Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Command-line tooling for Lingva localization projects
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Shing Rui | — | 🪝 🌐 | |
|
Package purpose: Scaffold multi-platform monorepos (API, web, admin, desktop, mobile) with the mars command
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server that hands coding agents the JS/TS code a task needs: Jev picks the relevant declarations, the TypeScript compiler follows their callers, callees, types and tests
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Daniele Nebbiai | — | 🪝 🌐 | |
|
Package purpose: Install the OpenVideo workspace and connect Codex or Claude Code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Shubham Sagar | — | 🪝 🌐 | |
|
Package purpose: MCP server + CLI for safe PostgreSQL migrations: drift detection, lock analysis, safe rewrites, checksum verification.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Show Pi subscription quota windows, reset times, and Copilot AI credits
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | shakthizen | — | 🪝 🌐 | |
|
Package purpose: MCP server that finds and validates working free HTTP/HTTPS/SOCKS proxies by country, for geofenced requests and debugging blocked curls.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Style conversion tools for Massif Maps — CartoCSS compilation and MapBox style translation
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | GridPath | — | 🪝 🌐 | |
|
Package purpose: Let your agent edit real Excel files, with a review step before anything is saved. MCP server + engine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Portable Agent Skills package and scaffolder for Spring Boot 4 + Vue 3 projects.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Real paint colours in your terminal: search 51,000+ colours from 35 brands, find equivalents, and paint your own room photos with Muro.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | sexyAmole | — | 🪝 🌐 | |
|
Package purpose: A local web interface for managing coding agents, projects, sessions, and DingTalk integrations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Codenotch SA | — | 🪝 🌐 | |
|
Package purpose: The Codenotch CLI ('cn'): scaffold, run, validate, package and deploy full-stack TypeScript Codenotch projects - processes, tables and React apps - on a local Codenotch runtime
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Mediusware | — | 🪝 🌐 | |
|
Package purpose: Describe screens in YAML, get a clickable hand-drawn wireframe prototype (static HTML, PDF, PNG). Built on wired-elements and RoughJS.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | TSUNAGI | — | 🪝 🌐 | |
|
Package purpose: TSUNAGI///Matrix — the BMW E46 M3 tools' calculations as a library, a CLI and MCP servers. MSS54HP DME: VE and rf_korr corrections from Testo logs. SMG II: decode and compare the gearbox calibration. DME backups and cluster M35080 EEPROMs: read and verify
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Git worktrees for DeepSeek Harness — isolate parallel work in its own directory and branch. Ships Fast mode (快速模式).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | TahaCode | — | 🪝 🌐 | |
|
Package purpose: Production-grade AI coding agent CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Francisco | — | 🪝 | |
|
Package purpose: Universal, zero-dependency pagination engine for Node.js, TypeScript, and NestJS with cross-language specifications for Python and Go.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Runs your coding agents for Infersync: connects a machine with one command, picks up steps, works them with your own agent, opens pull requests, and reports what the agent is doing so it can be watched.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Sebastian Meier | — | 🪝 🌐 | |
|
Package purpose: A modified version of openapi-red (OpenAPI/Swagger client for Node-RED) with improved error handling, maintained by js-soft
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Molecule Dev, Inc. | — | 🪝 🌐 | |
|
Package purpose: Modal model hosting for molecule.dev — run a model server container on a T4/L4/A10 GPU or CPU with per-second billing, behind Modal proxy auth
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Codenotch SA | — | 🪝 🌐 | |
|
Package purpose: The Codenotch SDK: build, validate, generate, package and deploy full-stack TypeScript Codenotch projects, and install and drive the local Codenotch runtime
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agentic coding review tool.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 独立的 TypeScript 报表引擎：模板分页、DOM/Canvas/PDF/Excel 输出与 Vue 3 预览组件
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Sky Genesis Enterprise | — | 🪝 🌐 | |
|
Package purpose: The SGE Design system React toolkit.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | ARG RABBI | — | 🪝 🌐 | |
|
Package purpose: Create Laravel, Next.js, NestJS, Vite, Django, FastAPI, Go, Express and .NET projects with the official tooling — any version, auth, themes, Docker, CI. Run: npx boilercraft
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | liujianqiao | — | 🪝 🌐 | |
|
Package purpose: DSH 插件兼容性体检：自动探测本机 dsh 版本与能力（含实测校准），适配任意 dsh 版本；启动时检查已装插件是否冲突，在 DSH 页面上给出中文预警与一键修复（隔离/卸载/升级），并提前预警「快要不适配」的插件
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Petr Tripolsky | — | 🪝 🌐 | |
|
Package purpose: Zero-boilerplate CLI runner for tradeforge strategies. Run backtests, paper trading, and live bots with candle cache warming, web dashboard, and Telegram notifications — no setup code required.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: What Open-CR-Agent's code review platform adapters share: the review summary, its state, and who may command ocra
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Static security scanner for Lua in embedded firmware: finds remote code execution. Runs luasec without installing Lua tooling.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | ReadyCode | — | 🪝 🌐 | |
|
Package purpose: Ask huge PDFs, Word documents and spreadsheets specific questions: your AI gets only the passages that answer, with citations. A local MCP server for Claude Code, Cursor and Codex, plus a browser version.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Link a repository to Ulika. Scans your source locally and sends only the derived content manifest.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Peter Chen | — | 🪝 🌐 | |
|
Package purpose: Taobao/Tmall business data CLI with multi-store browser authentication, guarded mutations, and a portable Agent skill
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Copy-paste React components with a clean, minimal design, built on Base UI and Tailwind CSS v4. CLI for Next.js and React (Vite).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Let hosted web apps chat through the Claude Code login on your own machine: one local daemon, per-site consent, no keys, the site's tools run in the page.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | KetikinAI | — | 🪝 🌐 | |
|
Package purpose: Professional Canvas-based Document Editor for KetikinAI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | qingniaofly | — | 🪝 🌐 | |
|
Package purpose: Devfab is a library for developer building low code factory
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mutation-tests your AI coding agent's uncommitted diff against your existing Jest or Vitest suite, so you know which changes your tests would not have caught.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Kevinzzz6 | — | 🪝 🌐 | |
|
Package purpose: Themes, wallpapers, glass and startup visuals for the official ZCode Desktop release.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: An open-source React component for drawing network diagrams.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Read-only MCP server for Feishu/Lark documents, Wiki pages, and embedded images
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | duzhenxun | — | 🪝 🌐 | |
|
Package purpose: Browser cockpit for the Codex CLI app-server — chat, tool calls, diffs and approvals in one tab
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DeepSeek Harness port of official pstack. Playbooks and principles are poteto's; only the harness call layer is rewritten.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Fusion for DeepSeek Harness: one model entry backed by a frontier Lead that reads, briefs and reviews, and a much cheaper Sidekick that writes the code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Sanjay Krishna Anbalagan | — | 🪝 🌐 | |
|
Package purpose: Teaching films from a storyboard and a recipe: every drawing tied to a spoken phrase, one seekable timeline, pixel-pinned frames, director notes, a local preview studio, and a making-of record for every film.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Sunstone North Lab LLC | — | 🪝 🌐 | |
|
Package purpose: Sunstone Weave: local semantic code search for any MCP client, with the Motherlode code-search encoder running on your CPU.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The Ryvo command line: drive your AI voice agents, calls, campaigns and webhooks from the terminal, and connect the Ryvo MCP server to your AI client.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Cagdas Salur | — | 🪝 🌐 | |
|
Package purpose: The extension API of pal, a keyboard launcher: the types an extension implements and the calls it makes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Shared workflows, actions and tooling for @taraxvoid sites
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||