Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Ice-Hazymoon | — | 🪝 🌐 | |
|
Package purpose: Semantic lint rules for the code-review questions a deterministic linter can't express, answered as calibrated yes/no probabilities by TypeSafe's Jev.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DeltaDictum (DD): next-action doctrine for coding agents. Trigger + behavior_delta + evidence, not session memory.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Cross-platform installer for the TUICast driver and reference TUI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Visalan H | — | 🪝 🌐 | |
|
Package purpose: Turn any .jar into a publishable, npx-runnable command — native binary by default, so users need no Java.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | ShadowWalker2014 | — | 🪝 🌐 | |
|
Package purpose: Open-source cloud desktops for AI agents. Each agent gets a Linux desktop with a dev server, tests and a signed-in Chrome that pauses when idle, so your laptop stays fast.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Commodore 64 knowledge base — CLI + MCP server with Qdrant vectors + FalkorDB graph
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | richard@tessli.us richard@tessli.us | tessli.us | 🪝 🌐 | |
|
Package purpose: Stitches multiple overlapping cameras into a single 360 panorama with adjustable seams.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: - `src/`: backend composition (`@gsalgadotoledo/rt-app-framework`). - `core-ts/`, `core-go/`, `core-python/`: language-specific component registries. - `packages/`: adapters, domain modules, observer, service manager and project generator. - `admin/`: sha
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Find product analytics tracking opportunities in your codebase.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local sequence debugger for Node.js services
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 探测设备绘图组件：按仪器画业务图，容器 + setOption，不提供页面壳
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Leon van Zyl | — | 🪝 🌐 | |
|
Package purpose: A smol, zero-config CLI coding agent for local models (Ollama & LM Studio). It just works.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Blazium CLI. Install editors, manage projects, and remote-control a running Blazium editor.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH plugin: browser automation whose click and submit actions are gated by a DSH approval, with the current screen captured as a screenshot the user reviews before the action runs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | onion-party | — | 🪝 🌐 | |
|
Package purpose: Interactive 3D galaxy map of a JS/TS codebase's imports, powered by dependency-cruiser
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Thomas Raz | — | 🪝 🌐 | |
|
Package purpose: Context advisor for coding agents. Watches the session over HTTP hooks, keeps a store of facts, and injects the relevant ones back in when they matter. Starts the daemon itself; nothing else to install.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: One shared working contract for every AI coding assistant you run: Claude Code, Codex, Cursor, opencode, dsh and oh-my-pi (omp).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Extract readable web content, discover relevant pages, locate interactive elements, and watch meaningful changes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Build a real online store from your terminal (or your coding agent) in minutes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Indash | — | 🪝 🌐 | |
|
Package purpose: Indash skills installer: fetches the hub's allowed sources and installs their skills into ~/.claude/skills (or a project) with fixed rules.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The meta-framework CLI for Roblox game development. Orchestrates Rojo, roblox-ts and Flamework, and scaffolds your game architecture.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Shared memory for AI coding sessions. Stop re-explaining what you already figured out.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Jacob Valdez | — | 🪝 🌐 | |
|
Package purpose: Composable cognitive operations and traceable, trainable TypeScript programs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Kalpesh Mahida | — | 🪝 🌐 | |
|
Package purpose: Runsheet's local MCP server. Uploads videos from your own machine straight to YouTube and schedules them, and forwards the rest of Runsheet's YouTube toolkit to Claude, Cursor or any MCP client.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: BRB connects Pi Agent workflows to a real ChatGPT Web conversation as a safe second reasoning workspace. Hand a task out, take the plan back, execute locally.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Vaccinate your codebase: every bug you fix becomes a validated rule that blocks the whole bug class forever, for humans and AI agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Visa — OAuth 2.1 authorization server for the Ream framework: authorization code with PKCE, refresh rotation, revocation and introspection, on a store contract
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Ibrahim Hajjaj | — | 🪝 🌐 | |
|
Package purpose: Fast browser hands for coding agents: the agent names an outcome, Jev (TypeSafe's decision model) picks each click in about 300 ms. MCP server, Claude Code plugin, library and CLI; works in a browser it launches or in your own Chrome or Edge.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | WXK-AI | — | 🪝 🌐 | |
|
Package purpose: Claude Opus 5.5 via Claude Code with the effort level re-decided every step by the TypeSafe Jev System-1 reflex — without breaking the prompt cache
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Floating PR/review status bar for DeepSeek Harness: a shell.overlay bar with a docked detail pane and an exploded review board.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Jarbes Goldoni | — | 🪝 🌐 | |
|
Package purpose: OpenCode provider for Kiro: every model your Kiro subscription offers (GPT-5.6, Claude Opus 5, Sonnet, open-weight), live model list, reuses your kiro-cli login
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Marc Coët | — | 🪝 🌐 | |
|
Package purpose: A low cost, high power website builder you trully own
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Edgar González | — | 🪝 🌐 | |
|
Package purpose: Generate Mermaid architecture diagrams from your infrastructure code, and catch architecture drift.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Barış Yerlikaya | — | 🪝 🌐 | |
|
Package purpose: Crewforth — your engineering crew for Claude Code: agents, skills and tool-level gates, in any stack.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Better IAM contributors | — | 🪝 | |
|
Package purpose: SAML 2.0 single sign-on for Better IAM: tenant-managed service-provider connections for Okta, Entra ID, ADFS, Google Workspace, and more.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Better IAM contributors | — | 🪝 | |
|
Package purpose: SCIM 2.0 provisioning for Better IAM: connection-scoped Users and Groups endpoints with RFC 7644 filters, PATCH, Bulk, and ETags.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | yuda-lyu | — | 🪝 🌐 | |
|
Package purpose: A general-purpose pipeline for fetching, extracting, relating and distilling knowledge.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Leo | — | 🪝 🌐 | |
|
Package purpose: Scaffold a typed full-stack app on Cloudflare with Alchemy, D1, Turborepo, Oxlint, and a themed shadcn/ui package.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Krishna Ahirwar | — | 🪝 🌐 | |
|
Package purpose: Autonomous CI/CD & CLI Scope Creep Auditor & Statutory UCC § 2-209 Legal Change Order Engine
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Suparva | — | 🪝 🌐 | |
|
Package purpose: Natural language browser driver and automation framework using Jev AI (TypeSafe System One) with OpenAI-compatible LLM fallback. Fast, accurate, lightweight.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Theodor Dimitriou | — | 🪝 🌐 | |
|
Package purpose: A TypeScript-native, self-hostable backend (auth, data, API, storage) for Astro/React/Vue frontends — secure by default, content admin included.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Olusanya Emmanuel | — | 🪝 🌐 | |
|
Package purpose: Don't show me the logs, show me what broke.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI for PatchLayer OTA updates
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local voice cloning plugin for TINKER (audio.cpp)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Italo Almeida | — | 🪝 🌐 | |
|
Package purpose: Self-contained System 1 decision engine: multilingual INT8 transformer served by a zero-dependency native binary (or the bundled pure-Rust WASM engine). TypeSafe Jev wire-compatible (/v1/systemone). Runs offline in Node.js, Bun and browsers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | tedburner | — | 🪝 🌐 | |
|
Package purpose: Interactive CLI for Kapibala (kpbl)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Igor Gerasimov | — | 🪝 🌐 | |
|
Package purpose: alteran — coding agent terminal with a built-in phased task tracker
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: AI agent skills and prompts for pi.dev
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||