Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 55 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.1 | — | — | 🪝 | |
|
Package purpose: Framework-independent pure-CDP browser automation core for Python, with an optional Robot Framework adapter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | star8545 | — | 🪝 🌐 | |
|
Package purpose: DSH appearance editor (client plugin): background / wallpaper / color tokens / custom CSS rules, plus auto-hiding top bar
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A local-first context retrieval and decision MCP server for coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Robert King | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Tupla | — | 🪝 🌐 | |
|
Package purpose: Servidor MCP sobre la API de Atiende ya: catálogo, clientes, cotizaciones, pedidos, pagos, envíos, reportes, notificaciones, integraciones, conversaciones de WhatsApp, auditoría y administración de plataforma, autenticado con tu API key.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: AI personas play your game and file reports to Ravensight.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | OpenSpec Contributors | — | 🪝 | |
|
Package purpose: AI-native Spec Coding 工具：确定性产品规格工作流
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CLI para instalar módulos desde el registry chiralkit
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Linea | — | 🪝 | |
|
Package purpose: Command-line companion for Linea — a calm reading workspace with audio and conversations
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Arin JobFit (Naukri edition) — local, privacy-first MCP server for job-description analysis. Independent; not affiliated with Naukri or Info Edge.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Arin JobFit (Indeed edition) — local, privacy-first MCP server for job-description analysis. Independent; not affiliated with Indeed.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Dev-only Astro integration that connects a project’s own dev server to the Astroix editor. It adds nothing to production builds.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Redis-backed Next.js cacheHandler and cacheHandlers for self-hosted, multi-instance deployments.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Standalone conversion kernel: file / url / video / text to knowledge-ready Markdown + local assets, with an HTTP API and a Vue 3 (Options API) console. The local media pipeline (audio/video/image → Markdown, subtitles first, optional local ASR/OCR) is bui
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | K. Takahashi | — | 🪝 | |
|
Package purpose: Evidence-preserving execution, verification and reuse across independent operators
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Sick of AI? Shoot it :D
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Re-derive a Curb number instead of trusting it: check any MarketClock round or Scorecard mark on X Layer against the evidence it was published with.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Drift Beacon | — | 🪝 | |
|
Package purpose: The Drift Beacon plugin SDK: APIs for plugin main code and UIs, the driftBeacon() Vite plugin and the dbplugin CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Tarik Razine | — | 🪝 | |
|
Package purpose: Create a working SaaS: TanStack Start, Convex and Better Auth, set up and ready to run
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The OSP command line: sign in, connect Claude Code and Codex, and read your storage facilities from a terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Command-line interface for Soln member authentication.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Robert King | — | 🪝 | |
|
Package purpose: This document describes the management of vulnerabilities for the project and all modules within the organization.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0a1 | — | — | 🪝 | |
|
Package purpose: Prototype with the official Anthropic and OpenAI SDKs on your Claude or ChatGPT subscription, then ship with an API key
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 55 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Kryptheon for AI coding tools: record a flow, check it after every change, and attack a copy of the database - from Cursor, Claude Code, Codex, Windsurf or Antigravity.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Accounts by iAurelius for Next.js (App Router): sign-in on the hosted page, sessions in an encrypted cookie, auth() on the server and <UserButton /> in your UI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Use your Mac from your iPhone or iPad
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Autonomous multi-stack mobile boilerplate CLI with self-healing diagnostics
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Brennan Zambo | — | 🪝 🌐 | |
|
Package purpose: Verifiable execution receipts for Vercel AI SDK agents. Build AI SDK tools on Zambo: every call returns a verifiable receipt at zambo.dev.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Nitin | — | 🪝 | |
|
Package purpose: Development-only React source inspector with component breadcrumbs for Next.js and Vite.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Microsoft sign-in for Pallasoft internal Remix apps
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TypeScript SDK for the Snowflake Cortex Agent REST API (agent:run streaming, threads, feedback)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Anudeep Adiraju | — | 🪝 | |
|
Package purpose: Agent skill + renderer for SaaS launch videos: HTML/CSS scenes -> MP4 via Playwright + ffmpeg, local TTS. Works with Claude Code, Codex, Cursor, Gemini CLI, OpenCode.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Alister Pineda | — | 🪝 | |
|
Package purpose: Unofficial MCP server for YNAB: read-only spending, cash flow and budget analysis from a local cache
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Seb Insua | — | 🪝 | |
|
Package purpose: Edit repositories with Bun programs, with first-class support for TypeScript and JavaScript: a CLI and a library that Pi's code tool is built on.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Auth engine, OpenAPI loader, HTTP executor, and response shaper. Extracted from openapi-dynamic-mcp.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | studylida | — | 🪝 | |
|
Package purpose: Seamless bidirectional conversation sync and backup for Google Antigravity across multiple machines.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Mario Zechner | — | 🪝 | |
|
Package purpose: Terminal User Interface library with differential rendering for efficient text-based applications
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Offer to mail this branch's diff, as a git bundle, on every push. One dependency, a few env vars, and a pre-push hook it installs for you.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: AI が描き、人が直し、また AI が理解できる構成図エディタ（Phase 0 / 計測段階）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Scaffold a top-secret app
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: looot CLI: connect an AI agent to the looot catalog (discover, inspect, run, and get billed for external capabilities) from the command line.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Connect a local PC to plusOne through an outbound WebSocket relay
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: SDLC machine: one issue, one pull request, one change
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Count OpenSpec scenario coverage from vitest registrations
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Longzai Intelligence KOL core - 台账声明装载 + 统一行契约 SSOT + 源 kind 聚合 + 统一导出 + 人工登记通道 + 渲染域
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Isolated Gemini Cloud Code Assist OAuth for DeepSeek Harness. Independent store. Gemini flash only.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||