FlagThis | Sentinel Threat Feed

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Growing Packages Fastest-adopted since publish Top Emails Accounts most linked to flagged findings About What Sentinel does & why

Sorted by risk score. Filter with email:, domain:, keyword:, or version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d for how recently a package was published (combine both for a range, e.g. age:>1h age:<6h), or a bare word for a package-name search. Click a package to see the signals behind its score before opening its registry page.

Package	Score ▼	Age	Users	Lines	Growth	Verdict	Targeted	Ecosystem	Version	Author	Email domain
	65	939d	13	121	↑0.0/day	SUSPICIOUS	replicate	pypi	0.1.0	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/flying-delta-llms-replicate/ Matched naming pattern: flying-replicate-llms Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 939 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 121 lines, 4.7 kB across 2 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'flying-delta-llms-replicate' matches AI hallucination template [flying] + [replicate] + [llms]. HIGHClaims critical enterprise brand identity ('REPLICATE'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFOEstablished pre-AI legacy package registered 938 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	943d	8	49	↑0.0/day	SUSPICIOUS	llama	pypi	0.1.0	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-prompts-lmformatenforcer-utils/ Matched naming pattern: llama-llama-prompts Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 943 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 8/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 49 lines, 2.1 kB across 2 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-prompts-lmformatenforcer-utils' matches AI hallucination template [llama] + [llama] + [prompts]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFOEstablished pre-AI legacy package registered 942 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	944d	14	190	↑0.0/day	SUSPICIOUS	openai	pypi	0.1.0	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/flying-delta-llms-azure-openai/ Matched naming pattern: flying-openai-llms Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 944 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 14/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 190 lines, 8.3 kB across 3 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'flying-delta-llms-azure-openai' matches AI hallucination template [flying] + [openai] + [llms]. HIGHClaims critical enterprise brand identity ('OPENAI'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFOEstablished pre-AI legacy package registered 942 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	944d	11	136	↑0.0/day	SUSPICIOUS	openai	pypi	0.1.0	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/flying-delta-llms-openai-like/ Matched naming pattern: flying-openai-llms Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 944 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 11/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 136 lines, 5.9 kB across 2 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'flying-delta-llms-openai-like' matches AI hallucination template [flying] + [openai] + [llms]. HIGHClaims critical enterprise brand identity ('OPENAI'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFOEstablished pre-AI legacy package registered 942 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	65	1585d	22	29	↑0.0/day	SUSPICIOUS	google	pypi	0.0.4	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/let-me-google-that/ Matched naming pattern: let-google-google Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 1585 Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself) Registry downloads: 22/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 29 lines, 906 Bytes across 4 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'let-me-google-that' matches AI hallucination template [let] + [google] + [google]. HIGHClaims critical enterprise brand identity ('GOOGLE'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 4 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFOEstablished pre-AI legacy package registered 1583 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	21	112d	9	451	↑0.1/day	BENIGN_COMMUNITY	stability	pypi	0.1.0	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/stability-eval/ Matched naming pattern: python-stability-eval Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 112 Registry downloads: 9/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 451 lines, 17.9 kB across 8 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'stability-eval' matches AI hallucination template [python] + [stability] + [eval]. HIGHClaims critical enterprise brand identity ('STABILITY'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (111 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	19	256d	47	259	↑0.2/day	BENIGN_COMMUNITY	openai	pypi	0.3.2.post1	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/basejump-llama-index-llms-azure-openai/ Matched naming pattern: basejump-openai-index Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 256 Registry downloads: 47/month, 17/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 259 lines, 11.6 kB across 3 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'basejump-llama-index-llms-azure-openai' matches AI hallucination template [basejump] + [openai] + [index]. HIGHClaims critical enterprise brand identity ('OPENAI'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. MEDIUMPackage registered 255 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	19	256d	50	479	↑0.2/day	BENIGN_COMMUNITY	openai	pypi	0.3.1.post1	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/basejump-llama-index-embeddings-openai/ Matched naming pattern: basejump-openai-index Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 256 Registry downloads: 50/month, 18/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 479 lines, 20.1 kB across 3 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'basejump-llama-index-embeddings-openai' matches AI hallucination template [basejump] + [openai] + [index]. HIGHClaims critical enterprise brand identity ('OPENAI'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. MEDIUMPackage registered 255 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	19	256d	45	321	↑0.2/day	BENIGN_COMMUNITY	openai	pypi	0.3.1.post1	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/basejump-llama-index-program-openai/ Matched naming pattern: basejump-openai-index Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 256 Registry downloads: 45/month, 13/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 321 lines, 14.1 kB across 3 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'basejump-llama-index-program-openai' matches AI hallucination template [basejump] + [openai] + [index]. HIGHClaims critical enterprise brand identity ('OPENAI'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. MEDIUMPackage registered 255 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	19	348d	9	325	↑0.0/day	BENIGN_COMMUNITY	llama	pypi	0.1.0	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-vector-stores-vectorx/ Matched naming pattern: llama-llama-vector Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 348 Registry downloads: 9/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 325 lines, 14.0 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-vector-stores-vectorx' matches AI hallucination template [llama] + [llama] + [vector]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. MEDIUMPackage registered 346 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	19	395d	0	494	↑0.0/day	BENIGN_COMMUNITY	langchain	pypi	0.0.3	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/langchain-coherence/ Matched naming pattern: python-langchain-coherence Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 395 Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 494 lines, 23.4 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'langchain-coherence' matches AI hallucination template [python] + [langchain] + [coherence]. HIGHClaims critical enterprise brand identity ('LANGCHAIN'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. HIGHPackage claims legitimate high-profile upstream repository 'langchain-ai/langchain' (langchain) in metadata to artificially inflate trust / SourceRank. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	19	641d	8	133	↑0.0/day	BENIGN_COMMUNITY	langchain	pypi	0.1.0	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/langchain-parrot-link/ Matched naming pattern: langchain-langchain-link Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 641 Registry downloads: 8/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 133 lines, 6.8 kB across 2 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'langchain-parrot-link' matches AI hallucination template [langchain] + [langchain] + [link]. HIGHClaims critical enterprise brand identity ('LANGCHAIN'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	18	115d	10	768	↑0.1/day	BENIGN_COMMUNITY	llama	pypi	0.1.0	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-vector-stores-actian-vectorai/ Matched naming pattern: llama-llama-vector Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 115 Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 768 lines, 34.7 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-vector-stores-actian-vectorai' matches AI hallucination template [llama] + [llama] + [vector]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (114 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. INFOSubstantial functional codebase (768 LOC across 2 file(s)). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	18	123d	0	12,598	↑0.0/day	BENIGN_COMMUNITY	perplexity	pypi	0.1.2	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/perplexity-at-home/ Matched naming pattern: perplexity-perplexity-home Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 123 Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 12598 lines, 506.2 kB across 91 files (LARGE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'perplexity-at-home' matches AI hallucination template [perplexity] + [perplexity] + [home]. HIGHClaims critical enterprise brand identity ('PERPLEXITY'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance. HIGHPackage registered recently (122 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. INFOSubstantial functional codebase (12598 LOC across 91 file(s)). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	18	179d	16	313	↑0.1/day	BENIGN_COMMUNITY	llama	pypi	0.2.0	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-storage-chat-store-opensearch/ Matched naming pattern: llama-llama-storage Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 179 Registry downloads: 16/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 313 lines, 14.5 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-storage-chat-store-opensearch' matches AI hallucination template [llama] + [llama] + [storage]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. HIGHPackage registered recently (177 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	16	224d	16	209	↑0.1/day	BENIGN_COMMUNITY	llama	pypi	0.2.0	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-tools-parallel-web-systems/ Matched naming pattern: llama-llama-tools Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 224 Registry downloads: 16/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 209 lines, 9.4 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-tools-parallel-web-systems' matches AI hallucination template [llama] + [llama] + [tools]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage registered 222 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	16	256d	0	1,307	↑0.0/day	BENIGN_COMMUNITY	openai	pypi	0.4.7.post1	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/basejump-llama-index-agent-openai/ Matched naming pattern: basejump-openai-index Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 256 Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 1307 lines, 56.1 kB across 5 files (LARGE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'basejump-llama-index-agent-openai' matches AI hallucination template [basejump] + [openai] + [index]. HIGHClaims critical enterprise brand identity ('OPENAI'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. MEDIUMPackage registered 255 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. INFOSubstantial functional codebase (1307 LOC across 5 file(s)). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	16	343d	21	2,403	↑0.1/day	BENIGN_COMMUNITY	claude	pypi	2.0.0	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/claude-parser/ Matched naming pattern: python-claude-parser Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 343 Registry downloads: 21/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 2403 lines, 109.3 kB across 64 files (LARGE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'claude-parser' matches AI hallucination template [python] + [claude] + [parser]. HIGHClaims critical enterprise brand identity ('CLAUDE'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. MEDIUMPackage registered 342 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. INFOSubstantial functional codebase (2403 LOC across 64 file(s)). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	16	544d	8	6,852	↑0.0/day	BENIGN_COMMUNITY	langchain	pypi	0.1.0	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/ylz-langchain/ Matched naming pattern: python-langchain-ylz Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 544 Registry downloads: 8/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 6852 lines, 357.6 kB across 100 files (LARGE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'ylz-langchain' matches AI hallucination template [python] + [langchain] + [ylz]. HIGHClaims critical enterprise brand identity ('LANGCHAIN'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFONo malicious install-time hooks or shell cradles detected in package AST. INFOSubstantial functional codebase (6852 LOC across 100 file(s)). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	16	1719d	22	322	↑0.0/day	BENIGN_COMMUNITY	kraken	pypi	0.1.3	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/practica-kraken/ Matched naming pattern: python-kraken-practica Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 1719 Registry downloads: 22/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 322 lines, 12.2 kB across 4 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'practica-kraken' matches AI hallucination template [python] + [kraken] + [practica]. HIGHClaims critical enterprise brand identity ('KRAKEN'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage published 4 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFOEstablished pre-AI legacy package registered 1718 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	126d	194	1,329	↑1.5/day	BENIGN_COMMUNITY	aws	pypi	1.2.0	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/aws-radar/ Matched naming pattern: python-aws-radar Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 126 Registry downloads: 194/month, 137/week (MODERATE_USAGE) Codebase size: 1329 lines, 75.4 kB across 7 files (LARGE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'aws-radar' matches AI hallucination template [python] + [aws] + [radar]. HIGHClaims critical enterprise brand identity ('AWS'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. HIGHPackage registered recently (125 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. INFOSubstantial functional codebase (1329 LOC across 7 file(s)). INFOModerate community usage with 191 monthly downloads. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	143d	357	1,669	↑2.5/day	BENIGN_COMMUNITY	llama	pypi	0.3.4	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-graph-stores-ladybug/ Matched naming pattern: llama-llama-graph Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 143 Registry downloads: 357/month, 58/week (MODERATE_USAGE) Codebase size: 1669 lines, 93.0 kB across 4 files (LARGE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-graph-stores-ladybug' matches AI hallucination template [llama] + [llama] + [graph]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. HIGHPackage registered recently (142 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. INFOSubstantial functional codebase (1669 LOC across 4 file(s)). INFOModerate community usage with 357 monthly downloads. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	256d	0	1,064	↑0.0/day	BENIGN_COMMUNITY	llama	pypi	0.5.0.post2	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/basejump-llama-index-llms-bedrock-converse/ Matched naming pattern: basejump-llama-index Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 256 Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 1064 lines, 45.4 kB across 3 files (LARGE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'basejump-llama-index-llms-bedrock-converse' matches AI hallucination template [basejump] + [llama] + [index]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage registered 255 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. INFOSubstantial functional codebase (1064 LOC across 3 file(s)). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	427d	25	373	↑0.1/day	BENIGN_COMMUNITY	llama	pypi	0.1.0	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-vector-stores-db2/ Matched naming pattern: llama-llama-vector Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 427 Registry downloads: 25/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 373 lines, 14.0 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-vector-stores-db2' matches AI hallucination template [llama] + [llama] + [vector]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	433d	22	414	↑0.1/day	BENIGN_COMMUNITY	llama	pypi	0.3.0	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-vector-stores-opengauss/ Matched naming pattern: llama-llama-vector Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 433 Registry downloads: 22/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 414 lines, 17.4 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-vector-stores-opengauss' matches AI hallucination template [llama] + [llama] + [vector]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	449d	36	789	↑0.1/day	BENIGN_COMMUNITY	openai	pypi	0.1.2	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/openai-agent-core/ Matched naming pattern: openai-openai-core Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 449 Registry downloads: 36/month, 18/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 789 lines, 40.5 kB across 16 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'openai-agent-core' matches AI hallucination template [openai] + [openai] + [core]. HIGHClaims critical enterprise brand identity ('OPENAI'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 3 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFONo malicious install-time hooks or shell cradles detected in package AST. INFOSubstantial functional codebase (789 LOC across 16 file(s)). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	467d	0	295	↑0.0/day	BENIGN_COMMUNITY	llama	pypi	0.3.0	brightdata you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-tools-brightdata/ Matched naming pattern: llama-llama-tools Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 467 Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 295 lines, 12.8 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-tools-brightdata' matches AI hallucination template [llama] + [llama] + [tools]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	468d	19	431	↑0.0/day	BENIGN_COMMUNITY	llama	pypi	0.3.0	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-vector-stores-gel/ Matched naming pattern: llama-llama-vector Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 468 Registry downloads: 19/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 431 lines, 16.9 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-vector-stores-gel' matches AI hallucination template [llama] + [llama] + [vector]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	480d	18	256	↑0.0/day	BENIGN_COMMUNITY	llama	pypi	0.3.0	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-storage-chat-store-gel/ Matched naming pattern: llama-llama-storage Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 480 Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 256 lines, 9.8 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-storage-chat-store-gel' matches AI hallucination template [llama] + [llama] + [storage]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	482d	29	8,604	↑0.1/day	BENIGN_COMMUNITY	azure	pypi	0.1.20	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/azure-rm-proxy-server/ Matched naming pattern: django-azure-auth Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 482 Registry downloads: 29/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8604 lines, 395.7 kB across 85 files (LARGE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'azure-rm-proxy-server' matches AI hallucination template [django] + [azure] + [auth]. HIGHClaims critical enterprise brand identity ('AZURE'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. INFOSubstantial functional codebase (8604 LOC across 85 file(s)). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	516d	30	336	↑0.1/day	BENIGN_COMMUNITY	llama	pypi	0.5.0	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-tools-dappier/ Matched naming pattern: llama-llama-tools Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 516 Registry downloads: 30/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 336 lines, 14.3 kB across 5 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-tools-dappier' matches AI hallucination template [llama] + [llama] + [tools]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	612d	33	226	↑0.1/day	BENIGN_COMMUNITY	llama	pypi	0.2.0	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-graph-rag-cognee/ Matched naming pattern: llama-llama-graph Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 612 Registry downloads: 33/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 226 lines, 10.0 kB across 3 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-graph-rag-cognee' matches AI hallucination template [llama] + [llama] + [graph]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	693d	24	342	↑0.0/day	BENIGN_COMMUNITY	llama	pypi	0.4.0	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-readers-oracleai/ Matched naming pattern: llama-llama-readers Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 693 Registry downloads: 24/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 342 lines, 14.7 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-readers-oracleai' matches AI hallucination template [llama] + [llama] + [readers]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	699d	0	376	↑0.0/day	BENIGN_COMMUNITY	mistral	pypi	0.1	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-multi-modal-llms-mistral/ Matched naming pattern: llama-mistral-multi Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 699 Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 376 lines, 16.5 kB across 3 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-multi-modal-llms-mistral' matches AI hallucination template [llama] + [mistral] + [multi]. HIGHClaims critical enterprise brand identity ('MISTRAL'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	792d	14	1,201	↑0.0/day	BENIGN_COMMUNITY	copilot	pypi	0.1.5	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/triton-copilot/ Matched naming pattern: python-copilot-triton Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 792 Registry downloads: 14/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 1201 lines, 55.5 kB across 10 files (LARGE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'triton-copilot' matches AI hallucination template [python] + [copilot] + [triton]. HIGHClaims critical enterprise brand identity ('COPILOT'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFOEstablished pre-AI legacy package registered 790 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. INFOSubstantial functional codebase (1201 LOC across 10 file(s)). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	837d	94	247	↑0.1/day	BENIGN_COMMUNITY	llama	pypi	0.6.0	ajhofmann you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-tools-azure-code-interpreter/ Matched naming pattern: llama-llama-tools Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 837 Registry downloads: 94/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 247 lines, 11.5 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-tools-azure-code-interpreter' matches AI hallucination template [llama] + [llama] + [tools]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 8 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFOEstablished pre-AI legacy package registered 836 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	935d	12	418	↑0.0/day	BENIGN_COMMUNITY	openai	pypi	0.1.0	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/flying-delta-embeddings-openai/ Matched naming pattern: flying-openai-embeddings Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 935 Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 418 lines, 17.6 kB across 3 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'flying-delta-embeddings-openai' matches AI hallucination template [flying] + [openai] + [embeddings]. HIGHClaims critical enterprise brand identity ('OPENAI'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFOEstablished pre-AI legacy package registered 934 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	939d	9	217	↑0.0/day	BENIGN_COMMUNITY	google	pypi	0.1.0	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/flying-delta-response-synthesizers-google/ Matched naming pattern: flying-google-response Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 939 Registry downloads: 9/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 217 lines, 9.0 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'flying-delta-response-synthesizers-google' matches AI hallucination template [flying] + [google] + [response]. HIGHClaims critical enterprise brand identity ('GOOGLE'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFOEstablished pre-AI legacy package registered 938 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	939d	9	209	↑0.0/day	BENIGN_COMMUNITY	ollama	pypi	0.1.0	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/flying-delta-llms-ollama/ Matched naming pattern: flying-ollama-llms Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 939 Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 209 lines, 7.6 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'flying-delta-llms-ollama' matches AI hallucination template [flying] + [ollama] + [llms]. HIGHClaims critical enterprise brand identity ('OLLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFOEstablished pre-AI legacy package registered 938 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	939d	6	412	↑0.0/day	BENIGN_COMMUNITY	weaviate	pypi	0.1.0	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/flying-delta-vector-stores-weaviate/ Matched naming pattern: flying-weaviate-vector Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 939 Registry downloads: 6/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 412 lines, 16.1 kB across 3 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'flying-delta-vector-stores-weaviate' matches AI hallucination template [flying] + [weaviate] + [vector]. HIGHClaims critical enterprise brand identity ('WEAVIATE'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFOEstablished pre-AI legacy package registered 938 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	939d	6	429	↑0.0/day	BENIGN_COMMUNITY	google	pypi	0.1.0	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/flying-delta-tools-google/ Matched naming pattern: flying-google-tools Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 939 Registry downloads: 6/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 429 lines, 18.3 kB across 7 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'flying-delta-tools-google' matches AI hallucination template [flying] + [google] + [tools]. HIGHClaims critical enterprise brand identity ('GOOGLE'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFOEstablished pre-AI legacy package registered 938 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	943d	19	8,445	↑0.0/day	BENIGN_COMMUNITY	tron	pypi	0.1.0	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/tron-api-python/ Matched naming pattern: tron-tron-python Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 943 Registry downloads: 19/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8445 lines, 568.3 kB across 33 files (LARGE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'tron-api-python' matches AI hallucination template [tron] + [tron] + [python]. HIGHClaims critical enterprise brand identity ('TRON'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFOEstablished pre-AI legacy package registered 941 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. INFOSubstantial functional codebase (8445 LOC across 33 file(s)). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	944d	13	242	↑0.0/day	BENIGN_COMMUNITY	gemini	pypi	0.1.0	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/flying-delta-llms-gemini/ Matched naming pattern: flying-gemini-llms Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 944 Registry downloads: 13/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 242 lines, 10.2 kB across 3 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'flying-delta-llms-gemini' matches AI hallucination template [flying] + [gemini] + [llms]. HIGHClaims critical enterprise brand identity ('GEMINI'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFOEstablished pre-AI legacy package registered 943 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	13	944d	12	264	↑0.0/day	BENIGN_COMMUNITY	anthropic	pypi	0.1.0	Your Name you@example.com	example.com
Claimed homepage: https://pypi.org/project/flying-delta-llms-anthropic/ Matched naming pattern: flying-anthropic-llms Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 944 Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 264 lines, 10.4 kB across 3 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'flying-delta-llms-anthropic' matches AI hallucination template [flying] + [anthropic] + [llms]. HIGHClaims critical enterprise brand identity ('ANTHROPIC'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance. INFOEstablished pre-AI legacy package registered 942 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	11	328d	227	698	↑0.7/day	BENIGN_COMMUNITY	llama	pypi	0.1.2	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-memory-bedrock-agentcore/ Matched naming pattern: llama-llama-memory Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 328 Registry downloads: 227/month, 41/week (MODERATE_USAGE) Codebase size: 698 lines, 31.2 kB across 3 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-memory-bedrock-agentcore' matches AI hallucination template [llama] + [llama] + [memory]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage registered 327 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. INFOSubstantial functional codebase (698 LOC across 3 file(s)). INFOModerate community usage with 227 monthly downloads. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	11	411d	262	270	↑0.6/day	BENIGN_COMMUNITY	llama	pypi	0.3.0	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-storage-kvstore-duckdb/ Matched naming pattern: llama-llama-storage Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 411 Registry downloads: 262/month, 95/week (MODERATE_USAGE) Codebase size: 270 lines, 9.9 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-storage-kvstore-duckdb' matches AI hallucination template [llama] + [llama] + [storage]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. INFOModerate community usage with 262 monthly downloads. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	11	472d	109	167	↑0.2/day	BENIGN_COMMUNITY	llama	pypi	0.3.0	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-readers-legacy-office/ Matched naming pattern: llama-llama-readers Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 472 Registry downloads: 109/month, 29/week (MODERATE_USAGE) Codebase size: 167 lines, 8.2 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-readers-legacy-office' matches AI hallucination template [llama] + [llama] + [readers]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. INFOModerate community usage with 109 monthly downloads. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	11	480d	166	336	↑0.3/day	BENIGN_COMMUNITY	llama	pypi	0.3.0	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-storage-kvstore-gel/ Matched naming pattern: llama-llama-storage Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 480 Registry downloads: 166/month, 33/week (MODERATE_USAGE) Codebase size: 336 lines, 10.8 kB across 2 files (MODERATE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-storage-kvstore-gel' matches AI hallucination template [llama] + [llama] + [storage]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. INFOModerate community usage with 166 monthly downloads. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	11	481d	108	143	↑0.2/day	BENIGN_COMMUNITY	llama	pypi	0.7.0	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-embeddings-openvino-genai/ Matched naming pattern: llama-llama-embeddings Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 481 Registry downloads: 108/month, 58/week (MODERATE_USAGE) Codebase size: 143 lines, 6.1 kB across 2 files (TINY_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-embeddings-openvino-genai' matches AI hallucination template [llama] + [llama] + [embeddings]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. INFONo malicious install-time hooks or shell cradles detected in package AST. INFOModerate community usage with 108 monthly downloads. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	11	517d	242	3,430	↑0.5/day	BENIGN_COMMUNITY	llama	pypi	0.1.27	— you@example.com	example.com
Claimed homepage: https://pypi.org/project/llama-index-server/ Matched naming pattern: llama-llama-server Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 517 Registry downloads: 242/month, 48/week (MODERATE_USAGE) Codebase size: 3430 lines, 142.6 kB across 57 files (LARGE_CODEBASE) Automated signals flagged: MEDIUMPackage name 'llama-index-server' matches AI hallucination template [llama] + [llama] + [server]. HIGHClaims critical enterprise brand identity ('LLAMA'). HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. INFOSubstantial functional codebase (3430 LOC across 57 file(s)). INFOModerate community usage with 242 monthly downloads. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →

Package: pypi · 0.1.0

Author: Your Name (you@example.com)

Claimed homepage: https://pypi.org/project/flying-delta-llms-replicate/

Official vendor account: No

Days since publish: 939

Code-only verdict: BENIGN_COMMUNITY

Registry downloads: 13/month

Codebase size: 121 lines (TINY_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'flying-delta-llms-replicate' matches AI hallucination template [flying] + [replicate] + [llms].
HIGHClaims critical enterprise brand identity ('REPLICATE').
HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
INFOEstablished pre-AI legacy package registered 938 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Your Name (you@example.com)

Claimed homepage: https://pypi.org/project/llama-index-prompts-lmformatenforcer-utils/

Official vendor account: No

Days since publish: 943

Code-only verdict: BENIGN_COMMUNITY

Registry downloads: 8/month

Codebase size: 49 lines (TINY_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'llama-index-prompts-lmformatenforcer-utils' matches AI hallucination template [llama] + [llama] + [prompts].
HIGHClaims critical enterprise brand identity ('LLAMA').
HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
INFOEstablished pre-AI legacy package registered 942 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Your Name (you@example.com)

Claimed homepage: https://pypi.org/project/flying-delta-llms-azure-openai/

Official vendor account: No

Days since publish: 944

Code-only verdict: BENIGN_COMMUNITY

Registry downloads: 14/month

Codebase size: 190 lines (MODERATE_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'flying-delta-llms-azure-openai' matches AI hallucination template [flying] + [openai] + [llms].
HIGHClaims critical enterprise brand identity ('OPENAI').
HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
INFOEstablished pre-AI legacy package registered 942 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Your Name (you@example.com)

Claimed homepage: https://pypi.org/project/flying-delta-llms-openai-like/

Official vendor account: No

Days since publish: 944

Code-only verdict: BENIGN_COMMUNITY

Registry downloads: 11/month

Codebase size: 136 lines (TINY_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'flying-delta-llms-openai-like' matches AI hallucination template [flying] + [openai] + [llms].
HIGHClaims critical enterprise brand identity ('OPENAI').
HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
INFOEstablished pre-AI legacy package registered 942 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.0.4

Author: Your Name (you@example.com)

Claimed homepage: https://pypi.org/project/let-me-google-that/

Official vendor account: No

Days since publish: 1585

Code-only verdict: BENIGN_COMMUNITY

Registry downloads: 22/month

Codebase size: 29 lines (TINY_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'let-me-google-that' matches AI hallucination template [let] + [google] + [google].
HIGHClaims critical enterprise brand identity ('GOOGLE').
HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
MEDIUMPackage published 4 versions in rapid succession (< 24h) to mimic mature open source maintenance.
INFOEstablished pre-AI legacy package registered 1583 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Unknown (you@example.com)

Claimed homepage: https://pypi.org/project/llama-index-vector-stores-actian-vectorai/

Official vendor account: No

Days since publish: 115

Registry downloads: 10/month

Codebase size: 768 lines (MODERATE_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'llama-index-vector-stores-actian-vectorai' matches AI hallucination template [llama] + [llama] + [vector].
HIGHClaims critical enterprise brand identity ('LLAMA').
HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (114 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
INFOSubstantial functional codebase (768 LOC across 2 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.2

Author: Unknown (you@example.com)

Claimed homepage: https://pypi.org/project/perplexity-at-home/

Official vendor account: No

Days since publish: 123

Registry downloads: 0/month

Codebase size: 12598 lines (LARGE_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'perplexity-at-home' matches AI hallucination template [perplexity] + [perplexity] + [home].
HIGHClaims critical enterprise brand identity ('PERPLEXITY').
HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
HIGHPackage registered recently (122 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
INFOSubstantial functional codebase (12598 LOC across 91 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.4.7.post1

Author: Unknown (you@example.com)

Claimed homepage: https://pypi.org/project/basejump-llama-index-agent-openai/

Official vendor account: No

Days since publish: 256

Registry downloads: 0/month

Codebase size: 1307 lines (LARGE_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'basejump-llama-index-agent-openai' matches AI hallucination template [basejump] + [openai] + [index].
HIGHClaims critical enterprise brand identity ('OPENAI').
HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
MEDIUMPackage registered 255 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
INFOSubstantial functional codebase (1307 LOC across 5 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 2.0.0

Author: Your Name (you@example.com)

Claimed homepage: https://pypi.org/project/claude-parser/

Official vendor account: No

Days since publish: 343

Registry downloads: 21/month

Codebase size: 2403 lines (LARGE_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'claude-parser' matches AI hallucination template [python] + [claude] + [parser].
HIGHClaims critical enterprise brand identity ('CLAUDE').
HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
MEDIUMPackage registered 342 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
INFOSubstantial functional codebase (2403 LOC across 64 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Your Name (you@example.com)

Claimed homepage: https://pypi.org/project/ylz-langchain/

Official vendor account: No

Days since publish: 544

Registry downloads: 8/month

Codebase size: 6852 lines (LARGE_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'ylz-langchain' matches AI hallucination template [python] + [langchain] + [ylz].
HIGHClaims critical enterprise brand identity ('LANGCHAIN').
HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
INFONo malicious install-time hooks or shell cradles detected in package AST.
INFOSubstantial functional codebase (6852 LOC across 100 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.3

Author: Your Name (you@example.com)

Claimed homepage: https://pypi.org/project/practica-kraken/

Official vendor account: No

Days since publish: 1719

Registry downloads: 22/month

Codebase size: 322 lines (MODERATE_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'practica-kraken' matches AI hallucination template [python] + [kraken] + [practica].
HIGHClaims critical enterprise brand identity ('KRAKEN').
HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage published 4 versions in rapid succession (< 24h) to mimic mature open source maintenance.
INFOEstablished pre-AI legacy package registered 1718 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.3.4

Author: Unknown (you@example.com)

Claimed homepage: https://pypi.org/project/llama-index-graph-stores-ladybug/

Official vendor account: No

Days since publish: 143

Registry downloads: 357/month

Codebase size: 1669 lines (LARGE_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'llama-index-graph-stores-ladybug' matches AI hallucination template [llama] + [llama] + [graph].
HIGHClaims critical enterprise brand identity ('LLAMA').
HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
HIGHPackage registered recently (142 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
INFOSubstantial functional codebase (1669 LOC across 4 file(s)).
INFOModerate community usage with 357 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.5

Author: Your Name (you@example.com)

Claimed homepage: https://pypi.org/project/triton-copilot/

Official vendor account: No

Days since publish: 792

Registry downloads: 14/month

Codebase size: 1201 lines (LARGE_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'triton-copilot' matches AI hallucination template [python] + [copilot] + [triton].
HIGHClaims critical enterprise brand identity ('COPILOT').
HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
INFOEstablished pre-AI legacy package registered 790 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.
INFOSubstantial functional codebase (1201 LOC across 10 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.0

Author: Your Name (you@example.com)

Claimed homepage: https://pypi.org/project/tron-api-python/

Official vendor account: No

Days since publish: 943

Registry downloads: 19/month

Codebase size: 8445 lines (LARGE_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'tron-api-python' matches AI hallucination template [tron] + [tron] + [python].
HIGHClaims critical enterprise brand identity ('TRON').
HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
INFOEstablished pre-AI legacy package registered 941 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.
INFOSubstantial functional codebase (8445 LOC across 33 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

Package: pypi · 0.1.2

Author: Unknown (you@example.com)

Claimed homepage: https://pypi.org/project/llama-index-memory-bedrock-agentcore/

Official vendor account: No

Days since publish: 328

Registry downloads: 227/month

Codebase size: 698 lines (MODERATE_CODEBASE)

Automated signals flagged:

MEDIUMPackage name 'llama-index-memory-bedrock-agentcore' matches AI hallucination template [llama] + [llama] + [memory].
HIGHClaims critical enterprise brand identity ('LLAMA').
HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
MEDIUMPackage registered 327 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
INFOSubstantial functional codebase (698 LOC across 3 file(s)).
INFOModerate community usage with 227 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →

SHARE INTELLIGENCE WIRE