Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Sanjay Krishna Anbalagan | — | 🪝 🌐 | |
|
Package purpose: Teaching films from a storyboard and a recipe: every drawing tied to a spoken phrase, one seekable timeline, pixel-pinned frames, director notes, a local preview studio, and a making-of record for every film.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Sunstone North Lab LLC | — | 🪝 🌐 | |
|
Package purpose: Sunstone Weave: local semantic code search for any MCP client, with the Motherlode code-search encoder running on your CPU.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The Ryvo command line: drive your AI voice agents, calls, campaigns and webhooks from the terminal, and connect the Ryvo MCP server to your AI client.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Cagdas Salur | — | 🪝 🌐 | |
|
Package purpose: The extension API of pal, a keyboard launcher: the types an extension implements and the calls it makes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Shared workflows, actions and tooling for @taraxvoid sites
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | 1MSG | — | 🪝 | |
|
Package purpose: Send WhatsApp messages, receive webhooks, and make any API request using the official WhatsApp API through 1MSG.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Jimmy Chen | — | 🪝 🌐 | |
|
Package purpose: A Claude Code plugin that speaks as the Genshin Impact character whose birthday is nearest: an answer opens with one spoken line in the character's voice and the rest is plain, a joke or a hello is spoken whole, and every line is read aloud in the charact
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The Light SDK every v2 org app depends on: entities (Drizzle tables with a typed client), sign-in, contracts and in-app chat.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Milad Joodi | — | 🪝 🌐 | |
|
Package purpose: Add FarsiUI components to your apps.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Proticom | — | 🪝 🌐 | |
|
Package purpose: Local MCP mailbox that lets any agent hand coding tasks to Claude Code, Codex and Grok Build in git worktrees.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | PitaJ | — | 🪝 | |
|
Package purpose: Capture and view response time statistics for different routes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Markdown-vault agent memory with a derived, brain-inspired graph index (hippocampal indexing, spreading activation, bi-temporal facts).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Full-stack framework for Cloudflare Workers: one blueprint declares the API, auth, storage, jobs, cron, and realtime, and SSR with TanStack Start runs next to them.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Pratham Pansare | — | 🪝 | |
|
Package purpose: Deterministic security test suite for MCP servers: sends real payloads through live MCP sessions and confirms exploitability from responses. CI-native with SARIF 2.1.0 output for GitHub Code Scanning.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Chase — dynamic analysis for Sui Move transactions. Invariant checks over real execution traces, deterministic triage, and a budget-bounded scout agent. CLI, library and MCP server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | authoritydmc | — | 🪝 | |
|
Package purpose: High-fidelity inline terminal JWT inspector, decoder, signature verifier, and expiry countdown timer across macOS, Linux, Windows, PowerShell, Bash, and Zsh.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Accessible native-video stimulus PIE element with captions, transcript, authoring, and timed-media discovery support
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Sign in with Aether Labs SSO — OAuth 2.0 + OIDC for your app, with the callback route scaffolded on install.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Framework-agnostic Dabi web components and design tokens.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Scaffold a new nexwire project
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Hussein Taha | — | 🪝 🌐 | |
|
Package purpose: One local dashboard for all your Claude Code sessions: answer questions, approve permissions and send follow-ups, routed back to the exact session.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Parth Kumar Singh | — | 🪝 🌐 | |
|
Package purpose: Check if your LLM API keys are live — across 24 providers, without spending a single token. Local, zero-dependency CLI + web UI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Jan Huege | — | 🪝 🌐 | |
|
Package purpose: Control a reveal.js deck from your phone: speaker notes, timer, slide jump and a Logitech-style spotlight. No app, no cloud.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A programmable, self-contained agent SDK built on OpenCode.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Ivica Batinic | — | 🪝 🌐 | |
|
Package purpose: Hold a hotkey, click any element in the page, and jump to the line of code that rendered it
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Jaltech | — | 🪝 | |
|
Package purpose: Provider-agnostic authentication and authorization contracts, guards, decorators and module for NestJS.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Browser session and profile model: saveable session descriptors (zod), Chrome profile discovery, camofox session reuse, and typed injection seams (AuthSignalRegistry, accountSwitcher, SessionSource registry).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Archive, close and refocus Safari tabs. Every tab lands in a local SQLite inventory; the relevant ones come back, judged by Jev against your calendar and GitHub.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Adham Helmy | — | 🪝 🌐 | |
|
Package purpose: Azure DevOps for pi: native read-only tools, a skill, and a zero-dependency `ado` CLI for work items, bugs, WIQL and pull requests.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | SPBABO | — | 🪝 🌐 | |
|
Package purpose: Agent skill that audits and configures search + AI visibility (SEO/GEO) for Google, Naver, Bing and AI answer engines. Deterministic verdicts, minimal tokens.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | rkshrksh | — | 🪝 | |
|
Package purpose: On-demand plain-English explanations for pi-permission-system prompts
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 小鲸教练插件：把「位置 + 判断」从小鲸的转述里拿回来。读 MAP/DEPENDS/PROGRESS，给唯一动作、判因、检测。热插拔，删掉即还原。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Portll | — | 🪝 | |
|
Package purpose: ironwork for COBOL: a COBOL compiler and interpreter whose target is IBM Enterprise COBOL for z/OS
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Server-only NightFUEL SDK for a hosted App workload identity.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Verification-first project-understanding layer for humans and coding agents — deterministic workflow mapping, derived confidence, an interactive chat, a gate-verified fix engine, and an MCP server
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: PasswordHasher, Mailer, WebAuthn — each with layer, layerNoop, layerMemory variants. A plugin depends on a port, never a concrete implementation (capability over implementation).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MiniMax Code WebUI with a local, process-based runtime.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Matthieu Bouilloux | — | 🪝 🌐 | |
|
Package purpose: Build tool that compiles and verifies the WebAssembly crypto modules used by @awacloud/fw, from each package's own C sources, validated against pinned test vectors and checked into the repo as committed bytes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | yuda-lyu | — | 🪝 🌐 | |
|
Package purpose: A scanner for vulnerabilities in nodejs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Shared, verified development state for AI coding agents — preserves decisions, failed approaches, and discoveries across sessions and agent switches
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | StructuredID | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | soyunninja | — | 🪝 🌐 | |
|
Package purpose: pi extension that records agent work time per prompt, excluding waits for the user, with subagent linkage and task/session views
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Pack npm packages to a tgz file.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Mehedi Hasan | — | 🪝 🌐 | |
|
Package purpose: A tool-agnostic kit that helps developers raise their project's compliance with a tiered engineering-quality standard.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Sibhimanyu | — | 🪝 🌐 | |
|
Package purpose: Connect a repo to your Heresay so coding agents can install it and fix the reports your team accepts. MCP server, skill and CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Nick Paustian | — | 🪝 🌐 | |
|
Package purpose: Lightspeed: a compile-first framework for islands of reactivity in static HTML.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | mydsp | — | 🪝 🌐 | |
|
Package purpose: Tree-branching workspace plugin for DeepSeek Harness: open an engineering direction as one atom — a git worktree plus a child session that inherits the conversation, wired into a tree you can see.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A docked multi-agent terminal deck for DeepSeek Harness
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||