Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 50 | 40h | — | — | — |
Unverified Signal
|
— | npm | latest | Wei-Hung | — | 🪝 🌐 | |
|
Package purpose: Typst dissertation templates, fonts, a project compiler, and a research MCP launcher
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 40h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Tureli Platform Admin MCP Stdio Bridge for Claude Desktop and AI clients
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 41h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Shared repository maintenance and app runtime tooling
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 41h | — | — | — |
Unverified Signal
|
— | npm | latest | Link-h1j | — | 🪝 🌐 | |
|
Package purpose: DSH 桌面版输入框工具条插件：在「听写」左边加「录屏」与「截图」两个按钮 —— 录屏前先弹「选择要录制的内容」框（屏幕/窗口/自定义区域），截图带选区 + 标注（拖完框选手一松就能画）。Screen capture & recording buttons for the DSH desktop composer.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 41h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | divyo-argha | — | 🪝 | |
|
Package purpose: Switch between multiple Claude Code accounts with an interactive picker — isolated config, credentials, and settings per profile.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 43h | — | — | — |
Unverified Signal
|
— | npm | latest | feiyu | — | 🪝 🌐 | |
|
Package purpose: Database Connector MCP Server - connect, query, and manage any database via MCP protocol
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 44h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Expo + React Native boilerplate with Expo Router, Jotai, Expo UI, Storybook, Jest, Biome, EAS and built-in AI agent skills.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 45h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 欧卡HaulMP联机平台信息查询
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 45h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | AlwaysXinz | — | 🪝 🌐 | |
|
Package purpose: A WebSockets library for interacting with WhatsApp Web
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 45h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 45h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI that generates screenshot PNGs for astro-better-declarative-screenshots
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 46h | — | — | — |
Unverified Signal
|
— | npm | latest | zhoudev49 | — | 🪝 🌐 | |
|
Package purpose: Privacy-first local token usage tracker for AI coding CLIs/IDEs (Claude Code, Codex, WorkBuddy, CodeBuddy, Qoder, Qwen, ZCode, OpenCode) — parses local session logs into SQLite and serves a token-focused web dashboard
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 46h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: obra/superpowers adapted for Oh My Pi (omp): a truthful task/todo tool mapping and five subagent-driven-development agents, each with its own model, thinking level, and tools.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 47h | — | — | — |
Unverified Signal
|
— | npm | latest | Marcus Duarte | — | 🪝 🌐 | |
|
Package purpose: Native desktop audio alerts, interactive Telegram questions, and command monitoring for AI coding agents (Claude, Cursor, Windsurf, Antigravity)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 47h | — | — | — |
Unverified Signal
|
— | npm | latest | Tory Radtke | — | 🪝 🌐 | |
|
Package purpose: Your job search as a pipeline: poll employer job boards directly, screen against your own rules, have Claude judge what survives, tailor a fact-checked resume, and track it. Node 22 + SQLite, zero dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 48h | — | — | — |
Unverified Signal
|
— | npm | latest | wfzyx | — | 🪝 🌐 | |
|
Package purpose: Zero-config auto-wiring and lifecycle manager for Meepo AI mesh in Pi
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 49h | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 49h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Folder layout (put your main.js and preload.js in the root):
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 49h | — | — | — |
Unverified Signal
|
— | npm | latest | Landfall | — | 🪝 🌐 | |
|
Package purpose: CLI tool to verify compliance contracts in CI/CD pipelines
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 49h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Build tool for Node.js native addons powered by Zig
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 50h | — | — | — |
Unverified Signal
|
— | npm | latest | https://htmlelements.com | htmlelements.com | 🪝 🌐 | |
|
Package purpose: Smart.Industrial: 54 UI components for browser HMI and SCADA applications, built as standards-based Custom Elements with no third-party dependencies. ISA-101 themes, ISA-18.2 alarms, SPC, DSP, PackML, model outputs (forecast bands, anomaly markers, heatma
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 50h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 51h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The cua SDK for Node and the browser: sandboxes, cua-spacesd, media streaming, Spaces and the cua daemon, on a Rust core
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 51h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 51h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI builder for MOSSEAL: validates env, injects secrets via Rust codegen, and compiles the per-consumer wasm (spec 05).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 52h | — | — | — |
Unverified Signal
|
— | npm | latest | rtCamp | — | 🪝 🌐 | |
|
Package purpose: Shared tooling for rtCamp WordPress plugin scaffolding — TTY UI, scaffold registry, release scripts, git hooks, CI helpers, version monitor.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 52h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The permission diff for AI-written TypeScript. Declare what each function can touch; the build fails when code exceeds it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 52h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH 学习教练插件：把一门课拆成知识地图，逐单元记掌握度、排每日任务，并给学生一个看得见进度的网页面板。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 53h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Unofficial fork of the CallKaro CLI — manage your voice AI agents from the terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 54h | — | — | — |
Unverified Signal
|
— | npm | latest | Er. Anil Kumar Thakur | — | 🪝 | |
|
Package purpose: Mason encryption + hashing over node:crypto (the Illuminate Encryption/Hashing equivalent).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 54h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A lightweight, mobile-friendly app runner for your ComfyUI backend
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 54h | — | — | — |
Unverified Signal
|
— | npm | latest | Er. Anil Kumar Thakur | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Declarative HTML/SVG interfaces with live data binding, authored in JavaScript or Python.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for DNS-over-HTTPS: resolve names and fetch URLs through DoH, keyless.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Reliable Node.js AI building blocks for affordable and local models
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ab - AgentBoard CLI: a post office for AI agents. Heartbeat, send, read, ack messages between agents across tools (OpenCode, VS Code, ...).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | Oleksii Kyslytsia | — | 🪝 🌐 | |
|
Package purpose: The mcp-auth and mcp-sso commands: log in to a SAP BTP or ABAP destination and write its session, through @mcp-abap-adt/auth-broker
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | NioDE Team | — | 🪝 🌐 | |
|
Package purpose: The self-hosted backend for NioDE — browser/mobile code editor and terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 56h | — | — | — |
Unverified Signal
|
— | npm | latest | NioAI Team | — | 🪝 🌐 | |
|
Package purpose: NioAI — A lightweight AI coding agent for the terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 57h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Point your favorite coding agent (Claude Code, Cursor, Codex and more) at any file or block of code, then see every change on a map of your repo.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 57h | — | — | — |
Unverified Signal
|
— | npm | latest | rainday | — | 🪝 🌐 | |
|
Package purpose: A sharp-tongued CTO gatekeeper for AI coding agents: blocks leaked secrets in git commits and destructive shell commands in Claude Code, Cursor, Gemini CLI and Codex, using TypeSafe Jev.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 57h | — | — | — |
Unverified Signal
|
— | npm | latest | LiWenzhuo001 | — | 🪝 🌐 | |
|
Package purpose: Prompt optimizer for DeepSeek Harness: structural analysis, ambiguity and redundancy detection, and an engineering-grade rewrite.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 58h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The sync server for Tempience: one command on your own laptop, a pairing code, SQLite. Pairs with the app at tempience.app through your Tailscale network.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Salesforce 메타데이터를 비교하고 안전하게 검증·배포하는 CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: zero-dep skill farm CLI for coding agents — install/update/project skills & command projections
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 59h | — | — | — |
Unverified Signal
|
— | npm | latest | sayakmukherjee080 | — | 🪝 🌐 | |
|
Package purpose: Drop-in prerendering for existing single-page apps. Renders your built app in a real browser, writes static HTML per route, reports React hydration mismatches, and optimises the output with critical CSS, link hints and cached AJAX state.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 60h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 60h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 60h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 60h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The bid tool that refuses to lie. ToR + CV in -> verified bid pack out: cover letter, tailored CV, technical response, financial proposal, submission checklist. Deterministic CLI + agent skill for UN / NGO / government consultants.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||