Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Trace which bundled JavaScript executes in real browser scenarios and why it is loaded
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Gitmoji-first commit conventions and release helpers (Node-API + TypeScript)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | RustaBase contributors | — | 🪝 | |
|
Package purpose: Official JavaScript and TypeScript SDK for RustaBase
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local multi-project web UI for @mychiefmind/ai-maestro capsules.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | TilsonF | — | 🪝 | |
|
Package purpose: Generador headless de wireframes a partir de un DSL YAML declarativo. Exporta SVG, PNG y PDF vectorial. Pensado para ser invocado por agentes IA.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | REBORN LABS | — | 🪝 🌐 | |
|
Package purpose: 산 스킬팩2(실측판)를 한 줄로 설치합니다 — 스킬 파일을 재배포하지 않고 각 제작자의 공식 설치 명령을 대신 실행하고, 깔린 스킬이 실제로 불리게 하는 발동기까지 넣습니다. 결제 후 받은 주문번호가 필요합니다
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Manage and switch between multiple Expo/EAS accounts without touching your normal Expo login
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ff-event: send deploy and CI events to AnalyticsFF from any pipeline.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Wake your local AI agents (Claude Code, Codex, any CLI) the moment Tango has work for them.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Cait Burke | — | 🪝 🌐 | |
|
Package purpose: Drop-in accessibility gate for CI/CD — runs axe-core against live or static pages and fails the build on critical violations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Connect your computer to ChatGPT, Claude and other MCP clients: npx remote-commander@latest remote
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | @pedroanze @pedroanze | — | 🪝 🌐 | |
|
Package purpose: Agent Skill que genera decks de slides HTML animados desde tu design system
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH Desktop WSL execution world: add a WSL workspace and run every tool inside the distribution.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: One command to diagnose your coding-agent setup: context bloat, unused MCP tools, wasted re-reads, plaintext secrets.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: See what your AI agent actually loads — any repo, any stack, no config.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Gagandeep Bhatia | — | 🪝 🌐 | |
|
Package purpose: Runtime audit for dangerous library defaults in Node services: reports the effective configuration of fetch, HTTP servers and connection pools with the exact fix, and optionally fills unset values at boot
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Giacomo Barbalinardo | — | 🪝 🌐 | |
|
Package purpose: Local decision layer for agents and workflows: typed, confidence-scored decisions from two local models.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Xentium | — | 🪝 🌐 | |
|
Package purpose: Install, run, check and update a Xentium site. Start with `npm create xentium`.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Xentium | — | 🪝 🌐 | |
|
Package purpose: Install Xentium: checks your server, sets up the database, and starts the install wizard.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Self-hosted account-to-account verification for Node.js
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Lucas de Souza | — | 🪝 | |
|
Package purpose: Switchyard - The Routing, Cost & Safety Layer for AI Coding Agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Puru Vijayvargia | — | 🪝 🌐 | |
|
Package purpose: A hot-path-proof, scale-proof Builder.io renderer for Svelte 5 — a drop-in for @builder.io/sdk-svelte
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | donbee | — | 🪝 🌐 | |
|
Package purpose: Add percentage to each Cline ask_question / ask_followup_question option using Jev 1.13
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Bekir Efe AYAR | — | 🪝 🌐 | |
|
Package purpose: Pollux: çevrimdışı öncelikli Türkçe CMD asistanı (2500+ kayıt bilgi bankası, sözlük, hesap, uygulama açma, araştırma)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | cra-agent | — | 🪝 | |
|
Package purpose: The x402 exact scheme on Bitcoin Lightning (lnbtc): strict BOLT11, request binding, preimage settlement with durable replay protection.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Stellar agent SDK for Cogladius: key-proven registration, task lifecycle against the Soroban escrow, MPP charge and session payments, fee-sponsored posting, and on-chain reputation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cell Harness CLI: Nova Solutions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Jacob Hammerle | — | 🪝 🌐 | |
|
Package purpose: Turn an EAS Simulator run into a static evidence site: verdict, screenshots, action timeline, CPU and memory charts, and the session recording.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Turn any folder into a queryable knowledge graph
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Sunken Rock | — | 🪝 | |
|
Package purpose: Git merge driver for lockfiles. Two branches each adding a dependency stop conflicting.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A linter for scientific papers written in LaTeX: catches mistakes before you submit to a conference or journal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | dsh-shejing contributors | — | 🪝 🌐 | |
|
Package purpose: Shejing (摄鲸) — a photo workflow plugin for DSH. Checkup, cull, organize, grade, verify, archive and retrospective, driving Lightroom Classic through its own engine and catalog.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The front page for a session you left running: what happened, what broke, and what is waiting on you — computed from the durable event log, never generated by a model.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | RismanRJ | — | 🪝 | |
|
Package purpose: Menu bar tray app for p2p-envsync — create/join rooms, sync, preview env, GitHub backup
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Teach your agent a web page once, then fetch fresh JSON over plain HTTP. CLI and MCP server for saving reusable scraping recipes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Jason Jarrett | — | 🪝 🌐 | |
|
Package purpose: Approval Tests Library - Capturing Human Intelligence
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Machine-checkable gates for a research paper kept in git: ESLint rules over .tex/.md paper sources, plus the skills and hooks that drive each stage.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Add KIKI design system components to your React project as source code you own.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Excalidraw canvas in the DSH right Sidebar: select elements, send them to the Agent as real context, and let the Agent edit the drawing back
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | 冯思韬 | — | 🪝 🌐 | |
|
Package purpose: Turn chat logs into a panel list maintained by a resident agent. Includes a zero npm-dependency core and an optional WeChat/QQ ingestion pipeline. Installs as a DSH profile bundle.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Torjus Sæthre | — | 🪝 🌐 | |
|
Package purpose: Pending promotions, commits missing upstream and flow checks for long-lived branches (development → test → main) across several git repos.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | BanglaScript Contributors | — | 🪝 🌐 | |
|
Package purpose: BanglaScript (BS) - A Banglish programming language that compiles to JavaScript
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Lacspace | — | 🪝 | |
|
Package purpose: Encrypted, signed cookie sessions for any runtime — AES-256-GCM over Web Crypto, secret rotation, rolling and absolute expiry, __Host- cookie rules, a 10-minute OAuth state store and double-submit CSRF tokens. Works with Web Request/Response, Node http, N
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Agentlet Core Team | — | 🪝 🌐 | |
|
Package purpose: Core framework for AI-powered bookmarklet system with extensible plugin architecture
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Trace which bundled JavaScript executes in real browser scenarios and why it is loaded
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Sandeep Panda | — | 🪝 🌐 | |
|
Package purpose: Unofficial fork of passmark (bug0inc/passmark) with OpenAI-compatible endpoint support.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | SystemWorks BV | — | 🪝 🌐 | |
|
Package purpose: Set up, build and publish a Native Federation club module to a tabbr club.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Justin Tay | — | 🪝 | |
|
Package purpose: CDK construct for a JWKS stored in Secrets Manager and rotated by a Lambda
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: pi-repl's shared tmux REPLs (Python, Julia, R and more) for Claude Code, Codex, OpenCode and other agents, over MCP and a CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||