Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | MahMUD | — | 🪝 🌐 | |
|
Package purpose: Masterpiece Facebook Chat API client for Messenger automation, real-time MQTT listening, and session-stable Facebook chat operations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Qore developer CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | dhammawatthumpra-coder | — | 🪝 🌐 | |
|
Package purpose: WinHelm - Windows Native MCP Server with Unified HTTP/SSE/Streamable Gateway and 38 Tools
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Embedded terminal for DeepSeek Harness: opens an in-app terminal panel in the right sidebar (DockKit) instead of spawning a system terminal window. Follows the DSH theme and starts in the session workspace root.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Browser-side liveness detection (eye blink, smile, head turn) that wraps face-api.js behind a configurable challenge flow.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: world-h5-red
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | YanfLIZi56 | — | 🪝 🌐 | |
|
Package purpose: 一键启动的可视化 Jev 控制台：配置 Noul / Choice / Score 问题，试跑并导出代码
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local-first Figma MCP server — Desktop plugin bridge, no REST API token for canvas work
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | PipeLedger Inc | — | 🪝 🌐 | |
|
Package purpose: Command-line client for PipeLedger: financial statements, metrics, and General Ledger detail from NetSuite and QuickBooks Online, for AI agents and automation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: <!-- AUTO-GENERATED — DO NOT EDIT THIS FILE. Generated by `mlcl sync-docs` from the package's src/index.ts JSDoc + mlcl/registry.json. Edits here are overwritten on the next commit (molecule's pre-commit hook regenerates). To change this document, edit th
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Aclade — autonomous AI experts that do real work. `npx aclade` connects your machine to your Aclade team with a zero-trust local connector.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Autonomy V2 | — | 🪝 🌐 | |
|
Package purpose: Autonomy v2 orchestration package.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | hxa-rn | — | 🪝 🌐 | |
|
Package purpose: WebRTC for React Native — HarmonyOS (OpenHarmony) adaptation of @livekit/react-native-webrtc
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A second opinion on tool calls from TypeSafe's Jev before they run: stops dangerous calls that would run unasked, hands safe softDeny calls to you
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Jev for pi: TypeSafe System One judgments in the agent loop (permission gate, output ladder, conditional context, agent router)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Grafana lexicon for chant — typed dashboards, panels, queries and datasources, serialized to dashboard JSON and Grafana provisioning files
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: obra/superpowers skills for DeepSeek Harness: 14 development-methodology skills (brainstorming, writing/executing plans, subagent-driven development, TDD, systematic debugging, code review, verification and more) registered into the DSH skill registry, lo
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Chaine de verification et de construction des SPA du socle frontal starter : starter-web verify, construire, sprite, manifeste, precompresser. Jamais en dependance de production.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 标准组件库：基于 Vue 2.6 + Element UI 2.x + vxe-table 3.24.x 的通用业务组件（按钮、弹窗、筛选栏、表单、表格、树、分割条等）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Water masks, shorelines and distance-to-shore grids for any area, from OpenStreetMap vector tiles fetched on demand
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Indie Framework Team | — | 🪝 🌐 | |
|
Package purpose: Production-grade 2D Game Framework in TypeScript for Web/HTML5 designed for indie game developers
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | nathwn12 | — | 🪝 🌐 | |
|
Package purpose: The rainbow bridge for OpenCode plugins — run V1-era plugin hooks on the OpenCode V2 runtime; unmapped hooks are refused loudly instead of silently dropped.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Microsoft Corp. | — | 🪝 🌐 | |
|
Package purpose: TypeScript is a language for application scale JavaScript development
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Microsoft Corp. | — | 🪝 🌐 | |
|
Package purpose: TypeScript is a language for application scale JavaScript development
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Microsoft Corp. | — | 🪝 🌐 | |
|
Package purpose: TypeScript is a language for application scale JavaScript development
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Microsoft Corp. | — | 🪝 🌐 | |
|
Package purpose: TypeScript is a language for application scale JavaScript development
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Run your app against a world of twins. `World` and `Repo` — one method per verb: init, up, run, log, diff, reset, branch, checkout, clone, fetch, changeset, push — and the `volter` command, one client of them.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local Fly.io Machines API twin (api.machines.dev v1: apps/machines/volumes/secrets CRUD, machine lifecycle states+events, leases, wait) whose execution plane is REAL local Docker — control plane twinned, containers genuinely run. Built on @volter/world-co
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: World configs for twins: boot named local runtimes, allocate ports, generate world.env/instance.json, and run apps against fake-key twin worlds.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Rodolfo M. Raya | — | 🪝 🌐 | |
|
Package purpose: Generates a unified XML document from a DITA map and its topics
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | YarooqH | — | 🪝 🌐 | |
|
Package purpose: Token Larper — Multi-Harness AI Coding Usage & Cost Telemetry Dashboard powered by ccusage
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: nodemoon-fast package for watching and restarting Node.js applications
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Route a codebase's OpenAI, Anthropic and Perplexity calls through key.one: one project key, spend under control.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Alex Castlenine | — | 🪝 | |
|
Package purpose: A Vite plugin that removes console calls from your production build and keeps the ones you still need (by default console.error, console.warn, console.info and console.clear). It works on your own code and on dependencies, and supports ignore comments, pa
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Abhishek Mallick | — | 🪝 | |
|
Package purpose: Your API docs write themselves: infer OpenAPI 3.1 from real HTTP traffic, detect drift, publish docs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Great Love | — | 🪝 🌐 | |
|
Package purpose: Get an alert on your phone when your coding agent needs you
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Abhishek Mallick | — | 🪝 🌐 | |
|
Package purpose: Find what your codebase doesn't need. Unused dependencies, dead exports, orphaned files and unused CSS for JS/TS projects.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK and compatibility CLI for Excalibur (xcb), which routes coding tasks across the Claude, Codex, and Devin subscriptions you already pay for.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Drop to CDN | — | 🪝 🌐 | |
|
Package purpose: Command-line client for Drop to CDN — upload files, publish pages, and get instant public CDN URLs. Built for both humans and AI coding agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Rajdeep Development | — | 🪝 🌐 | |
|
Package purpose: Build agentic tools, AI code editors, and agent harnesses in a few lines. Framework-agnostic TypeScript agent loop with MCP (Model Context Protocol) client, just-in-time SKILL.md skills, permissions, and LLM providers — behind the Smoke Monkey code editor
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Study the blunders from your own Backgammon Galaxy matches
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | firejune | — | 🪝 🌐 | |
|
Package purpose: AI-authored Spine 2D character parts from one anime painting and its See-through layer decomposition: measured parts, weighted-mesh rig specs, verified through spine-rigc before anything is written. A CLI for agents that cannot see the image.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | feichao93 | — | 🪝 🌐 | |
|
Package purpose: Battle city remake built with React 19 + PixiJS v8.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CLI for AWS Lambda MicroVMs - build images, run sandboxes, exec commands
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | MahMUD | — | 🪝 🌐 | |
|
Package purpose: Masterpiece Facebook Chat API client for Messenger automation, real-time MQTT listening, and session-stable Facebook chat operations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A Feishu-inspired, extensible rich text editor built with Slate and TypeScript.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Italo Almeida | — | 🪝 🌐 | |
|
Package purpose: Self-contained System 1 decision engine: multilingual INT8 transformer served by a zero-dependency native binary (or the bundled pure-Rust WASM engine). TypeSafe Jev wire-compatible (/v1/systemone). Runs offline in Node.js, Bun and browsers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Pondra, a streamhouse in one binary: the binary for your platform, and a JavaScript client (SQL, exactly-once appends, change feeds)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Dimas Seto | — | 🪝 🌐 | |
|
Package purpose: Standalone Browser Sharing & Visual Element Inspector MCP Server
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Telos Team | — | 🪝 🌐 | |
|
Package purpose: OpenCode Telos - Spec-Driven Development plugin with Knowledge Graph enforcement
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||