Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Bounded, evidence-driven long-run workflow harness for OpenCode: contract-bound runs, fingerprint-bound receipts, operator-reviewed completion. Dependency-free.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Gihan Rangana | — | 🪝 🌐 | |
|
Package purpose: LeptonJS Node runtime (app, IPC, native loader).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Tiago Jacinto | — | 🪝 🌐 | |
|
Package purpose: Sub-Sub: a Zotero librarian and research assistant in the browser or the terminal, built on pi
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Connect Claude Code, Cursor, Antigravity and other coding agents to Worfilo, so they can plan, build and integrate workflows.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Configurable search for Swagger UI with an optional OpenRouter AI assistant
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A Gecko WebView in WebAssembly, with a small framework-agnostic API and optional React bindings.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Gustavo Gutiérrez | — | 🪝 🌐 | |
|
Package purpose: Embeddable provider-agnostic Alisio agent core: tool loop, context compaction, local tools, MCP, plugin host and SQLite session store. Runs on Node >=22.16 and Bun.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Authentication and authorization foundation for jsango
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The cultivate() Vite plugin and the cultivate command, which make a Vite React project a Cultivate app
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | tunr | — | 🪝 🌐 | |
|
Package purpose: Official Node.js SDK for tunr — localhost tunneling made simple.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | litzrsh | — | 🪝 🌐 | |
|
Package purpose: TypeScript-first AI orchestration: provider-neutral LLM calls, tools, agents, durable graph workflows and skills, with a CLI. Built for slow local models.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | ctrlPi | — | 🪝 🌐 | |
|
Package purpose: A tiny, zero-dependency local Markdown browser. Scans a folder tree and renders Markdown.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: One NoxConnect login for every organization, project, and service
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Wire consumer layer: HTTP-up/WebSocket-down client, ConnectionController dual streams with reconnect, and fixture api
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Optional TypeSafe Jev decision capability for the Hydra harness
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local-subprocess implementation of the Hydra harness subprocess seam
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Navid Moazzez | — | 🪝 🌐 | |
|
Package purpose: Apple Podcasts MCP server and CLI for Claude Code, Codex and AI agents. 32 tools for podcast search, chart rank tracking, listener reviews, RSS feed parsing and validation, on-device transcript search, and Apple Podcasts Connect analytics.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Wiolett Industries | — | 🪝 🌐 | |
|
Package purpose: Design canvases and design systems for coding agents: live, animated, clickable screens on an infinite canvas, served locally from a .design folder.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agents forget. Tasks don't. A CLI-first task board for AI agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Let your team's Claude Code agents see each other's work
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Installs shadcn/ui components ported to Hono JSX, with shadcn/ui presets.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Very Risky
|
— | npm | latest | pi-market | — | 🪝 🌐 | |
|
Package purpose: 任务分发平台 Agent 客户端与常驻 daemon
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Vibhor Gautam | — | 🪝 🌐 | |
|
Package purpose: See every server your AI coding agent talks to, live on a 3D globe. Block the ones you didn't allow.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Command-line access to the Ludo AI API for humans and coding agents: game sprites, animations, 3D models, video and audio.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Overlay wizard to configure custom providers and models in Pi
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Wildfire Internet | — | 🪝 🌐 | |
|
Package purpose: CLI for managing REC+ sites (templates over FTPS, content over the API), built for coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Tomáš Grasl | — | 🪝 | |
|
Package purpose: drobek plugin for Claude Code, Codex and Cursor — your agent builds, previews and publishes web apps in your drobek workspace over MCP.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Auto mode for Pi: TypeSafe's Jev decides which permission asks can run without a human
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: drawthe.net: decent looking diagrams for engineers - draw network diagrams from YAML
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | OpenThoth | — | 🪝 | |
|
Package purpose: Local reliability layer for AI coding agents: change impact, targeted verification, and honest reports.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Junji UEHARA | — | 🪝 🌐 | |
|
Package purpose: grep by meaning, across languages. TypeSafe Jev scores every line against a meaning; combine meanings with AND/OR/NOT.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Per-request tier routing on the Laya judge, plus an Auto tier chip in the composer
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Marcos Schulz | — | 🪝 🌐 | |
|
Package purpose: Composes an agent harness into a project from a versioned core, its surfaces, and the project's own layer.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP media gateway for agent-directed MP4, MOV and MP3 analysis
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Weox | — | 🪝 🌐 | |
|
Package purpose: Detects your hardware, installs Ollama if needed, and picks the smartest local LLM your machine can run at max/mid/min resource profiles.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Crovia Trust | — | 🪝 🌐 | |
|
Package purpose: AI-written code has no author. It has causes. Causari measures how many lines from AI-tagged commits are still alive in any git repo and records the prompt, model and files behind every agent edit.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Gumballwotersan | — | 🪝 🌐 | |
|
Package purpose: WhatsApp Group Moderation & Manual Airtime/Megas Management Bot built with Baileys
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Tiago | — | 🪝 🌐 | |
|
Package purpose: The self-hosted CAPTCHA for the modern web.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Onyedika Nnadozie | — | 🪝 🌐 | |
|
Package purpose: Developer CLI for TagHost: Init, Deploy, and Zero-Lock-In Eject
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | AITMERAL Project | — | 🪝 | |
|
Package purpose: AITMERAL — Video Enhancer, Upscaler & RAW Lossless Converter with modern TUI, CLI and local Web UI (npm wrapper for PyPI package)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The Skilly command-line client for discovering and installing agent skills
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | SEAM Sprout contributors | — | 🪝 🌐 | |
|
Package purpose: SEAM Sprout: an embeddable Python agent runtime with a CLI, web console, MCP server, and auditable growth layer.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: facet CLI: scaffold docs + email template sites, add components, generate tree-shaken icon registries, and audit/update your facet setup from the terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Jake Fried | — | 🪝 🌐 | |
|
Package purpose: Compile LilyPond scores in browsers, Node.js, and Bun with WebAssembly
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Next.js deployment adapter: turns `next build` output into a content-addressed deployment bundle and the Functions that serve it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | znlumins | — | 🪝 🌐 | |
|
Package purpose: AI developer companion in your terminal - review diffs, write commit messages, triage errors. Powered by Atria Dawn Preview.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Hufe | — | 🪝 🌐 | |
|
Package purpose: ofd export plugin for canvas-editor (based on @hufe921/jsofd)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Moutaz Darwesh | — | 🪝 🌐 | |
|
Package purpose: OpenCode V2 plugin that shows session turns, steps, and average streaming tok/s inside OpenCode's own composer
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||