Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 50 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local-first semantic code-change gate that reviews Git diffs before push or merge
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | zhouxiao | — | 🪝 🌐 | |
|
Package purpose: React bridge is used to load the routing module in mf, so that the routing module can work properly with the host environment.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Agnes | — | 🪝 🌐 | |
|
Package purpose: DSH QQ Bot Plugin - QQ Bot 第三方登录、文件发送、思考过程展示、分段流式输出、工具调用管理
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | hanric | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | robodin08 | — | 🪝 🌐 | |
|
Package purpose: [](https://www.npmjs.com/package/bruno-openapi-sync)
[](https://www.npmjs.com/package/bruno-openapi-sync)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Rigo-m (https://github.com/Rigo-m) | github.com | 🪝 🌐 | |
|
Package purpose: Serve a directory of markdown as fast, live-reloading HTML pages, with Comark components and twinkleplop highlighting. A modern markserv.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | WakaTime | — | 🪝 🌐 | |
|
Package purpose: Official WakaTime plugin for OpenCode: Track your OpenCode usage with WakaTime
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Your README, as an animated SVG hero. Replays the example output your README shows, or runs it live with real colors. GIF export too.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Jordy van Vorselen | — | 🪝 | |
|
Package purpose: Run Claude Code hooks from .claude/ inside pi
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Jordy van Vorselen | — | 🪝 | |
|
Package purpose: Load Claude Code rules from .claude/rules into pi with hybrid read-before-mutation safety, eager loading, and post-tool compatibility modes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Speech-to-text and text-to-speech for OpenCode. Record voice prompts with whisper-cpp, hear responses via Piper TTS, with LLM normalization through any OpenAI-compatible endpoint.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Mohammed Thameem PK | — | 🪝 🌐 | |
|
Package purpose: FastReport-style report printing and rendering engine. Print templates (.rtpl) with JSON data in any web application.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | AMIT Rawal | — | 🪝 🌐 | |
|
Package purpose: Free AI interview helper: an always-on-top overlay that is hidden from screen shares. Bring your own free Groq key. macOS and Windows.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | macrulez | — | 🪝 🌐 | |
|
Package purpose: A small toolbox of CLI commands that automate routine dev chores — strip comments/console.log, find dead exports, catch case-sensitivity import bugs before Linux CI does
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A warm, role-aware Pi terminal workspace with switchable profiles, animated UI, plan and goal workflows, tasks, change review, model roles, background shells and subagents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Expose a GitHub Copilot account (github.com or *.ghe.com) as an OpenAI/Anthropic-compatible API server. Connect Claude Code to GitHub Enterprise Cloud Copilot.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Sirasit Thitirattanakorn | — | 🪝 🌐 | |
|
Package purpose: Press Markdown into clean pages. Build self-contained HTML, serve it live and save checkboxes back to the file, or open it as a Kanban board. No AI, no tokens.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Oleksandr Ratushnyi | — | 🪝 🌐 | |
|
Package purpose: Isolated multi-account calendar for the terminal on macOS, Linux and Windows
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A UI-first AI dev team that runs inside your Claude Code session, with a local HQ app for chat, board, decisions and dashboard. Compatible with BMad Method v6.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Pavel Ilin | — | 🪝 🌐 | |
|
Package purpose: MCP server for Longtake Studio: lets an AI agent shoot AI video (Seedance, Veo, Gemini Omni, Kling) in a studio that runs on your own API key
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Shared project context for people and coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Very Risky
|
— | pypi | 0.1.8 | — | — | 🪝 | |
|
Package purpose: Static security, supply-chain and quality analysis for Python, JavaScript and SQL
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | caodangdung | — | 🪝 🌐 | |
|
Package purpose: Core verification engine, gates, and evidence store for Verification Harness
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Zero-dependency, Shadow DOM embeddable chat widget for TitanRAG
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Give it HTML + data, get back a PDF as base64 (or write straight to disk for large files). Supports Handlebars strings, .handlebars files, or native JS template functions, custom Handlebars helpers, dynamic headers/footers, automatic image/font waiting fo
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Bin | — | 🪝 🌐 | |
|
Package purpose: Stop paying for your agent's web search. dsh-searchhub is a pluggable search hub for the DeepSeek Harness — swap in mainstream search providers behind ctx.web, with a beautifully polished native Settings card. Ships with Tavily (1,000 free credits/month)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | DANIEL SIMON JR | — | 🪝 🌐 | |
|
Package purpose: One CLI for repository analysis: dependency graphs creation and query with per-export API facts, file chunking, and context compression. TypeScript on Bun, compiled to a single executable.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: DataCloak for OpenCode: automatic prompt cloaking, tool-call blocking, output redaction.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: SparkElf-maintained fork of dsh-quant: AI-native & DSH-native quant toolkit — 59 tools across 6 pluggable domains (data/alpha/ML/risk/execution), one end-to-end PDAT→PET research pipeline. Fork adds A-share-correct annualization, cross-sectional IC, and u
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Buat project aplikasi desktop native C++ (Qt 6) di atas SDK NXC
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Helper wrapper around [`puppeteer-core`](https://www.npmjs.com/package/puppeteer-core) that connects to (or auto-launches) a real, persistent Chrome instance via the DevTools remote-debugging protocol — instead of spinning up a fresh, disposable Chromium
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | DaBiGu | — | 🪝 🌐 | |
|
Package purpose: remote-workspaces: an end-to-end encrypted mesh that gives the DSH Web GUI a remote-workspaces section — other machines' workspaces and conversations, their full GUI proxied onto a local loopback port, and loopback port forwards for debugging remote pages
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local shared memory for coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | AK-103U | — | 🪝 🌐 | |
|
Package purpose: See which provider really serves your requests behind the Cline gateway, and how much of your Cline Pass quota is spent — a DeepSeek Harness plugin and a pi extension in one repository.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | LuizGuiTM | — | 🪝 🌐 | |
|
Package purpose: Octo: a layer on top of superpowers for Claude Code and GitHub Copilot: AI docs first, domain skills, parallel waves, model tiers, Definition of Done with screenshots, session continuity, guardrails and custom MCPs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Priscilla Cournoyer | — | 🪝 🌐 | |
|
Package purpose: A safe, evidence-driven Ruby runtime upgrade agent and local migration dashboard for OpenCode
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mirror Memory MCP — shared agent memory for Cursor, Claude Desktop, and local Devin
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Can Sirin | — | 🪝 🌐 | |
|
Package purpose: Ask Jev which feature and which role every source file in a folder belongs to, judge code-graph collapse pairs, and move files into feature folders with their imports rewritten.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Can Sirin | — | 🪝 🌐 | |
|
Package purpose: Gather evidence for every open GitHub issue, ask Jev whether each is still needed, and write a verdict file a human reviews before anything is closed.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Small Lark group-bot push CLI for agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Bolder headless storefront SDK
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Devin plugin for Claude Code and Codex: AI code reviews, delegated coding tasks, Fusion sidekick workflows, and cloud handoffs to app.devin.ai.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Igect | — | 🪝 🌐 | |
|
Package purpose: Open Nami — terminal-first bulk social media profile downloader for Instagram, TikTok, Facebook & X.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Installer for kijito-tools: copies the context-tracking, session catch-up, and self-clear scripts plus the Kijito skills into ~/.claude.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | dtmirizzi | — | 🪝 🌐 | |
|
Package purpose: Auto-name herdr workspaces using AI summaries based on pi session context
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Hatem Hosny | — | 🪝 🌐 | |
|
Package purpose: Run C# and render Blazor components in the browser, with no server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||