Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 50 | 23h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Polyfill for HTML popover anchor positioning
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 23h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Polyfill for CSS anchor positioning fallback
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 23h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Tiny utility for viewport unit calculations
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 23h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server that runs the Yichus API engine (Yichus/Mcp Bosatsu config) over stdio
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 23h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Polyfill for CSS gap decorations proposal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 23h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Lightweight polyfill for :focus-visible pseudo-class
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 23h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Lightweight helper for managing focus groups in web components
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 24h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: DeepSeek Harness plugin: use a Cursor workspace (skills, rules, hooks, MCP) and the Cursor agent CLI as picker + AgentTeams model routes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 24h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Polyfill for CSS scroll anchoring in older browsers
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 24h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 24h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 24h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Manage tabindex attributes for accessible navigation
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 25h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 26h | — | — | — |
Unverified Signal
|
— | npm | latest | TribeNest | — | 🪝 🌐 | |
|
Package purpose: tribenest-operator: operator CLI for TribeNest backstage (outreach POC workspaces and code website templates)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 26h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Knac local runtime — trusted secret injection for running Knacs without secrets passing through the model's context.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 26h | — | — | — |
Unverified Signal
|
— | npm | latest | Hatem Hosny | — | 🪝 🌐 | |
|
Package purpose: Run Ada in the browser via WebAssembly (HAC compiler + p-code VM). No server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 26h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: People you deal with, each pointing at the company they work for and filled in from LinkedIn and the web.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 27h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 27h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Your calendar meetings as records, synced from Google Calendar, with attendees as contacts and screenshots filed beside each call.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 27h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Lightweight flexbox layout utilities for modern CSS
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 27h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Minimal CSS custom property token parser
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 28h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Waie | — | 🪝 🌐 | |
|
Package purpose: Baileys crash fork — modified by Waie. Bug fixes + extra features for WA bot.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 28h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Fritzing (develop, commit 5aa56a5, 2026-07-28) for the browser: the breadboard, schematic and PCB editor, Qt 6.10.3 for wasm
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 28h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Euro-Office's document editors running entirely in the browser, with x2t as WebAssembly (part eurooffice-web-apps-2 of: @kreijstal/eurooffice @kreijstal/eurooffice-fonts-1 @kreijstal/eurooffice-fonts-2 @kreijstal/eurooffice-sdkjs-common @kreijstal/eurooff
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 28h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Euro-Office's document editors running entirely in the browser, with x2t as WebAssembly (part eurooffice-web-apps-1 of: @kreijstal/eurooffice @kreijstal/eurooffice-fonts-1 @kreijstal/eurooffice-fonts-2 @kreijstal/eurooffice-sdkjs-common @kreijstal/eurooff
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 28h | — | — | — |
Unverified Signal
|
— | npm | latest | Obsessive Solutions | — | 🪝 🌐 | |
|
Package purpose: Multi-agent orchestration CLI for IDE-based AI cuadrillas
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 29h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP server for interacting with remote machines over SSH using your existing OpenSSH configuration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 29h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Gua Mah Ampas | — | 🪝 🌐 | |
|
Package purpose: A WebSockets library for interacting with WhatsApp Web
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 29h | — | — | — |
Unverified Signal
|
— | npm | latest | TumorScript Contributors | — | 🪝 | |
|
Package purpose: An esoteric, biomorphic programming language runtime where data mutates when observed
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 30h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Governance, PDLC runtime and knowledge graph engine for ArchiDev / PDLC.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 30h | — | — | — |
Unverified Signal
|
— | npm | latest | Tarun Agnihotri | — | 🪝 🌐 | |
|
Package purpose: Institutional memory for your codebase. Cogito captures architectural decisions and surfaces them automatically when relevant files are edited.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 30h | — | — | — |
Unverified Signal
|
— | npm | latest | Abel Mekonen | — | 🪝 🌐 | |
|
Package purpose: Token-optimized SonarQube queue manager and issue resolution engine
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 31h | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: The Protocol 3 standard for Volter twin packs: the criteria a pack is graded by, the grader, the gate a pack repository and the twin catalog run on every change and submission, and the spec derivation the grade checks against. Pin a version: every place a
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 32h | — | — | — |
Unverified Signal
|
— | npm | latest | Compound Labs | — | 🪝 🌐 | |
|
Package purpose: Open-source compliance agent. It reads a buyer's documents, applies a rule set, drafts grounded text and renders a filing pack.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 32h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: EZiL command line: sign in, clone and push EZiL repositories with plain git (github.ezil.work), session evidence for EZiL Works.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 32h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Finsa-SC | — | 🪝 | |
|
Package purpose: Tools to sync and update semantic versions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 32h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Flex Layer: AI-friendly 2D frame markup with flex layout, HTML text and SVG-style shapes, rendered to PNG
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A terminal switcher for running opencode servers: list every session, attach with a keystroke, stop headless instances
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | Imani Manyara | — | 🪝 🌐 | |
|
Package purpose: Framework-agnostic docs-site engine + in-site CLI, with the render stacks built in as subpath adapters (docsmith/vue = VitePress, docsmith/react = Fumadocs). Config-driven aggregation of many packages docs into one site; scaffold + orchestrate with @simta
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 34h | — | — | — |
Unverified Signal
|
— | npm | latest | Toan Nguyen | — | 🪝 | |
|
Package purpose: Zero-cost, unlimited Figma MCP server: no API key, no rate limits (Rust port of vkhanhqui/figma-mcp-go)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 34h | — | — | — |
Unverified Signal
|
— | npm | latest | Sidney Bissoli | — | 🪝 🌐 | |
|
Package purpose: Impressão digital da superfície de um servidor MCP: initialize (instructions + capabilities) + tools/resources/prompts + quem responde sem token, travados ao lado da versão — mudou sem subir a versão = build vermelho e deploy recusado; mais a conferência
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 34h | — | — | — |
Unverified Signal
|
— | npm | latest | Hari | — | 🪝 | |
|
Package purpose: Shared Zod schemas for Founder Circle — single source of truth for API contracts, validation, and TypeScript types (backend + web client + app client).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 34h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A terminal switcher for running opencode servers: list every session, attach with a keystroke, stop headless instances
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 36h | — | — | — |
Unverified Signal
|
— | npm | latest | Kevin Malmgren | — | 🪝 🌐 | |
|
Package purpose: Prata – local, private Swedish speech-to-text in your browser (KB-Whisper and Klang Pianissimo). Downloads the prebuilt Prata binaries and starts the web UI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 38h | — | — | — |
Unverified Signal
|
— | npm | latest | Ben Dechrai | — | 🪝 🌐 | |
|
Package purpose: A local, offline, conflict-free ticket board for AI agents working on one project.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 38h | — | — | — |
Unverified Signal
|
— | npm | latest | lizheming | — | 🪝 🌐 | |
|
Package purpose: A Simple & Fast Node Bloging Platform Base On ThinkJS 3.x & ReactJS & ES2015+
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 39h | — | — | — |
Unverified Signal
|
— | npm | latest | PuterJam | — | 🪝 🌐 | |
|
Package purpose: Index local documents and images in LanceDB, then search them from Finch.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 39h | — | — | — |
Very Risky
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: One panel for all your AI coding agents. Know which one is waiting on you.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 39h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A lightweight, expressive environment profile manager.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 40h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||