Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 55 | 3684d | — | — | — |
SUSPICIOUS
|
— | npm | latest | dutu | — | 🪝 | |
|
Package purpose: Kraken API client for REST and WebSocket API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 0h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Involvex | — | 🪝 | |
|
Package purpose: A feature-rich command-line audio/video downloader - Node.js wrapper with TypeScript API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 1h | — | — | — |
Unverified Signal
|
— | npm | latest | Vincent Caudron | — | 🪝 🌐 | |
|
Package purpose: Map and audit a TypeScript codebase — the feature dependency graph, its layers, its metrics, scripted and AI audit rules, and a CI guard against regressions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 2h | — | — | — |
Unverified Signal
|
— | npm | latest | Flipsi | — | 🪝 🌐 | |
|
Package purpose: Zero-friction real-time file synchronization across networks via Cloudflare Tunnels, Tailscale, or LAN
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 2h | — | — | — |
Unverified Signal
|
— | npm | latest | Mads Sauer | — | 🪝 🌐 | |
|
Package purpose: Share a port on your computer at a public link, or put a built site up, from Node.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3h | — | — | — |
Unverified Signal
|
— | npm | latest | Ondřej Úlehla | — | 🪝 | |
|
Package purpose: top for your MCP servers: how many tokens do their tool definitions cost before the first prompt?
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Integration-testing infrastructure for Zcash payment applications
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3h | — | — | — |
Unverified Signal
|
— | npm | latest | Priyanshu Singh | — | 🪝 | |
|
Package purpose: Stops AI agents from being tricked by hidden instructions in web pages, emails and files.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A local-first CLI that stores, previews, and publishes generated HTML documents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: lensfun compiled to WebAssembly for browsers
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Gawlo CLI — AI-native application security testing
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5h | — | — | — |
Unverified Signal
|
— | npm | latest | Julien Dussart | — | 🪝 🌐 | |
|
Package purpose: Your scheduled jobs (launchd, cron, systemd timers) as pixel-art workers in an open space, in your browser.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DeepSeek Harness 插件：在 DSH 里管理 CLIProxyAPI 的账号 —— 余额、签到、任务、切换账号，并让 CPA 随 DSH 启停。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Standalone persistent Agent Client: connect to a Hub, durably execute local platform agents and policy-gated capabilities, and report state upstream.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI for Kanban project planning, work items, sprints, and agent workflows.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 监控 dsh 进程及其子进程的资源占用,提供进程句柄汇报工具与 UI 面板展示
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ContextOS Execution Layer and MCP Server
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8h | — | — | — |
Unverified Signal
|
— | npm | latest | 李炜钰 | — | 🪝 🌐 | |
|
Package purpose: UI Flow Mapper — 在 DSH 右侧栏画出软件的界面与交互跳转，导出一份机器可读的画布 JSON 给 AI 生成前后端。A flow-map editor for the DSH right sidebar: draw screens and their jumps, export a canvas JSON an AI can implement.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9h | — | — | — |
Unverified Signal
|
— | npm | latest | an5ORM | — | 🪝 🌐 | |
|
Package purpose: Shared CLI for changelog generation, release automation, and component-based commits.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9h | — | — | — |
Unverified Signal
|
— | npm | latest | FuJackGao | — | 🪝 🌐 | |
|
Package purpose: Codex × DeepSeek Harness 双向编码协作：Codex 主导派活与验收，DeepSeek Harness 编码子代理在共享工作目录执行并回传，独立评审子代理实际跑通构建/测试后出具报告。提供 DSH 宿主网关插件、零依赖 MCP 服务器与 Codex 技能三件套。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9h | — | — | — |
Unverified Signal
|
— | npm | latest | Ateng | — | 🪝 | |
|
Package purpose: 基于 SSH 协议连接与操控 Linux/Unix 系统的 Model Context Protocol (MCP) 服务
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 11h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Shared project context for people and coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 11h | — | — | — |
Unverified Signal
|
— | npm | latest | N3kOk0 | — | 🪝 🌐 | |
|
Package purpose: Windows 10 (Fluent) acrylic theme for the DSH Web GUI and desktop app: Win10 light/dark --dsw-* token palette, site-wide square corners, and bounded backdrop-filter acrylic on the sidebar, task board and right-hand file panel. Dual-half plugin: a browser
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 11h | — | — | — |
Unverified Signal
|
— | npm | latest | dell-optiplex-790 | — | 🪝 🌐 | |
|
Package purpose: Library for reading and writing to .pak files, includes a command-line tool to run them as code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Docker-style compose for agentic loops. Successor to flota.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Shaggyah | — | 🪝 🌐 | |
|
Package purpose: Shaggyaha Baileys - WhatsApp Web API (clean fork of WhiskeySockets/Baileys) with AI icon, text-rendered code/table messages and upstream security/LID fixes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12h | — | — | — |
Unverified Signal
|
— | npm | latest | Minsok_Kwon | — | 🪝 🌐 | |
|
Package purpose: mcp services that connects gpt with imtp mail services
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 13h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Hodios — prompts by Hermes IDE. Validate, search and install open prompts, personas and workflows for Claude Code, Codex, Cursor, Copilot, Gemini and more.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 14h | — | — | — |
Unverified Signal
|
— | npm | latest | Wang Miaosheng | — | 🪝 🌐 | |
|
Package purpose: Relay-content shape guard for the DeepSeek Harness agent: the content face beside entropy-guard's control face. Scans only content crossing a trust boundary, annotates and accounts by default, and denies only value-shaped credentials — recording label, of
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 14h | — | — | — |
Unverified Signal
|
— | npm | latest | sukima-log | — | 🪝 🌐 | |
|
Package purpose: See at a glance what your AI agents and your team are working on: tasks as input/output boxes that go from BlackBox to WhiteBox. Web app + CLI, one boxglow.json in your repo.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 14h | — | — | — |
Unverified Signal
|
— | npm | latest | Teoh Chin Heng | — | 🪝 | |
|
Package purpose: doc.cheap tools for the AI SDK – read passports, ID cards and driving licences into structured fields. Free: 100 documents every month, then $0.01 each
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 16h | — | — | — |
Unverified Signal
|
— | npm | latest | Cortiqa | — | 🪝 🌐 | |
|
Package purpose: Run AI. Offline. Everywhere. Official JavaScript/TypeScript SDK and CLI for Kricko local LLM engine by Cortiqa.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 16h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Geometry Processing library for W3DTS
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 16h | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Browser-only harness runtime: in-memory VFS, module transform and loader, postMessage tunnel, and the dedicated Web Worker assembly, with the Node-compatibility layer that lets the host tree run unchanged
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 16h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TypeScript client for Mayarin: commerce, payments, webhooks and x402 gates.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 17h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Ryuu | — | 🪝 🌐 | |
|
Package purpose: Mikuryu — Custom WhatsApp Web API dengan full interactive button support, fork dari Baileys
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 18h | — | — | — |
Unverified Signal
|
— | npm | latest | Sam Primeaux | — | 🪝 🌐 | |
|
Package purpose: Tauri desktop shell for AgentSam-powered brand dashboards — manifest-driven, multi-brand installs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 19h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Ryuu | — | 🪝 🌐 | |
|
Package purpose: Mikuryu — Custom WhatsApp Web API dengan full interactive button support, fork dari Baileys
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 21h | — | — | — |
Unverified Signal
|
— | npm | latest | Steven Shen | — | 🪝 🌐 | |
|
Package purpose: Metrio AI command-line interface: run prompts and workflows, manage Metrio resources
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 21h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Polyfill for CSS light-dark() color function
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 21h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CSS relative color syntax utility
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 21h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Polyfill for CSS reading-flow property
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 22h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Polyfill for CSS interop observer API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 22h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Polyfill for CSS scroll-snap-target pseudo-class
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 22h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Polyfill for CSS scroll-state container queries
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 22h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Polyfill for CSS @starting-style rule
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 22h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Polyfill for CSS field-sizing property
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||