Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 50 | 60h | — | — | — |
Unverified Signal
|
— | npm | latest | Sebastien Rousseau | — | 🪝 | |
|
Package purpose: Plug-and-play cryptographic middleware for Express and Fastify -- auto-decrypt requests, verify signatures, and encrypt responses.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 61h | — | — | — |
Unverified Signal
|
— | npm | latest | Nitin Bansal | — | 🪝 🌐 | |
|
Package purpose: MCP (stdio only) sandbox execution via V8 isolates + macOS seatbelt. M-series Macs only.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 61h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: QDay Merchant SDK: accept x402 agentic payments in USD8 on the QDay blockchain
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 62h | — | — | — |
Unverified Signal
|
— | npm | latest | Memcode | — | 🪝 🌐 | |
|
Package purpose: Native darwin-arm64 runtime for memcode-local (license required).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 62h | — | — | — |
Unverified Signal
|
— | npm | latest | Memcode | — | 🪝 🌐 | |
|
Package purpose: Native linux-arm64 runtime for memcode-local (license required).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 62h | — | — | — |
Unverified Signal
|
— | npm | latest | Memcode | — | 🪝 🌐 | |
|
Package purpose: Native linux-x64 runtime for memcode-local (license required).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 62h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Surveys a host React project, plans the ambientui install, runs it safely, verifies it loudly and reverses it with git.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 63h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Web console for the zens-ink SEO toolkit — the same pure-Python engine as the CLI, now with buttons. Zero npm dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 63h | — | — | — |
Unverified Signal
|
— | npm | latest | exceedlimit | — | 🪝 🌐 | |
|
Package purpose: CodeFlowLens 모니터링 UI 서버 — 트레이스/관계도/엔티티 시각화 (localhost)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 64h | — | — | — |
Unverified Signal
|
— | npm | latest | Sok Pich | — | 🪝 | |
|
Package purpose: An AI-first engineering toolkit that turns coding agents into Senior/Staff mobile engineers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 66h | — | — | — |
Unverified Signal
|
— | npm | latest | Immersive Media Technologies | — | 🪝 🌐 | |
|
Package purpose: PS-MCP-IMT — MCP server for Adobe Photoshop built for autonomous AI agents (macOS + Windows): 134 tools behind a 9-tool facade, a UXP bridge that keeps working when Photoshop is modal, headless corner-pin/perspective, honest busy/timeout errors, no teleme
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 66h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH小助手：原生 Swift 悬浮窗负责展示与交互，宿主插件负责把它接到 DSH 会话状态（含今日工作总结）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 66h | — | — | — |
Unverified Signal
|
— | npm | latest | NioAI Team | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 67h | — | — | — |
Unverified Signal
|
— | npm | latest | kukson777 | — | 🪝 🌐 | |
|
Package purpose: The amxts command: create a project or a module, add modules, build, deploy, type-check and test
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 68h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A local GitHub Actions runner (a soft fork of @mizchi/actrun)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 68h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A small React component package inspired by Ant Design.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 69h | — | — | — |
Unverified Signal
|
— | npm | latest | CieloVista Software | — | 🪝 🌐 | |
|
Package purpose: Modern website starter kit powered by WB Behaviors
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 69h | — | — | — |
Unverified Signal
|
— | npm | latest | clicgger | — | 🪝 🌐 | |
|
Package purpose: 🐖 一只住在 DeepSeek Harness 里的猪：吃你的真实工作长大，会学习、打工、旅行、生病、需要照顾
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 69h | — | — | — |
Unverified Signal
|
— | npm | latest | DarkSide | — | 🪝 🌐 | |
|
Package purpose: HaulMP 平台功能插件：账号绑定 / 资料查询 / 实时定位 / 足迹轨迹 / 里程排行榜 / 车队工具 / 路况 / 客户端更新推送（作者QQ：1691443074）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 70h | — | — | — |
Unverified Signal
|
— | npm | latest | DarkSide | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 70h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Publication-grade Carve to LaTeX and PDF publishing
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 71h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Hold to charge, release to jump — land on the next platform!
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 72h | — | — | — |
Unverified Signal
|
— | npm | latest | Anatoly Ben | — | 🪝 | |
|
Package purpose: A local test server for Stripe Billing: customers, prices, Checkout, subscriptions, schedules, invoices, the customer portal, test clocks and signed webhooks, for testing with the official stripe SDK
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 72h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Peer AI's engineering standards: 197 rules for every project, and stack profiles with the tools that enforce them
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Michael A. Pinaev | — | 🪝 🌐 | |
|
Package purpose: Session context governor for DeepSeek Harness: prompt size and per-step cost in dollars (cache-read/cache-write aware), cache-hit, context bands, a per-session compaction threshold derived from the model window, DeepSeek balance and peak/off-peak tariff,
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local-first, model-independent context persistence layer for AI software development
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Frederick Obeng-Nyarko | — | 🪝 🌐 | |
|
Package purpose: Agent skill + zero-dependency scanner that runs the NestJS production checklist (17 checks) against a NestJS codebase before you deploy.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Jano Detzel | — | 🪝 🌐 | |
|
Package purpose: Run typed commands against a running app from a CLI, an MCP server, or the Metro dev tools, and keep the app's features reachable with lint and dependency-cruiser rules. Knows no UI framework.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Péter Vívó | — | 🪝 🌐 | |
|
Package purpose: Native darwin-x64 compiler for the TypeScript unary pipeline POC
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Péter Vívó | — | 🪝 🌐 | |
|
Package purpose: Native linux-x64 compiler for the TypeScript unary pipeline POC
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Péter Vívó | — | 🪝 🌐 | |
|
Package purpose: Native linux-arm64 compiler for the TypeScript unary pipeline POC
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | justjam2023 | — | 🪝 | |
|
Package purpose: Virtual Matter accessories for Homebridge.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Universal media engine & downloader — search, resolve, grab, and download music, categorized movies, videos, galleries, and 200+ batch items from 520+ platforms with parallel download acceleration, audio/video stream muxing, ID3 album art tagging, target-
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Client and tool catalog for the Market Intelligence API (x402 pay-per-call market data for AI agents)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Claix | — | 🪝 🌐 | |
|
Package purpose: Official TypeScript SDK for the Claix document intelligence API. Typed extraction, document memory, knowledge spaces, and LangChain, CrewAI, and LlamaIndex tools.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Zesty Explorer: a local, read-only browser for Zesty content and code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI-first autonomous coding agent
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: bst-fj: Forgejo API commands without the rest of bst
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Jeff Dickey | — | 🪝 🌐 | |
|
Package purpose: A releases page for VitePress docs: a timeline of release sizes, resolved issues, and each release's GitHub notes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Muhammad Mustafa Amir | — | 🪝 🌐 | |
|
Package purpose: SFML setup and linking tool for C++ developers on Windows. Auto-detects your IDE, finds SFML on your PC otherwise downloads your choice version, and links everything.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Octopi suite — CLI (bin: octopi), config IO, and dependency umbrella for core/engine/gateway/webui
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: OpenSysML client: parse, evaluate and instantiate SysML v2 models over the sysml-grpc Connect API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The runtyped TypeScript compiler: tsc with always-on runtime type reflection. Native Go binary (fork of microsoft/TypeScript's native compiler); compiling with this tsc is the opt-in.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | digitalgriot | — | 🪝 🌐 | |
|
Package purpose: griot-viz-engine — the assembled cluster, built. Layer 01 generate -> JSON Canvas wire -> layer 02 render (xyflow) -> layer 03 substrate (Kuzu) -> layer 04 interactive shell (Waku click-any-box). Mounts standalone, composed into another app, or inside the
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A local memory store for magpie: your captures on your own machine, searchable, and readable by Claude over MCP.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: RELIASTRA command-line client: probes, verdicts, evidence records, public verification. Thin installer — downloads the platform binary from GitHub Releases on first run and verifies its SHA-256 before executing it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Ellavox AI | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Pair your machine with Clawd Park and link your Claude Code accounts: live usage and history, numbers only.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Henry Jewkes | — | 🪝 | |
|
Package purpose: GitHub REST port over the gh CLI: validated paths, required checks from branch rules, and an in-memory fake
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||