Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Slid Phi Labs | — | 🪝 | |
|
Package purpose: Chamber MCP — JSON seal/open. Cloak needs a live license ($9/mo · $99/yr). Open is keys-only.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 梁文峰/梁文谷：峰谷时段徽章 + /usage 余额卡片 + 内嵌网页版面板 + 宠物 + 文档预览 + 会话版本（dsh 插件；原名 ds_zhuzhu_use）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 梁文峰/梁文谷：峰谷时段徽章 + /usage 余额卡片 + 内嵌网页版面板 + 宠物 + 文档预览 + 会话版本（dsh 插件）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Install and run the Travix Webhelper Chrome Web Store publishing skill.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local commit gate for derived projects
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Pristine pinned Archify runtime for Topocode, packaged without install hooks.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | B4N1 Team | — | 🪝 | |
|
Package purpose: Native accelerator for Node.js & Express: SIMD compression, fast JSON, background tasks without Redis
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Google Search Console MCP server: search analytics with server-side date resolution, question-shaped queries, SEO opportunities, URL inspection and sitemaps for Claude, Cursor, Codex and any MCP client.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A thin courier endpoint that dispatches fully-specified email requests to the internal Directus MailService.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Tesseract.js language data (rus, eng) packed as scripts plus a patched worker, for the @kostenkovru reels generator.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A small CLI for testing, preflighting, versioning, tagging, publishing to npm, and creating GitHub releases.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.0.6 | — | — | 🪝 | |
|
Package purpose: Project-first multi-terminal for Windows and Linux: real shells, grouped by project, in your browser
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: sessionpipe core: protocol types, harness adapters, privacy filter and redaction rulesets, outbox and sinks. Zero runtime dependencies. (published unscoped until the @sessionpipe npm org exists; the code is the same)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 通用 TTS 服务：Gemini / Azure / 本地 OpenAI 兼容语音合成，Hono 中间件式挂载
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Kevin Kern | — | 🪝 | |
|
Package purpose: Completion-wait MCP workers for Claude Code and Codex CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Git-backed causal source control: records how changes move between Git histories, with verifiable receipts, declared provenance, and portable metadata.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Firebase security posture analysis from your terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Numen Code - an AI coding agent in your terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 灵鹊 Larkwire 桥：跑在你的电脑上，把 Claude Code 会话送上手机（看/接/控）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Pi model provider for Grok Build: Grok keeps its native harness and tools while Pi drives the session over a local WebSocket ACP gateway
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Jax | — | 🪝 | |
|
Package purpose: Render JavaScript-heavy pages in a real browser so AI agents can read them. CLI, MCP server, and HTTP service.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local-keyed EVM agent account CLI for Agent Wallet
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: GiaDB for code: connect to a local database by name and call it from TypeScript.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Villion Inc. | — | 🪝 | |
|
Package purpose: Villion CMS에서 발행한 글을 Next.js App Router 사이트의 /blog 경로에 표시하는 블로그 UI 패키지입니다. Villion 고객사 전용입니다.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Shared React file previews and virtualized text editor.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: FastThree Model Context Protocol Server — 让 Claude/Cursor 通过 MCP 接入出图与 LLM 能力
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Connect Weixin iLink Bot with Pi Coding Agent
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CLI tool to scan repositories for exposed secrets and API keys
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 喜马拉雅（Himalaya）国际版专辑抓取与下载工具，基于 App 抓包还原的 imobile 接口
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: DeepSeek Harness services for resident agent workers: WebSocket, DingTalk user messaging and @-message routing, notifications, agent tasks, TypeSafe Jev
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Nia D Pham | — | 🪝 | |
|
Package purpose: Cyberine Loop — multi-provider AI agent orchestrator
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | camilyos | — | 🪝 | |
|
Package purpose: Codex brain + Antigravity worker orchestration kit with deterministic file-state workflow
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Vivi's personal setup CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | REBORN LABS | — | 🪝 | |
|
Package purpose: 한정 배포가 끝났습니다 — 더 이상 제공하지 않습니다.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: coda-secure from the command line: every action of the app and the API, plus operator tools.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Read-only agent-facing CLI over the Sentora vault packages: vault state, unsigned tx plans, yields API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Bussz e Emptyxzdev | — | 🪝 | |
|
Package purpose: CLI for configuring and building React Native projects
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local project knowledge for AI assistants through MCP.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MepMail MCP server for local clients (stdio): send and inspect transactional email from Claude, Cursor and any MCP client. MepMail's API is compatible with the Resend wire protocol.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local, agent-facing working memory for coding agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Dharmesh | — | 🪝 | |
|
Package purpose: A Claude plugin that builds story-driven, GSAP scroll-animated landing pages: it asks first, picks a layout direction, builds a tested Next.js site with full SEO, and checks it before you see it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Nikita Sklyarov | — | 🪝 | |
|
Package purpose: Agent sessions call each other across machines on your Tailscale network, in Pi and Claude Code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Install the Slow Mode skill into Codex.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | N11X Labs | — | 🪝 | |
|
Package purpose: Atlas SDK for the GhostNet encrypted mesh network
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | zfc-software | — | 🪝 | |
|
Package purpose: Stealth browser automation — CF bypass, Turnstile solver, fingerprint spoofing, proxy auth. Powered by rebrowser-puppeteer-core.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Dual-route Codex launcher that keeps ChatGPT auth as the default and adds an isolated Ezer API profile.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 灵鹊 Larkwire 桥：跑在你的电脑上，把 Claude Code 会话送上手机（看/接/控）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 灵鹊 Larkwire 哑中继：WSS 转发 + 配对路由 + 离线队列 + 计量，对内容零可见
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Catea Paper 的 Agent 版源码 monorepo，目标版本 0.3.0。2026-09-27 已按用户要求打包并安装 0.3.0 到当前 Obsidian，停用 CatUI ACP；原插件备份保存在用户 Library/Application Support/Catea/backups。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||