations, ported from the Corvus.Text.Json V5 runtime evaluator.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | c7sh8y9 | — | 🪝 🌐 | |
|
Package purpose: 在 DSH 里访问 chat.deepseek.com 网页版对话：侧边栏聊天面板（Markdown 渲染 + 图片上传 + 读历史 + 发消息）+ 一个 Agent 工具 deepseek_web。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Fernando Garza | — | 🪝 | |
|
Package purpose: Signal Lab: news-sentiment market event engine. CLI installs the Python engine and opens a browser UI that is the interface.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The AI Launch Kit plugin's MCP server — keyed content tools that forward AILK_LICENSE_KEY to the licence issuer and return its answer.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | REBORN LABS | — | 🪝 | |
|
Package purpose: 내 웹·앱을 내보내기 전에 붙여 둘 무료 보안 저장소 3개(cloudflare/security-audit-skill · alibaba/open-code-review · coder/coder)를 한국어로 안내하고, 보안 감사 스킬과 코드 리뷰 플러그인은 각 README 의 명령 그대로 붙인 뒤 실제로 붙었는지 다시 잽니다. --check 가 다섯 칸(노드 · Git · 클로드 코드 · npx · 이미 깔린 것)을 실제로 재 줍니다. 세 저장소는 전부 남이
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Joseph Nartey | — | 🪝 | |
|
Package purpose: Add a clean, CMS-ready structure to a Next.js or TanStack Start app: #/ alias, typed content and data seams, query hooks, SEO helper, CLAUDE.md and more.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: macOS-only DeepSeek Harness bundle for a private Cua Driver computer-use runtime.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Tupla | — | 🪝 🌐 | |
|
Package purpose: Servidor MCP sobre la API de Easy Sell: catálogo, clientes, cotizaciones, pedidos, pagos, envíos, reportes, notificaciones, integraciones, conversaciones de WhatsApp, auditoría y administración de plataforma, autenticado con tu API key.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Flow Information Systems | — | 🪝 | |
|
Package purpose: Abe: one control point before an AI agent acts. Deterministic ACT / BLOCK / ESCALATE with an immutable Judgment-Grounded Record. Local, offline, no account.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Coresource AI, Inc. | — | 🪝 🌐 | |
|
Package purpose: `@constal/agent-email` is the tenant Channel and AuthProvider for Cloudflare Email Service deliveries. It leaves Constal's internal Resend-backed account and meeting mail Worker unchanged.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | d4n-sec | — | 🪝 🌐 | |
|
Package purpose: Oh-My-TUI Server: two-port service for owner auth, enrollment, and SSH terminals
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TUI-first coding agent harness, tuned for DeepSeek
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Checks whether a Claude Code configuration actually applies: agent files Claude Code skips, settings it ignores, rules that don't protect what they look like they protect, and what changed since last time. A CLI, a Claude Code plugin, and an MCP server fo
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agents for devland, dashboardland and userland, built as software: Jev, a System One model reached through OpenRouter, makes typed decisions over each land's tool manifest; code supplies every value and owns the workflow
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Le Duc Bao | — | 🪝 | |
|
Package purpose: Local terminal bridge for sagent-studio: runs shell sessions for the browser app over an authenticated loopback WebSocket.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CompliAI L1 compliance scanning MCP server for uni-agent (UniApp/UniApp-X 上架合规确定性扫描的 MCP 执行面)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | dukerspace | — | 🪝 | |
|
Package purpose: Scaffold a Bun + Turbo full-stack app (Hono, TanStack Start, Prisma)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK for the GoDark DEX — encrypted trading over WebSocket
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 3.58 | — | — | 🪝 | |
|
Package purpose: Continuous ICMP reachability monitor built on fping, with a CSV logfile analyser (epinga)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: File-backed service registry and manual process/container control for DeepSeek Harness
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The front door to the Ailu framework — build, compile and run stateful, resumable agent graphs. Runs on the Rust engine (@ailu-ai/napi), a required dependency.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH 右侧栏「画布」插件:无限画布 + 直接在图上标注 + 接 GrsAI(gpt-image-2 / nano-banana)按标注改图,结果放在原图旁边对比,画布自动存到工作区
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Import and capture execution evidence for Forum AI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Jakub Dolezal | — | 🪝 | |
|
Package purpose: JAID CRM MCP connector with individual Microsoft sign-in
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | GentleBulldozer | — | 🪝 🌐 | |
|
Package purpose: BoldRouter piece for Activepieces, published to npm as @boldrouter/piece-boldrouter.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: DSH-scrcpy 安卓 Provider --- DSH-scrcpy Android Provider
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Add a Motionrow component to the current project
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Find and kill dev-server ports
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | JulesDebeaumont | — | 🪝 | |
|
Package purpose: A Quasar App Extension Project
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Platform Kit Doctor - Continuous architecture, security, SEO, rendering, performance, i18n, and standards enforcement engine
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A standalone evaluation runner for agentic coding capabilities
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A tiny zero-dependency Node server that renders an animated Mandelbrot/Julia fractal with WebGL
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Thư viện component UI hiện đại cho React 19 + Tailwind CSS 4, hỗ trợ Microsoft Fluent 2 preset và hơn 70+ controls.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | A5IT | — | 🪝 🌐 | |
|
Package purpose: Storefront theme packages. Each theme owns a complete design and consumes the storefront SDK directly.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Tree-outside Web plugin for workspace SOP capsule library (Host Remote + Client)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | jimy-k4 | — | 🪝 | |
|
Package purpose: MCP server for Bruto boards: AI agents read and answer the notes of a project, kept in .bruto/workspace.json.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | REBORN LABS | — | 🪝 | |
|
Package purpose: 돈 내고 쓰던 앱 다섯을 대신할 무료 오픈소스 5개(Automattic/harper · CapSoftware/Cap · janhq/jan · m-bain/whisperX · OpnForm/OpnForm)를 한국어로 안내합니다. --check 가 여섯 칸(노드 · 운영체제 · 파이썬 · ffmpeg · 도커 · 한국어 안내)을 실제로 재고, 운영체제에 맞는 공식 설치 길을 보여 준 뒤 한국어 안내 스킬을 넣습니다. 다섯 저장소는 전부 남이 만든 오픈소스이
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Run multiple Cursor Agent CLI sessions in parallel from Codex or the shell.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||