Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cloud Agent Fleet Worker — machine companion and operator CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: In-memory capability doubles for Air-Cloud JavaScript functions, generated from the aircloud:capability WIT contract, plus the fetch-event harness for node:test unit tests.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Shared, verified development state for AI coding agents — preserves decisions, failed approaches, and discoveries across sessions and agent switches
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Tlegado terminal reader
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | seragasantri | — | 🪝 🌐 | |
|
Package purpose: AI agent CLI ringan bergaya Hermes: chat + memory persisten + skill system pluggable (agent bisa bikin skill sendiri) + generator frontend berbasis template. Multi-provider: Claude/OpenAI(Codex)/custom router.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | PassionCode.ai | passioncode.ai | 🪝 🌐 | |
|
Package purpose: Every PassionCode.ai agent skill — Fabric Agent Adapter, Observatory Log and the organisation's working rules — for Claude Code and every other agent on the machine, updated as one set.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: RD Flow CLI — installer bootstrap + rd workflow verbs (path/status/lease/sdd/iteration/dispatch/worktree/lint/design-md/audit/compound/host/skill).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Use Claude Code, Codex, Cursor Agent and Antigravity CLIs like an API, on your subscription.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The Oriel Encryption component.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The Oriel Session component.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | duzhenxun | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local-first, OSS memory for AI agents. Same wire protocol as hosted Kemory.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | huabuyu233 | — | 🪝 | |
|
Package purpose: GitHub 仓库镜像加速克隆工具 —— 镜像加速 git clone 与 Release 下载，探测命中后自动还原 remote，对 git 零侵入
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Mudiakevwe Ovwurhughen | — | 🪝 🌐 | |
|
Package purpose: CLI for deploying apps on Orbit, a self-hosted PaaS
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | UiPath | — | 🪝 🌐 | |
|
Package purpose: A React PDF viewer widget for UiPath coded apps — renders PDFs from Orchestrator Storage Buckets, Data Fabric entity attachments, or plain URLs/Blobs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Drive the Herdr on this computer — workspaces, tabs, panes, agents and blocked-approval answers — from an app, or hand it to a phone over @byokit/link.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Rupa Paturi | — | 🪝 🌐 | |
|
Package purpose: AIevalcore — certify every AI response. Playwright plugin for evaluating RAG chatbot and LLM quality/safety (Pipeline 1) and correctness against a QA-approved ground truth dataset (Pipeline 2). LLM-provider-agnostic, with ground truth generation/review, E
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | huangshan | — | 🪝 🌐 | |
|
Package purpose: KDesigner 网络请求工具库 - 基于 axios 的 HTTP 客户端封装
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Krzysztof Dudek | — | 🪝 🌐 | |
|
Package purpose: Shared code for the Yggdrasil tool family: relation extraction, AST walking, grammar pins, the command table, MCP scaffolding, and a test kit. Vendored or installed; not a tool of its own.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | lidge-ai | — | 🪝 🌐 | |
|
Package purpose: The music CLI for coding agents: write a song in mini-notation, render it offline, and see it as numbers and pictures. No browser.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Create a Fleet agent project: npm create @apralabs/agent-kit my-agent
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Provider API balance and subscription quotas as an always-visible dsh Web sidebar card (or the original composer pill): the balance of the provider behind the model this conversation uses, with per-package percentage bars, correct units for money vs credi
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Control Yamaha MusicCast receivers with HomeKit, Siri, and Alexa
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Hemanth HM | — | 🪝 🌐 | |
|
Package purpose: One remote for every coding agent on your machine. Antigravity, Claude Code, and Codex, from your desk or your phone.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Jakob Heuser | — | 🪝 🌐 | |
|
Package purpose: A board over every Claude Code and Codex session on your Mac, and the tools to drive and dispatch them.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | duzhenxun | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH plugin: check the DeepSeek Harness release channels (npm dist-tags + GitHub release tags) from the Web GUI, browse and search the version history, upgrade the running install to the channel's newest or to any pinned version, and restart the service —
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | derangga | — | 🪝 | |
|
Package purpose: Pi extension. Denies model access to configured secrets and isolates shell commands from host credentials and network access.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Query personal Outlook via Microsoft Graph. CLI + MCP server for Claude.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Quartz 5 plugin that shows annotations written with Obsidian's Annotator plugin, and mirrors their source documents. See CONTEXT.md and docs/adr/.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A fixed-model, opt-in reasoning-effort controller for local Codex Responses traffic.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Sauhard Gupta | — | 🪝 🌐 | |
|
Package purpose: relay — a terminal coding agent that sends every request to the right agent, model and effort (Claude Code, Codex, OpenCode, Hermes), in isolated sandboxes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The facts and provenance engine behind Sourcey. Gives published facts a history anyone can verify from the files alone.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
SUSPICIOUS
|
— | npm | latest | crixusshen0125 | — | 🪝 🌐 | |
|
Package purpose: a hybird app framework
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Vojta Jína | — | 🪝 🌐 | |
|
Package purpose: Spectacular Test Runner for JavaScript.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Data Artifex | — | 🪝 🌐 | |
|
Package purpose: n8n community nodes for Data Artifex FAIRification and QSV high-performance tabular data wrangling (requires 'qsv' CLI on host)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | involvex | — | 🪝 🌐 | |
|
Package purpose: CLI for Involvex-Term: install/upgrade the latest release and control the running window (sp, nt)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Data Artifex | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Official Gapwise CLI for multi-university campus discovery and integration tooling
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: JevGate, the code-review gate for CI and coding agents: this package downloads the matching release binary, checks its SHA-256, caches it and runs it
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Anup Aglawe | — | 🪝 🌐 | |
|
Package purpose: Two-way bridge between Grok Bot and local coding agents (Claude Code, Codex, any CLI). Agents ping your bot through webhook routines; your bot runs agents in the background and gets the result back.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Zizwar | — | 🪝 🌐 | |
|
Package purpose: VibzCode - Sovereign Multi-Engine AI Agent Orchestrator & Workspace Platform with Shared MemoryZ Substrate
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Cody Green | — | 🪝 🌐 | |
|
Package purpose: Checks a web page the way real visitors see it: phone widths, larger text turned on, cut-off buttons and words, broken links and JavaScript errors. Plain-English report.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Diego da Fonseca | — | 🪝 | |
|
Package purpose: Prints one random verse from the book of Psalms and "God bless you!" in 36 languages. Zero dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Renato Vicente | — | 🪝 🌐 | |
|
Package purpose: Design system de aulas em HTML para a USP, usado com Claude e GPT.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Gergely Laborci | — | 🪝 🌐 | |
|
Package purpose: Small, package-manager-independent release CLI for Node.js and Bun
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||