Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Joud Bitar | — | 🪝 🌐 | |
|
Package purpose: On-demand local dev-server proxy: every project gets a permanent .localhost URL that wakes its dev server on request and sleeps it when idle.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Command-line interface for ZeroWidth — your workspace's flows, docs and tools from the terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Valentyn Morenko | — | 🪝 🌐 | |
|
Package purpose: Gmail, Calendar, Drive, Docs, Sheets and Slides for coding agents - several Google accounts, read or write access chosen per service at sign-in, compact TOON output
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | stevekanger | — | 🪝 🌐 | |
|
Package purpose: Development tools for wordpress.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI that captures product screenshots from Playwright specs. Login once, capture many. Companion to Document360 Lotus.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A browser an agent can actually drive: compact snapshots, overlay-proof clicks, secret-safe fills, and the console and network log.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Connect Claude Code and Cursor to Nuffo: three bets, today's three, and agents that ask before starting a fourth thing.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Tyson Lupul | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK for Arboresce.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Shayan Montazeri | — | 🪝 🌐 | |
|
Package purpose: Turn Claude Design and Claude Code designs into native, editable Figma files (HTML to Figma with Auto Layout and your Design System components), and Figma frames into code that uses your own React components. An MCP server and Figma plugin for Claude Code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | brokoskokoli | — | 🪝 🌐 | |
|
Package purpose: Local live dashboard for Claude Code agents: see running sessions, subagents, spawned claude processes, tool calls, timelines, token usage and full history – read passively from ~/.claude, no hooks.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Pull, develop and deploy the Worker code of your APIs on JoJ API from the command line
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Design-driven process tooling for Claude Code / Cowork: versioned HTML mockups + Design Decision Records in a self-contained .design-recall/ folder.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | MRaihan-XXL | — | 🪝 🌐 | |
|
Package purpose: aio - auto-connect your AI agents to LIVE search across GitHub (630M+ repos, public skills), npm & crates. Zero search storage (results printed, never saved), no slash-commands.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | thirsty5034 | — | 🪝 🌐 | |
|
Package purpose: Multi-host SSH tunnel and SSHManager tool for DeepSeek Harness (project-scoped grants)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CIP-30 test wallet for Cardano dApps. Injects into Playwright tests and signs real transactions and messages with no wallet popup, so CI and coding agents can test wallet flows unattended. Includes a quirk catalogue and a CSP doctor.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DeepSeek Harness 会话计费 + 通用提供方用量查询插件：会话费用角标、按模型提供方配置的用量面板（DeepSeek 官方余额 / OpenCode 5小时·周·月套餐额度 / 自定义 HTTP 用量查询）。Session billing and per-provider usage quota plugin for DeepSeek Harness.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | kevindurant735rocket-creator | — | 🪝 | |
|
Package purpose: Turn a finished AI coding-agent session into a scrubbable, single-file HTML replay you can attach to a PR. Zero deps, zero build, zero network.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 1.1.0 | vivian-labs | — | 🪝 | |
|
Package purpose: 1point3acres forum toolkit: daily check-in and quiz with reward verification, an offline interview-experience library and forum tools, as a CLI and an MCP server driving your own Chrome
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Andrey Yamanov | — | 🪝 🌐 | |
|
Package purpose: Astro renderer and Tasty theme for Cookbook
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Rajeh Taher | — | 🪝 🌐 | |
|
Package purpose: A WebSockets library for interacting with WhatsApp Web
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Godwin Pinto | — | 🪝 🌐 | |
|
Package purpose: Add, replace and delete images in MDX docs straight from the rendered page, during development
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | KaxyotiK | — | 🪝 🌐 | |
|
Package purpose: A single-command, workspace-local CLI for managing multi-repository units of work (Groves) built on Git worktrees.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Self-hosted Microsoft **Fluent Emoji** — a committed Unicode CLDR catalog plus the artwork in five styles (four static + animated), resolved by codepoint. No third-party CDN.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Build and send emails using Vue. Components, rendering and a live preview of your emails right in your browser.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | John Scrudato IV | — | 🪝 🌐 | |
|
Package purpose: Render, edit, diff and project Word .docx files in the browser — DOCX to HTML, a block editor, Word-grade redlines with tracked changes, and anchor-addressed markdown for LLM agents. WebAssembly, no server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: aos: the Agentic OS command line. Sign in as yourself (aos login), switch company, file and publish work into a company vault.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ITFin for AI agents, as a local MCP server or a CLI: projects, time entries, leave and reopen requests
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Peter Bulovec | — | 🪝 🌐 | |
|
Package purpose: Record demo clips of a real web app: scripted, deterministic, re-recorded on every push.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Platform binary for @deckflow/deck2html (proprietary)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Platform binary for @deckflow/deck2html (proprietary)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Platform binary for @deckflow/deck2html (proprietary)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Murat Can Aşkın | — | 🪝 🌐 | |
|
Package purpose: Buluver: High-performance Turkish legal document (UDF/UYAP, DOCX, PDF) search engine, CLI, and FastMCP server for AI agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Endzela: a shared workspace where AI coding agents (Claude Code, Codex, ...) plan, split and build a project together.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local-first browser cockpit for running AI coding agents (Claude Code, Codex, Gemini) and shells in floating windows backed by real PTYs. Git worktree per agent, approval alerts, sessions that survive restarts.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Self-host Recalfy: an open-source AI memory assistant for Telegram. One command sets it up — paste a bot token and an AI key.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | quirinpa | — | 🪝 | |
|
Package purpose: AXIL PTY multiplexer module
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | quirinpa | — | 🪝 | |
|
Package purpose: AXIL PTY multiplexer module
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | ZeroStudio | — | 🪝 🌐 | |
|
Package purpose: CDev - A simple, multi-target programming language
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | gosomea | — | 🪝 🌐 | |
|
Package purpose: A DeepSeek Harness plugin-development preset with version-aware skills and isolated verification guidance
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Create, run, watch and steer long-running Claude Code and Codex harnesses
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | SCAYLE Commerce Engine | — | 🪝 🌐 | |
|
Package purpose: Developer tooling orchestration for the SCAYLE Storefront Application V3
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Search and export a local Codex, OpenCode, or T3 Code chat as text, Markdown, or JSON
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Vishesh Raheja | — | 🪝 🌐 | |
|
Package purpose: One control plane for parallel React Native work on macOS: slimmed iOS simulators and Android emulators, a live browser dashboard, leased Metro ports, a shared native build cache, and per-agent device attribution for Claude Code and Codex.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Zencode CLI standalone npm package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A portable team development framework for coding harnesses and multiple LLM providers
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Parithosh Varma | — | 🪝 🌐 | |
|
Package purpose: Gather free-tier API keys from any provider into one pool and rotate through them — round-robin key selection, usage/quota tracking, and a drop-in HTTP proxy with a built-in web UI. Dependency-free server core, TypeScript + SQLite.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Offline-first, self-hosted store for the documents AI agents write: a web UI, a REST API and an MCP server over one versioned store.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Lightweight CLI for Privacy Pools V1 and V2
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Tyrone Jher Tongol | — | 🪝 🌐 | |
|
Package purpose: Real-time game items validator with background daemon for client project updates
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||