Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Unofficial Redpanda Connect compatibility plugin for mq-bridge
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Analyze and optimize React + Vite codebases — plus free website SEO audits (rvo seo) with A–F grades.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | monotykamary | — | 🪝 🌐 | |
|
Package purpose: Token-budgeted repository navigation for agent shells and CI, powered by a cross-language code graph.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Javi | — | 🪝 🌐 | |
|
Package purpose: Native Muse Code plugin: specialist skills, orchestrator commands, and turn-end notifications
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: `parseFlow(source, file, { repoRoot })` parses one `*.test.yaml` definition with the `yaml` document AST and a strict schema for format version 1. `validateFlows` also detects duplicate explicit ids across files. Neither reads environment variables, opens
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Evolving Edge | — | 🪝 🌐 | |
|
Package purpose: Publish a static site to the Evolving Edge CDN — a CLI for any generator, plus an Astro integration.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Personal gh-style CLI for managing deploy configuration and atomically rotating provider secrets.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | ASC-IT | — | 🪝 🌐 | |
|
Package purpose: Cross-version common client contract for Darkmoon OSS (CLI) and Darkmoon Pro (REST). Foundation for the 5 official integrations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: One key for all your tools. Install free apps and call paid tools from one command.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A chat for Main Sequence Agents: the connection to the platform, a session engine, the chat UI, and model provider settings, built on the Command Center SDK.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Mastra server adapter for the Effect v4 HTTP layer
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | soltrac | — | 🪝 🌐 | |
|
Package purpose: OpenCode v2 plugin: official Kimi Code OAuth device flow, kimi-cli request fingerprint, server-driven model discovery and thinking/reasoning_effort variants for Kimi For Coding.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Visual Studio Code Team | — | 🪝 🌐 | |
|
Package purpose: This module helps testing VS Code web extensions locally.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Terminal reference sheets for the CLIs used daily, with short courses and spaced-repetition practice alongside
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Lightweight Node-native Agent runtime with extensible Workers and location-independent graphs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Servidor MCP para almacenar y recuperar el historial de conversaciones de forma persistente mediante PostgreSQL.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Rajdeep Development | — | 🪝 🌐 | |
|
Package purpose: Build agentic tools, AI code editors, and agent harnesses in a few lines. Framework-agnostic TypeScript agent loop with MCP (Model Context Protocol) client, just-in-time SKILL.md skills, permissions, and LLM providers — behind the Smoke Monkey code editor
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Manifest-driven GLB texture optimization, KTX2 compression, and LOD generation pipeline.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Animated React + TypeScript components, copied into your project.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | modern-web | — | 🪝 | |
|
Package purpose: Test runner for web applications
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Black-box HTTP API test harness. Wrapper that downloads the prebuilt vault binary from GitHub Releases.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | birbalo | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | birbalo | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Token counts and LLM cost checks for prompts in your repo: a CI linter, pull-request cost diffs, and an MCP server. Runs locally; prompts are never uploaded.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cloudflare builder for next apps
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A Vue 3 rich text editor with pluggable attachment providers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | amansingh79033-ship-it | — | 🪝 🌐 | |
|
Package purpose: A free, universal principal-engineer critic. Attach it to any project or run it as a background watcher over any in-progress workflow. Reviews 100% of resources — code, packages, and dependencies — across 12 dimensions and emits an evidence-based report w
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Start a project on xcelit and let your work record itself.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Whisper Security | — | 🪝 🌐 | |
|
Package purpose: Give an AI agent a real, routable IPv6 identity, verifiable egress and DNS policy. Keyless: verify any agent's identity and query the infrastructure graph. With a key: register, govern and route agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | matrix37 | — | 🪝 🌐 | |
|
Package purpose: The Ultimate AI-Powered IDE for 10x Engineers (Full Agentic Workflow) • 573 Master Skills • 2977 AI Patterns • 30 Workflows • 17 Shared Core Libraries. One Command to Rule Them All.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Junyoung Kim | — | 🪝 🌐 | |
|
Package purpose: 도안 — screens as files. The agent draws; you say what to change. Lint, states, proposals, a live viewer, MCP.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | NamesMT | — | 🪝 🌐 | |
|
Package purpose: A self-hosted control panel that keeps your home server processes alive — with a UI you can replace.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Typed configuration-driven business components for Element Plus
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Taanviir | — | 🪝 🌐 | |
|
Package purpose: Ranks the source files a coding task needs, from the command line, an MCP server, or a Claude Code hook
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | wei-py | — | 🪝 🌐 | |
|
Package purpose: AI-planned git add + commit for any OpenAI-compatible API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeSafe (Jev) 驱动的 AI 编程工具安全守卫:PreToolUse 拦截 Bash/Write/Edit/MCP,三级风险判定,完全访问模式下强制人工确认
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Nicolas Chaintron | — | 🪝 | |
|
Package purpose: Pi coding agent extension that shifts to the right LLM for each prompt, using a local (Laya) or remote (Jev) decision model to judge task difficulty
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | yangzc | — | 🪝 | |
|
Package purpose: Namespace-based skill manager CLI: each namespace is a git repository; switch namespaces and add / remove / list / fetch skills anywhere.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | siyu77 | — | 🪝 🌐 | |
|
Package purpose: A local websearch aggregation routing service — CLI (start/stop/status + tray) that launches the server and dashboard
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Louis True | — | 🪝 🌐 | |
|
Package purpose: Standard node library for @ifc-lite/flow over the ifc-lite SDK: model reads and writes, tables, viewer, and a sandboxed Script node
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | naldomadeira | — | 🪝 🌐 | |
|
Package purpose: Run the Worker Manager dashboard against Redis, PostgreSQL (BullMQ v6) or pg-boss from the command line.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local CLI + Web console: extract images from markdown/html, upload to PicX-style GitHub image host, rewrite links
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | 钱七 & 老王团队 | — | 🪝 🌐 | |
|
Package purpose: MCP Server for WPS Office - 让AI操控WPS就像老王操控键盘一样丝滑
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Production-grade vibe coding framework and CLI: specs, architecture, agent rules, testing, security, reviews, delivery, and safe lifecycle updates from idea to production.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI-first collaboration protocol for teams of Codex agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: gifsicle wrapper for HarmonyOS - installs via Homebrew
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Anthony Fu | — | 🪝 | |
|
Package purpose: The instant on-demand Atomic CSS engine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | TopMindSpace | — | 🪝 🌐 | |
|
Package purpose: topmind Agent Skills pack — portable markdown skills for capture, organize, write, memory, maintain, loop.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||