🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Growing Packages Fastest-adopted since publish Top Emails Accounts most linked to flagged findings About What Sentinel does & why

Sorted by risk score. Filter with email:, domain:, keyword:, or version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d for how recently a package was published (combine both for a range, e.g. age:>1h age:<6h), or a bare word for a package-name search. Click a package to see the signals behind its score before opening its registry page.

Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
16 204d 13 581 ↑0.1/day BENIGN_COMMUNITY aws pypi 1.0.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/aws-iam-ref/
Matched naming pattern: aws-aws-ref
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 204
Registry downloads: 13/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 581 lines, 26.9 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'aws-iam-ref' matches AI hallucination template [aws] + [aws] + [ref].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 203 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (581 LOC across 3 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 235d 16 1,418 ↑0.1/day BENIGN_COMMUNITY llamaindex pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/llamaindex-agentserver-adapter/
Matched naming pattern: llamaindex-llamaindex-adapter
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 235
Registry downloads: 16/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1418 lines, 64.0 kB across 17 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llamaindex-agentserver-adapter' matches AI hallucination template [llamaindex] + [llamaindex] + [adapter].
  • HIGHClaims critical enterprise brand identity ('LLAMAINDEX').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 234 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (1418 LOC across 17 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 258d 14 592 ↑0.1/day BENIGN_COMMUNITY vllm pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/vllm-efficient-client/
Matched naming pattern: vllm-vllm-client
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 258
Registry downloads: 14/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 592 lines, 26.9 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'vllm-efficient-client' matches AI hallucination template [vllm] + [vllm] + [client].
  • HIGHClaims critical enterprise brand identity ('VLLM').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 257 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (592 LOC across 4 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 262d 17 1,364 ↑0.1/day BENIGN_COMMUNITY langchain pypi 0.1.4 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/langchain-pubnub/
Matched naming pattern: python-langchain-pubnub
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 262
Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1364 lines, 61.3 kB across 10 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-pubnub' matches AI hallucination template [python] + [langchain] + [pubnub].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 3 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 261 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (1364 LOC across 10 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 266d 18 633 ↑0.1/day BENIGN_COMMUNITY claude pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/iflow-mcp_claude-document-mcp/
Matched naming pattern: iflow-claude-claude
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 266
Registry downloads: 18/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 633 lines, 27.4 kB across 6 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'iflow-mcp-claude-document-mcp' matches AI hallucination template [iflow] + [claude] + [claude].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 265 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (633 LOC across 6 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 267d 0 274 ↑0.0/day BENIGN_COMMUNITY cursor pypi 0.1.1 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/cursor-review/
Matched naming pattern: python-cursor-review
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 267
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 274 lines, 11.3 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'cursor-review' matches AI hallucination template [python] + [cursor] + [review].
  • HIGHClaims critical enterprise brand identity ('CURSOR').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 266 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 313d 10 575 ↑0.0/day BENIGN_COMMUNITY langchain pypi 0.1.0 Wipro AI Team your.email@example.com example.com
Claimed homepage: https://github.com/Wipro-AI/langchain-wiproai
Matched naming pattern: python-langchain-wiproai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 313
Registry downloads: 10/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 575 lines, 26.8 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-wiproai' matches AI hallucination template [python] + [langchain] + [wiproai].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 312 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (575 LOC across 4 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 322d 45 1,967 ↑0.1/day BENIGN_COMMUNITY binance pypi 3.0.1 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/binance-mcp/
Matched naming pattern: python-binance-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 322
Registry downloads: 45/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1967 lines, 99.3 kB across 6 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'binance-mcp' matches AI hallucination template [python] + [binance] + [mcp].
  • HIGHClaims critical enterprise brand identity ('BINANCE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 321 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (1967 LOC across 6 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 345d 86 1,305 ↑0.2/day BENIGN_COMMUNITY chroma pypi 0.6.1 Joshua Laferriere your.email@example.com example.com
Claimed homepage: https://github.com/thistleknot/bm25-chroma
Matched naming pattern: python-chroma-bm25
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 345
Registry downloads: 86/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1305 lines, 75.3 kB across 8 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'bm25-chroma' matches AI hallucination template [python] + [chroma] + [bm25].
  • HIGHClaims critical enterprise brand identity ('CHROMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 13 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 344 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (1305 LOC across 8 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 354d 15 257 ↑0.0/day BENIGN_COMMUNITY crewai pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/crewai-mcp-server/
Matched naming pattern: crewai-crewai-server
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 354
Registry downloads: 15/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 257 lines, 11.3 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'crewai-mcp-server' matches AI hallucination template [crewai] + [crewai] + [server].
  • HIGHClaims critical enterprise brand identity ('CREWAI').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 352 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 365d 12 822 ↑0.0/day BENIGN_COMMUNITY azure pypi 1.0.0 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/azure-waf-deployer
Matched naming pattern: azure-azure-deployer
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 365
Registry downloads: 12/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 822 lines, 34.3 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'azure-waf-deployer' matches AI hallucination template [azure] + [azure] + [deployer].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 364 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (822 LOC across 4 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 419d 21 259 ↑0.1/day BENIGN_COMMUNITY google pypi 0.2.1 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/google-sheet-mcp/
Matched naming pattern: google-google-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 419
Registry downloads: 21/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 259 lines, 12.1 kB across 6 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'google-sheet-mcp' matches AI hallucination template [google] + [google] + [mcp].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 503d 10 865 ↑0.0/day BENIGN_COMMUNITY llama pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/llama-context/
Matched naming pattern: python-llama-context
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 503
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 865 lines, 40.3 kB across 8 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-context' matches AI hallucination template [python] + [llama] + [context].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHSYNTAX_ERROR_IN_llama_context-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)
  • INFOSubstantial functional codebase (865 LOC across 8 file(s)).
Static code signals:
  • SYNTAX_ERROR_IN_llama_context-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 503d 9 495 ↑0.0/day BENIGN_COMMUNITY llama pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/llama-web-scraper/
Matched naming pattern: llama-llama-scraper
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 503
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 495 lines, 18.3 kB across 23 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-web-scraper' matches AI hallucination template [llama] + [llama] + [scraper].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 503d 9 2,844 ↑0.0/day BENIGN_COMMUNITY llama pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/llama-integration/
Matched naming pattern: python-llama-integration
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 503
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2844 lines, 128.2 kB across 21 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-integration' matches AI hallucination template [python] + [llama] + [integration].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHSYNTAX_ERROR_IN_llama_integration-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)
  • INFOSubstantial functional codebase (2844 LOC across 21 file(s)).
Static code signals:
  • SYNTAX_ERROR_IN_llama_integration-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 503d 12 1,004 ↑0.0/day BENIGN_COMMUNITY llama pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/llama-distributed/
Matched naming pattern: python-llama-distributed
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 503
Registry downloads: 12/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1004 lines, 46.0 kB across 8 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-distributed' matches AI hallucination template [python] + [llama] + [distributed].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHSYNTAX_ERROR_IN_llama_distributed-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)
  • INFOSubstantial functional codebase (1004 LOC across 8 file(s)).
Static code signals:
  • SYNTAX_ERROR_IN_llama_distributed-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 503d 10 900 ↑0.0/day BENIGN_COMMUNITY llama pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/llama-backup/
Matched naming pattern: python-llama-backup
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 503
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 900 lines, 38.2 kB across 11 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-backup' matches AI hallucination template [python] + [llama] + [backup].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHSYNTAX_ERROR_IN_llama_backup-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)
  • INFOSubstantial functional codebase (900 LOC across 11 file(s)).
Static code signals:
  • SYNTAX_ERROR_IN_llama_backup-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 503d 16 2,306 ↑0.0/day BENIGN_COMMUNITY llama pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/llama-blockchain/
Matched naming pattern: python-llama-blockchain
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 503
Registry downloads: 16/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2306 lines, 109.2 kB across 19 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-blockchain' matches AI hallucination template [python] + [llama] + [blockchain].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHSYNTAX_ERROR_IN_llama_blockchain-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)
  • INFOSubstantial functional codebase (2306 LOC across 19 file(s)).
Static code signals:
  • SYNTAX_ERROR_IN_llama_blockchain-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 637d 33 244 ↑0.1/day BENIGN_COMMUNITY aws pypi 0.3.1 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/aws-hotel-helpers
Matched naming pattern: aws-aws-helpers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 637
Registry downloads: 33/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 244 lines, 11.4 kB across 8 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'aws-hotel-helpers' matches AI hallucination template [aws] + [aws] + [helpers].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 4 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 691d 26 261 ↑0.0/day BENIGN_COMMUNITY langchain pypi 0.2.8 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/langchain-huggy/
Matched naming pattern: python-langchain-huggy
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 691
Registry downloads: 26/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 261 lines, 16.0 kB across 11 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-huggy' matches AI hallucination template [python] + [langchain] + [huggy].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 18 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 195d 25 843 ↑0.1/day BENIGN_COMMUNITY aws pypi 0.1.1 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/aws-bedrock-wrapper/
Matched naming pattern: aws-aws-wrapper
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 195
Registry downloads: 25/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 843 lines, 40.3 kB across 10 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'aws-bedrock-wrapper' matches AI hallucination template [aws] + [aws] + [wrapper].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 194 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (843 LOC across 10 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 253d 14 686 ↑0.1/day BENIGN_COMMUNITY chroma pypi 1.0.1 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/mcp-pdf-chroma/
Matched naming pattern: mcp-chroma-chroma
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 253
Registry downloads: 14/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 686 lines, 30.6 kB across 6 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mcp-pdf-chroma' matches AI hallucination template [mcp] + [chroma] + [chroma].
  • HIGHClaims critical enterprise brand identity ('CHROMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 252 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (686 LOC across 6 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 271d 66 1,516 ↑0.2/day BENIGN_COMMUNITY base pypi 0.2.2 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/naive-knowledge-base
Matched naming pattern: naive-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 271
Registry downloads: 66/month, 27/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1516 lines, 62.3 kB across 19 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'naive-knowledge-base' matches AI hallucination template [naive] + [base] + [base].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 270 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (1516 LOC across 19 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 300d 17 1,448 ↑0.1/day BENIGN_COMMUNITY solana pypi 1.0.6 Solana Analyzer Team your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/solana-fcg-tool
Matched naming pattern: solana-solana-tool
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 300
Registry downloads: 17/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1448 lines, 73.9 kB across 7 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'solana-fcg-tool' matches AI hallucination template [solana] + [solana] + [tool].
  • HIGHClaims critical enterprise brand identity ('SOLANA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 298 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (1448 LOC across 7 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 309d 15 612 ↑0.0/day BENIGN_COMMUNITY azure pypi 1.0.0 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/azure-odbc-client
Matched naming pattern: django-azure-auth
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 309
Registry downloads: 15/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 612 lines, 24.5 kB across 7 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'azure-odbc-client' matches AI hallucination template [django] + [azure] + [auth].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 307 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (612 LOC across 7 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 357d 92 712 ↑0.3/day BENIGN_COMMUNITY gemini pypi 0.2.7 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/gemini-mcp/
Matched naming pattern: python-gemini-mcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 357
Registry downloads: 92/month, 25/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 712 lines, 34.5 kB across 5 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'gemini-mcp' matches AI hallucination template [python] + [gemini] + [mcp].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 356 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (712 LOC across 5 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 412d 9 378 ↑0.0/day BENIGN_COMMUNITY base pypi 0.1.0 Your Name your.email@example.com example.com
Claimed homepage: https://pypi.org/project/base-cacheable-class/
Matched naming pattern: base-base-class
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 412
Registry downloads: 9/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 378 lines, 16.8 kB across 14 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'base-cacheable-class' matches AI hallucination template [base] + [base] + [class].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 487d 9 1,495 ↑0.0/day BENIGN_COMMUNITY pinecone pypi 0.1.0 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/es-to-pinecone-transfer
Matched naming pattern: es-pinecone-pinecone
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 487
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1495 lines, 74.1 kB across 13 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'es-to-pinecone-transfer' matches AI hallucination template [es] + [pinecone] + [pinecone].
  • HIGHClaims critical enterprise brand identity ('PINECONE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (1495 LOC across 13 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 503d 12 7,361 ↑0.0/day BENIGN_COMMUNITY llama pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/llama-recommendation/
Matched naming pattern: python-llama-recommendation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 503
Registry downloads: 12/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 7361 lines, 342.0 kB across 35 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-recommendation' matches AI hallucination template [python] + [llama] + [recommendation].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (7361 LOC across 35 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 503d 11 846 ↑0.0/day BENIGN_COMMUNITY llama pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/llama-dashboard/
Matched naming pattern: python-llama-dashboard
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 503
Registry downloads: 11/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 846 lines, 40.9 kB across 9 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-dashboard' matches AI hallucination template [python] + [llama] + [dashboard].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • HIGHSYNTAX_ERROR_IN_llama_dashboard-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)
  • INFOSubstantial functional codebase (846 LOC across 9 file(s)).
Static code signals:
  • SYNTAX_ERROR_IN_llama_dashboard-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 503d 10 722 ↑0.0/day BENIGN_COMMUNITY llama pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/llama-ctrl/
Matched naming pattern: python-llama-ctrl
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 503
Registry downloads: 10/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 722 lines, 36.9 kB across 12 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-ctrl' matches AI hallucination template [python] + [llama] + [ctrl].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • HIGHSYNTAX_ERROR_IN_llama_ctrl-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)
  • INFOSubstantial functional codebase (722 LOC across 12 file(s)).
Static code signals:
  • SYNTAX_ERROR_IN_llama_ctrl-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 503d 9 883 ↑0.0/day BENIGN_COMMUNITY llama pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/llama-scheduler/
Matched naming pattern: python-llama-scheduler
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 503
Registry downloads: 9/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 883 lines, 40.6 kB across 13 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-scheduler' matches AI hallucination template [python] + [llama] + [scheduler].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • HIGHSYNTAX_ERROR_IN_llama_scheduler-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)
  • INFOSubstantial functional codebase (883 LOC across 13 file(s)).
Static code signals:
  • SYNTAX_ERROR_IN_llama_scheduler-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 503d 10 1,558 ↑0.0/day BENIGN_COMMUNITY llama pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/llama-cancer/
Matched naming pattern: python-llama-cancer
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 503
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1558 lines, 71.1 kB across 25 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-cancer' matches AI hallucination template [python] + [llama] + [cancer].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (1558 LOC across 25 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 509d 19 621 ↑0.0/day BENIGN_COMMUNITY gemini pypi 0.1.2 Gemini Coder Contributors your.email@example.com example.com
Claimed homepage: https://github.com/daymade/gemini-coder
Matched naming pattern: python-gemini-coder
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 509
Registry downloads: 19/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 621 lines, 26.2 kB across 12 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'gemini-coder' matches AI hallucination template [python] + [gemini] + [coder].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (621 LOC across 12 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 518d 11 1,012 ↑0.0/day BENIGN_COMMUNITY xai pypi 0.1.0 NoLink Team your.email@example.com example.com
Claimed homepage: https://github.com/Sumedh1599/apputils-xai
Matched naming pattern: python-xai-apputils
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 518
Registry downloads: 11/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1012 lines, 49.0 kB across 6 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'apputils-xai' matches AI hallucination template [python] + [xai] + [apputils].
  • HIGHClaims critical enterprise brand identity ('XAI').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (1012 LOC across 6 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 520d 0 11,592 ↑0.0/day BENIGN_COMMUNITY matic pypi 0.3.2 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/plex-o-matic/
Matched naming pattern: plex-matic-matic
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 520
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11592 lines, 566.9 kB across 79 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'plex-o-matic' matches AI hallucination template [plex] + [matic] + [matic].
  • HIGHClaims critical enterprise brand identity ('MATIC').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (11592 LOC across 79 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 520d 13 550 ↑0.0/day BENIGN_COMMUNITY elevenlabs pypi 0.1.0 Tony Kipkemboi your.email@example.com example.com
Claimed homepage: https://github.com/tonykipkemboi/voice-isolator
Matched naming pattern: elevenlabs-elevenlabs-isolator
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 520
Registry downloads: 13/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 550 lines, 23.9 kB across 10 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'elevenlabs-voice-isolator' matches AI hallucination template [elevenlabs] + [elevenlabs] + [isolator].
  • HIGHClaims critical enterprise brand identity ('ELEVENLABS').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (550 LOC across 10 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 529d 20 613 ↑0.0/day BENIGN_COMMUNITY gemini pypi 0.1.2 Gemini GIF Generator Contributors your.email@example.com example.com
Claimed homepage: https://github.com/daymade/gemini-gif
Matched naming pattern: python-gemini-gif
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 529
Registry downloads: 20/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 613 lines, 25.9 kB across 12 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'gemini-gif' matches AI hallucination template [python] + [gemini] + [gif].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 3 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (613 LOC across 12 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 539d 30 786 ↑0.1/day BENIGN_COMMUNITY gemini pypi 0.1.0 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/gemini-2.0-api
Matched naming pattern: gemini-gemini-0
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 539
Registry downloads: 30/month, 14/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 786 lines, 29.1 kB across 8 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'gemini-2-0-api' matches AI hallucination template [gemini] + [gemini] + [0].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (786 LOC across 8 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
12 239d 18 31 ↑0.1/day BENIGN_COMMUNITY gemini pypi 0.1.0 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/helloworld
Matched naming pattern: helloworld-gemini-gemini
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 239
Registry downloads: 18/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 31 lines, 1.0 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'helloworld-example-gemini-cli' matches AI hallucination template [helloworld] + [gemini] + [gemini].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • INFOPublisher email domain '@example.com' matches package identifier token 'example', verifying identifiable third-party organization ownership.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 237 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
11 110d 20 21 ↑0.2/day BENIGN_COMMUNITY mcg pypi 0.0.1 Your Name your.email@example.com example.com
Claimed homepage: https://code.byted.org/infra/byted_mcg_dashboard
Matched naming pattern: byted-mcg-dashboard
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 110
Code-only verdict: SQUATTED_STUB (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 20/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 819 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (110 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 1 file(s), 819 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
11 119d 24 21 ↑0.2/day BENIGN_COMMUNITY agentchain pypi 0.0.1 Your Name your.email@example.com example.com
Claimed homepage: https://code.byted.org/infra/bytedance_agentchain_lark
Matched naming pattern: bytedance-agentchain-lark
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 119
Code-only verdict: SQUATTED_STUB (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 24/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 831 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (119 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 1 file(s), 831 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
11 174d 19 21 ↑0.1/day BENIGN_COMMUNITY bytedbolt pypi 0.0.1 Your Name your.email@example.com example.com
Claimed homepage: https://code.byted.org/infra/bytedbolt
Matched naming pattern: python-bytedbolt-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 174
Code-only verdict: SQUATTED_STUB (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 19/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 799 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (174 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 1 file(s), 799 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
11 471d 13,728 72 ↑29.1/day BENIGN_COMMUNITY aws pypi 0.1.1 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/mcp-aws-level-checker/
Matched naming pattern: mcp-aws-level
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 471
Registry downloads: 13728/month, 5900/week (HIGH_COMMUNITY_ADOPTION)
Codebase size: 72 lines, 3.1 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mcp-aws-level-checker' matches AI hallucination template [mcp] + [aws] + [level].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOHigh community adoption with 13,728 monthly downloads, demonstrating established trust.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
10 107d 41,680 1,628 ↑389.5/day BENIGN_COMMUNITY base pypi 1.5.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/dj-control-room-base/
Matched naming pattern: dj-base-room
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 107
Registry downloads: 41680/month, 12351/week (HIGH_COMMUNITY_ADOPTION)
Codebase size: 1628 lines, 75.5 kB across 22 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'dj-control-room-base' matches AI hallucination template [dj] + [base] + [room].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 8 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (106 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (1628 LOC across 22 file(s)).
  • INFOHigh community adoption with 41,680 monthly downloads, demonstrating established trust.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
10 503d 12 2,067 ↑0.0/day BENIGN_COMMUNITY llama pypi 0.1.0 Nik Jois your.email@example.com example.com
Claimed homepage: https://github.com/llamasearchai/llama-simulator
Matched naming pattern: python-llama-simulation
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 503
Registry downloads: 12/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2067 lines, 87.8 kB across 23 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-simulation' matches AI hallucination template [python] + [llama] + [simulation].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (2067 LOC across 23 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
10 818d 13 75 ↑0.0/day BENIGN_COMMUNITY amazon pypi 0.2 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/json-flattener-to-csv-amazon
Matched naming pattern: json-amazon-to
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 818
Registry downloads: 13/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 75 lines, 2.7 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'json-flattener-to-csv-amazon' matches AI hallucination template [json] + [amazon] + [to].
  • HIGHClaims critical enterprise brand identity ('AMAZON').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 816 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
9 209d 21 35 ↑0.1/day BENIGN_COMMUNITY david pypi 0.0.2 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/david-test-seekdb-plugin-installer/
Matched naming pattern: david-david-seekdb
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 209
Registry downloads: 21/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 35 lines, 1.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 208 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
9 291d 11 170 ↑0.0/day BENIGN_COMMUNITY discord pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/iflow-mcp_discord-raw-mcp/
Matched naming pattern: iflow-discord-discord
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 291
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 170 lines, 7.4 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 290 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
9 291d 21 21 ↑0.1/day BENIGN_COMMUNITY bytedance pypi 0.0.1 Your Name your.email@example.com example.com
Claimed homepage: https://code.byted.org/infra/bytedance_py2go
Matched naming pattern: python-bytedance-py2go
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 291
Code-only verdict: SQUATTED_STUB (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 21/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 811 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 291 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 1 file(s), 811 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
« Prev Next »
LINK COPIED TO CLIPBOARD