Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Connect a Cloudflare Workers app to CodeFusion Console: admin screens from a JSON manifest, staff, visit statistics, browser failures, diagnostics and its deployed version; and the codefusion-console command line
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | yfwu2020 | — | 🪝 🌐 | |
|
Package purpose: DSH 思维链可视化：把模型的实时思考按 turn → step →（思考原文 + 工具调用）聚合成可读的右侧栏视图
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Bedrock Registry host catalog and script-only Bedrock behavior pack (schema 5). Vanilla snapshots are Mojang data; see NOTICE.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | LuckyDuck1273 | — | 🪝 🌐 | |
|
Package purpose: E.V. — a keyboard-driven command center and AI workspace assistant for your PC.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Records every turn of your Claude Code sessions, and what the agent decided, so a task survives /clear and moves between machines.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Galvin Alfito | — | 🪝 🌐 | |
|
Package purpose: GWD CLI — Flutter Preview workflow via ADB, with USB and Wireless Debugging support
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Nguyen Quoc Anh | — | 🪝 🌐 | |
|
Package purpose: VibeAudit Tool: Next-Gen OWASP Top 10 Security & Web Vibe/UX Quality Auditor (MCP Server & CLI)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: SDK d'intégration du widget de bug report Swydler pour React Native (iOS/Android).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Installable local MCP server for visual website implementation and verification.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A local dashboard for flowrail: red lines, audit, comments your agent acts on, and an optional board. Zero third-party deps, no cloud, MIT.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Northlatch Labs LLC | — | 🪝 🌐 | |
|
Package purpose: Authenticated RPC transport, generation lifecycle, and browser fixture
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Read-only Drama Flux advertising reports CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Tengence Team | — | 🪝 🌐 | |
|
Package purpose: GEO content engine MCP server: 56 tools across content, publishing, search-inclusion and AI-monitoring domains; stdio + Streamable HTTP transports, Bearer-token auth (the MCP bridge layer of @tengence/geo-sdk)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for the official HKMA Open API — Hong Kong bank ATM/branch search, HIBOR and HKD interest rates. No credentials, no scraping.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Tomáš Grasl | — | 🪝 🌐 | |
|
Package purpose: The drobek platform module contract (defineModule, the ModuleContext, the slot helpers) and the test kit (@drobek/modules/testing).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | windingwind | — | 🪝 🌐 | |
|
Package purpose: web-falcor core: NVIDIA Falcor's framework on WebGPU (render graphs, scenes, materials, Slang shaders)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | windingwind | — | 🪝 🌐 | |
|
Package purpose: Mogwai, Falcor's interactive viewer, prebuilt for the browser (WebGPU); `npx @web-falcor/mogwai` serves it
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Muhammad Dzakwan Najmi | — | 🪝 🌐 | |
|
Package purpose: Headless CLI for Akad, a private AMM on Midnight: testnet wallets, pool scenarios, solvency checks and indexer-checked run reports.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A terminal coding agent for local repositories, with approval-gated tools and verification.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | huanf | — | 🪝 🌐 | |
|
Package purpose: Local evidence-only Markdown retrieval MCP
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Damian Borek | — | 🪝 🌐 | |
|
Package purpose: Local conductor decisions for Pi from Polaris 3 (polaris-3), the autonoxis decision model (a LoRA adapter on Bespoke-Nimble-9B) behind the Jev wire format
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Kunwar Vivek Singh | — | 🪝 🌐 | |
|
Package purpose: Deterministic explicit-chain fallback adapter for Paperclip: runs a fixed ordered list of backends and uses the first available. No implicit/trending model switching — per-role determinism.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Aeroscis | — | 🪝 🌐 | |
|
Package purpose: DSH 临时任务模式：为 DSH 增加「任务」分组——不绑定任何长期工作空间，自动在任务根目录下创建隔离的临时工作目录并开启会话，即开即用、用完即弃。Temporary task mode for DeepSeek Harness.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Giving agent quirks the side-eye. Flags habits of AI-written code in uncommitted changes, on your own machine, with calibrated confidence.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Offline-first client-side location search and reverse geocoder powered by GeoNames.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Send messages from your terminal to the BotPager mobile app
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Python-free local and SSH client for Claude Code and Codex sessions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Berth Contributors | — | 🪝 🌐 | |
|
Package purpose: The berth CLI — init, dev, test, doctor, mcp, attest, os, snapshot, publish, deploy
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Berth Contributors | — | 🪝 🌐 | |
|
Package purpose: Resident app SDK: defineApp(), lifecycle hooks, context bus client — runs inside the sandbox
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Berth Contributors | — | 🪝 🌐 | |
|
Package purpose: Shared TLS for Berth servers and clients: cert loading, self-signed generation for dev, and client-side CA trust
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A composable 2D scene renderer powered by CanvasKit and Skia
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A composable 2D scene renderer powered by CanvasKit and Skia
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | SABIR7718 | — | 🪝 🌐 | |
|
Package purpose: A modified version of WhiskeySockets/Baileys
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: `simplex2-elementUI-frame` 是 [`simplex2-frame`](../simplex2-frame) 面向 Element Plus 的 UI 扩展框架工程。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Rajeh Taher | — | 🪝 🌐 | |
|
Package purpose: A WebSockets library for interacting with WhatsApp Web
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local MCP server for Apple Mail
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH 高级监听设置（profile: web）：全局/指定 IP 监听、设置端口、取消鉴权、远程访问兼容（宿主面判定 + 入口头规范化）、宿主重启，以及卸载前的一键完全清理。基于 dsh 0.1.5-rc.3，由 DSv4.1flash 构建。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Part of the [Qadam Flow](https://github.com/aiqadam/qadam-flow) monorepo. See the repository for documentation. Licensed under MIT.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Part of the [Qadam Flow](https://github.com/aiqadam/qadam-flow) monorepo. See the repository for documentation. Licensed under MIT.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Part of the [Qadam Flow](https://github.com/aiqadam/qadam-flow) monorepo. See the repository for documentation. Licensed under MIT.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | delamind | — | 🪝 🌐 | |
|
Package purpose: Token usage across Claude Code, OpenCode, Codex & ZCode on one yardstick — plus plans run chunk by chunk and a convention-debt tracker. No server, your data stays local
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Stivenson Rincón Mora | — | 🪝 🌐 | |
|
Package purpose: Actualiza tu hoja de vida de CvLAC (MinCiencias) conversando con tu asistente de IA, sin llenar formularios a mano. Servidor MCP con Playwright.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CDD engine CLIs: task runner, docs reviewer, branch reviewer, harness selector.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Contributor CLI for a DevDogsUGA checkout: database, env, images, emails, cron, deploy. Ships built JS; run via `pnpm dlx @devdogsuga/devtools` (or the `devtools`/`devtools-ci` bins once installed) from inside a DevDogsUGA clone.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The DevDogs Changelog: email-safe React components rendered as platform pages and exported as Outlook-importable .eml files
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | whale-chan contributors | — | 🪝 🌐 | |
|
Package purpose: 鲸鱼娘 (Whale-chan) — 生活在任意 IDE 终端里的 2D 桌宠 + DeepSeek Harness 智能体对话。可直接在 VS Code / PyCharm / Windows Terminal 的终端面板里运行。不需要 API Key：她调用的是你本机已经登录过的 dsh。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Simon Lydell | — | 🪝 | |
|
Package purpose: A maintained, API-compatible modernization of source-map-resolve.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Kavindu Udara | — | 🪝 🌐 | |
|
Package purpose: Your unified AI workspace CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Axiom | — | 🪝 | |
|
Package purpose: Axiom — the autonomous company: a persistent, self-evolving multi-agent organization
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Camoufox: TypeScript launcher for the Camoufox anti-detect Firefox browser. A port of the Python wrapper.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||