Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Configurable Bash and PowerShell overrides for the DSH standard preset.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: dsh-cli：终端 CLI + 本机工具服务 —— 让别的 agent（openclaw 等）能调用 dsh 执行任务并查看工作情况；dsh 只管执行与查询，定时/调度归调用方。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Based on syntax tree code verification, and provide conversion and monitoring
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Lightweight, Git-like Version Control System (VCS) CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Agent team runtime layer for DeepSeek Harness: named subagents, per-agent personas and tool surfaces, explicit delegation graph, and absolute depth/width budgets.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Servidor MCP de IzyTesting: expone requerimientos y casos de prueba a cualquier cliente MCP (Claude Code, IDEs, aplicaciones propias).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Build tiks in your own repo and publish them to Codetik.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Miravia Seller Team | — | 🪝 | |
|
Package purpose: Miravia Inventory Skill installer — one command to install the Miravia inventory management skill (Manage My Stock) into any AI Agent (Qoder / Cursor / Claude Code). Product publishing has moved to miravia_product_listing.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: ElenJS CDN — compress media and upload to Qiniu / Tencent COS / Aliyun OSS
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A local-first knowledge graph, worked through a CLI and a small webapp — nodes and the links between them are the source; any `.md` file you see is a projection, never something to hand-edit.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: B20MINER CLI — mine B20MINER on Base Sepolia for your owner wallet from the terminal (test network).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | amineutron | — | 🪝 | |
|
Package purpose: MCP server for Philips TV control (JointSpace API + ADB)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | mcfearsome | — | 🪝 | |
|
Package purpose: Cross-session, cross-provider agent collaboration over MCP
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Said Sürücü | — | 🪝 🌐 | |
|
Package purpose: Yargı PRO
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: OODS Foundry is the object-oriented design system that builds your screens from your objects. Your AI assistant drives it over MCP: your objects, traits and brand become React and Vue apps of governed components and tokens, with charts it certifies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | REBORN LABS | — | 🪝 | |
|
Package purpose: DaVinci Resolve 를 클로드 코드에 붙이는 한국어 스킬을 스킬 폴더에 놓고, 이 컴퓨터의 Resolve 판(Studio/무료)·버전을 재서 붙는 길을 하나로 정해 줍니다. 공식 MCP(21.1 Studio · File > Setup AI Assistants)와 커뮤니티 MCP(samuelgursky/davinci-resolve-mcp · MIT)를 가려 안내하고, 무료판 21.1 은 붙지 않는다고 그대로 말합니다.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Review pull request changes with Jev through Vercel AI Gateway
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | REBORN LABS | — | 🪝 | |
|
Package purpose: 엔비디아 SkillSpector(Apache-2.0)로 클로드 코드 스킬을 검사하고, 걸린 줄을 코드/설명 글로 갈라 한국어로 읽어 주는 스킬을 스킬 폴더에 놓고, 파일이 실제로 늘었는지 다시 셉니다. uv 가 있으면 검사기도 엔비디아 저장소에서 받아 깔고, 방금 깐 스킬을 실제로 검사해 봅니다.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Arach Tchoupani | — | 🪝 | |
|
Package purpose: MCP server for Arc — AI agents author, validate, render, and diff architecture diagrams as code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.25 | — | — | 🪝 | |
|
Package purpose: Standalone command line interface for M3
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: OpenCode provider plugin for Huawei Cloud CodeArts (snap-access InferHub API, SDK-HMAC-SHA256 signed)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Private / local MCP connector between AI agents (Claude Code, Cursor, Codex, …) and the Mockupflo editor open in your browser
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP resources, prompts, and lazily activated native tools for Pi Coding Agent
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: See where a Copilot CLI or pi coding-agent session spent its time, tokens and credits, and what to change.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Gadia AIMS local AI coding agent CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Jems AI | — | 🪝 | |
|
Package purpose: An OpenCode-powered AI coding assistant with a customizable Skill ecosystem
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Experimental local HWP 3 and HWP 5 to editable Word DOCX converter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Portable ecommerce image-planning Skill for Codex and SealSeek.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Mario Zechner | — | 🪝 | |
|
Package purpose: Terminal User Interface library with differential rendering for efficient text-based applications
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Portable ecommerce image-planning Skill for Codex and SealSeek.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | REBORN LABS | — | 🪝 | |
|
Package purpose: 클로드가 「끝났다」고 말하기 전에 완주표(조건 · 확인 명령 · 기대 문구 · 증거)부터 적고, 명령을 실제로 돌려 기대 문구가 나온 것만 됐다고 하게 하는 스킬을 클로드 코드 스킬 폴더에 놓고, 파일이 실제로 늘었는지 다시 셉니다. 계약은 Leonxlnx/unlazy(MIT)의 GATES.md 와 같고, 원본이 같은 스킬 폴더에 있으면 그쪽 /unlazy 로 넘깁니다.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Gary Gentry | — | 🪝 | |
|
Package purpose: The `decide` CLI: typed, calibrated decisions for coding agents, hooks and CI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Out-of-tree DSH bundle for ChatGPT Codex OAuth and live models
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Keep the credentials an automation signs in with: sealed at rest, shared through SSM, every use audited, expiries watched.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Submit solutions for the ETH Network Security course project.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run an Underheard voice interview inside your own interface: one function call, your design, the answers and your metadata pushed back to your endpoint.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Voight | — | 🪝 | |
|
Package purpose: MCP server for Voight Agents: deploy, operate and orchestrate your AI agents from any MCP client.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Gospelo | — | 🪝 | |
|
Package purpose: View Markdown + MermaidJS in the terminal: a full-screen viewer with clickable links that also opens HTML, images and PDFs, or inline images. For Ghostty, Kitty, WezTerm, iTerm2 and other terminals.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Signet backend primitives. Auth first.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: ArggonManager kernel library: items, rules, paths and the --json envelopes (ADR 0013)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Loutre in your terminal: serve an OpenAPI, Swagger, TypeScript, Postman, Insomnia, Bruno, HAR, json-server, curl or GraphQL description as a mock API with realistic data, or push it to loutre.run.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Sikka Software | — | 🪝 🌐 | |
|
Package purpose: Screenshot any rendered React component into marketing-ready PNGs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Backend design principles for Keel projects — the API reuse ladder, contract-first routes, migration safety, timeouts and authz, checked against Python and SQL
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: OpenWorkgraph 是基于无限画布思想的软件开发工作流产品，同时面向其他领域的工作组织与协作。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Firebase security posture analysis from your terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Офис агентов: проект объявляет манифест, офис его применяет поверх журнала фактов
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for Logbook: lets AI agents create polls and surveys on Sui, vote, and read (Seal-encrypted) results
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CLI that generates LDkit schemas from a realm's SHACL shapes, read from its datastore
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 55 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK for Logbook: verifiable surveys, polls and votes on Sui, with Seal-encrypted private campaigns
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||