Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Catea Paper 的 Agent 版源码 monorepo，目标版本 0.3.0。2026-09-27 已按用户要求打包并安装 0.3.0 到当前 Obsidian，停用 CatUI ACP；原插件备份保存在用户 Library/Application Support/Catea/backups。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Muhammad Saad Amin | — | 🪝 | |
|
Package purpose: git add, commit (with a random message) and push in one command: acp
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Receipts for AI agent runs: what it touched, what it claimed, whether the two match.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Universal project summarizer, test runner & root-cause analyzer — supports every language, framework, game engine, CI/CD, database, API, DSA, AI, and app builds.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Limbus Foundation | — | 🪝 | |
|
Package purpose: Native Windows input capture and injection for Node.js.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Alex Alemi | — | 🪝 🌐 | |
|
Package purpose: A mobile-friendly, web-based DSL for order of magnitude calculations with Monte Carlo uncertainty propagation
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Versioned QH firmware product generator and maintainer tools
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Verified firmware installation runtime for QH product Skills
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Carlos | — | 🪝 | |
|
Package purpose: Baileys modificada
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Antonio Cuoco | — | 🪝 🌐 | |
|
Package purpose: Novren da terminale: file cifrati end-to-end, la chiave non lascia mai il tuo computer.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Secure reverse tunneling CLI & library with application-layer encryption (ECDH P-256 + AES-256-GCM) over WebSockets
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Scaffold a Next.js + NestJS monorepo with bun, turbo, oxlint, vitest, Prisma, Docker, kustomize and CI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: tag_todo の CLI。AI エージェントからの利用を想定し、全コマンドで JSON 出力に対応する
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Bussz e Emptyxz | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | REBORN LABS | — | 🪝 | |
|
Package purpose: AI 코딩 에이전트가 코드를 더 쓰기 전에 붙여 둘 공개 저장소 5개(NVIDIA/SkillSpector · reticlehq/reticle · JayPokale/Chisle · ibelick/ui-skills · dmmulroy/anti-slop)를 한국어로 안내하고, 스킬형 둘은 각 README 의 npx skills add 명령 그대로 붙인 뒤 새 폴더가 실제로 생겼는지 다시 셉니다. --check 가 여섯 칸(노드 · Git · 클로드 코드 ·
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | REBORN LABS | — | 🪝 | |
|
Package purpose: 주제 하나로 나레이션 있는 설명 영상(모션그래픽, 1280×720)을 만드는 원본 오픈소스 스킬 anything2explainer(Vincentwei1021/anything2explainer · PolyForm Noncommercial)가 이 컴퓨터에서 돌 준비가 됐는지 재고, 없으면 원저자 저장소에서 그대로 받아 놓는 한국어 설치기입니다. 원본 코드는 이 패키지 안에 담겨 있지 않습니다.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Universal project summarizer & test runner — scans any project for languages, frameworks, databases, cloud services, CI/CD pipelines and runs tests. Works with JavaScript, TypeScript, Python, Go, Rust, Java, Kotlin, PHP, Ruby, Dart, C#, and more.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Bussz & Empty | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Crab Cloud CLI (crab) — agent-first entry to your personal cloud, with skills bundled for Claude Code / Codex / ZCode.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Liu Weijie | — | 🪝 | |
|
Package purpose: BrewReel (精酿) for DeepSeek Harness: write a storyboard JSON, get a vertical promo video.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Installs the peer-agent skill (Claude/Codex collaboration over a shared file bus) into a project
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 1.0.0 | — | — | 🪝 | |
|
Package purpose: Nexus Recon and Scanning Suite
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | Jovi | — | 🪝 | |
|
Package purpose: Let ChatGPT read, and carefully edit, only the local folders you choose - through OpenAI's Secure MCP Tunnel, with no shell and no public port.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | nankonyo | — | 🪝 | |
|
Package purpose: Wajibkan 1 tugas = 1 file docs/*.log. Mirip ponytail/caveman untuk opencode.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Xcode 终端界面：真实执行、可恢复任务与本地模型连接
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | SuperWallet Team | — | 🪝 🌐 | |
|
Package purpose: Verify Super Wallet DID/VC credentials, presentations, SD-JWTs and ZK proofs against the Xphere trust registry
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | e.nekrasov | e.nekrasov | 🪝 | |
|
Package purpose: Session guard for OpenCode — gives schema-based workflow with strict validation between steps
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: herdr 에이전트 세션 트리 제어 CLI. Claude 가 에이전트를 세우고 · 지시하고 · 상태 변화를 받는다
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CI relay for Gatetrail: pushes SonarQube findings to Jira and carries risk decisions back.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Shardflux TypeScript SDK: open persistent agent workspaces by key and give your agent workspace tools (exec, files, processes, PTY, git, browser).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: shard: the Shardflux command line. Create an account, sign in, set up keys and billing, then open, run commands in, move files to, suspend, resume and fork persistent agent workspaces.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Longzai Intelligence One Digest core - 台账声明装载 + 统一行契约 SSOT + 源 kind 聚合 + 两桶分桶评分 + 统一报告导出 + 渲染域
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Jimmy Utterström | — | 🪝 | |
|
Package purpose: Decision-Linked Development: record, link, and audit development decisions alongside code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Connect an MCP client that starts local servers to your Stuga node, signing in through your browser.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | SecEnvVault Team | — | 🪝 🌐 | |
|
Package purpose: Zero-Knowledge .env & secret orchestration CLI and SDK for developers, teams, and CI/CD pipelines.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | chysev | — | 🪝 | |
|
Package purpose: Switch Claude Code between saved accounts and resume the same session
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Kaspero Labs | — | 🪝 | |
|
Package purpose: Kaspa Spend Map (.ksm): a portable file for verifying and spending Kaspa P2SH covenants without the service that created them
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Dineth Keshawa Jayathilaka | — | 🪝 | |
|
Package purpose: Harness for AI coding agents: an actor-critic loop with executed checks, bounded file scope, an independent reviewer and independent acceptance tests. CLI and MCP server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Application-layer firewall for every JavaScript server and edge runtime: managed WAF rules, Cloudflare-compatible rule expressions, invisible bot and anti-detect browser detection, adaptive DDoS mitigation, API schema validation and response data-leak pro
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Robert Davidson | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A personal developer board for your Git project in seconds. Local-first, AI-friendly, no ceremony.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | chengsongren | — | 🪝 | |
|
Package purpose: Desktop computer use for opencode via trycua/cua's cua-driver (MCP stdio): one consolidated `computer` tool (capture som/vision/ax + element-addressed click/type/key/scroll/drag), screenshots returned to the model as image attachments, semantic verdicts,
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | REBORN LABS | — | 🪝 | |
|
Package purpose: 클로드 코드가 말을 안 듣고 느려질 때 — 세션마다 실리는 스킬 설명·MCP·메모리, 도구 호출마다 도는 훅, CLAUDE.md 줄 수를 읽기만 해서 재는 한국어 스킬과 프롬프트 세트를 한 줄로 깔고, 깔자마자 한 번 재서 보여 줍니다.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Very Risky
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Windows cleanup & hygiene CLI for AI coding agents. Nothing changes until you confirm; every change leaves an undoable receipt.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||