Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 50 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: VibeGraph from npm: the visualisation (vibegraph-knowledge view) and the commands that crystallise what VibeGraph derives from a codebase (thread contracts, stack facts, a dependency-ordered plan) and what its operators stated (constraints with their reas
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Simone Primarosa | — | 🪝 🌐 | |
|
Package purpose: A hardened wrapper around Google's official Antigravity ACP binary.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | 传康Kk | — | 🪝 🌐 | |
|
Package purpose: OpenCode Zen session auto-refresh and free-tier model catalog synchronization for the Pi coding agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Andrews Mintah | — | 🪝 🌐 | |
|
Package purpose: Verity browser extension (Manifest V3) - client-side media authenticity inspector with C2PA and WASM sandbox
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | William Teig | — | 🪝 🌐 | |
|
Package purpose: The orbytes component lab and pin board — an Astrobook shell for Astro sites (live/used-by pills, a viewport configurator, responsive and cull marks, a parameters panel) plus a dev-only click-to-ticket feedback board at /pin.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The invariant command, run by a provider in their own CI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | ChamberZ40 | — | 🪝 🌐 | |
|
Package purpose: Bridge local AI coding agents (Claude Code, Codex, Cursor, GitHub Copilot, any ACP agent) to messaging platforms (Feishu/Lark, WeChat Work, Weixin)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH Web GUI 数据库管理面板：侧边栏入口 + 独立面板，统一管理 SQLite / MySQL / Redis（数据源配置、实时连接池、SQL 浏览器、Redis 键浏览器），并提供受审批保护的 agent 工具。 | Database management panel for the DeepSeek Harness Web GUI: a sidebar entry and a dedicated panel managing SQLite / MySQL / Redis (source co
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Nathanael Braun | — | 🪝 🌐 | |
|
Package purpose: Read a decision out of the next-token distribution instead of making a model write it: one chat/completions request, max_tokens 1, logprobs on, a verdict AND a calibrated-ish probability. Server-agnostic, zero runtime dependency. Speaks the Jev /v1/system
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH 环境自检与端口大屏：零外部依赖洞察系统架构、CLI 工具链（含广义 AI CLI）、DSH 插件生态、模型与环境凭据就绪状态、活跃监听端口与硬件概况（屏幕/GPU/显示器），支持端口安全释放与一键复制完整诊断。零联网、零私有凭钥明文泄露。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Jonny Burger | — | 🪝 🌐 | |
|
Package purpose: Compile virtual Remotion projects in the browser
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Thin Node CLI for Ariax REST with local structure preparation and direct object-storage uploads.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Boiser | — | 🪝 🌐 | |
|
Package purpose: 用多个 WorkBuddy 账号（网页登录或本机桌面端）组成两个独立账号池（国内版 / 国际版）：加权轮换、会话粘性、冷却熔断、换号重试，并每天自动完成成长任务。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Sub2API Codex Setup
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ChatCode CLI plugin for ChatCode models, shared account access, and operations reporting
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Kees Verruijt | — | 🪝 🌐 | |
|
Package purpose: Mastervolt MasterBus for Signal K: publish battery, charger and inverter values, edit the mapping in the browser, and switch devices from Signal K
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Install openly-licensed fonts. TypeScript port of the Fontist gem, driven by fontist formulas.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Install Pallas local advertising analysis for Codex and Claude Code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cross-platform installer for the miyoushe-cli native binary
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | flun | — | 🪝 🌐 | |
|
Package purpose: Node.js for Mobile Apps native addon build tool (flun fork)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 网文写作工作台可选嵌入提供方
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Yuri Teixeira | — | 🪝 🌐 | |
|
Package purpose: tmux dashboard for Pi coding sessions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Vatio | — | 🪝 🌐 | |
|
Package purpose: Vatio CLI — deploy and manage Vatio agent workspaces
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Chris Gmyr | — | 🪝 🌐 | |
|
Package purpose: Run a crew of Claude Code and Codex workers from one lead session: visible tmux panes, exact state from hooks, one local SQLite store.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH plugin: connect WeChat (official iLink/ClawBot) to DeepSeek Harness — settings page with live bridge status, QR device pairing, in-WeChat tool approvals, proactive push, and the bundled bridge + keeper kernel.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | CrisD3v | — | 🪝 | |
|
Package purpose: Core decorators and runtime for Aetherion Framework
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Geekbits Org | — | 🪝 🌐 | |
|
Package purpose: The shadcn/ui for Ghost CMS themes - component distribution system
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Muke Johnbaptist | — | 🪝 🌐 | |
|
Package purpose: The flare command-line tool: create, generate, migrate, and deploy Flare apps
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | blockblock2 | — | 🪝 🌐 | |
|
Package purpose: Save a Roblox place into a Git/GitHub repo as readable .luau files, and build a place file back out of them.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Chris Gmyr | — | 🪝 🌐 | |
|
Package purpose: A manual-testing queue for agent crews and one human tester.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Joao Paulo Furtado | — | 🪝 🌐 | |
|
Package purpose: Cost-aware task compiler and coding runtime built on Pi
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The kai command line for @kitn.ai/ui: scaffold a project or add a block to one, diagnose its wiring, and run the construct dev/eject/compile tooling.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local typed decisions (choice / score / noul) over sentence embeddings — a ruvector-powered, self-optimizing alternative to typesafe.ai's System One API. Native (napi-rs) with a WASM fallback; no network, no per-token cost.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: PULSE — Persistent Unified Layer for Software Engineering. Shared context and control for AI coding agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Standalone Cohesivity MCP server. Provisions tenants, resources, and project bootstrapping over stdio. Run with `npx -y @cohesivity/mcp`.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Matheus Gabriel Valenga | — | 🪝 🌐 | |
|
Package purpose: CLI to scaffold Vite + React + TypeScript + TailwindCSS projects, with optional routing, TanStack Query and shadcn/ui.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | mhimt | — | 🪝 🌐 | |
|
Package purpose: Safety-first MCP server for Adobe Illustrator
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Attacks a copy of your Supabase database and tells you in plain English what got in.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Live2D 桌宠插件：为 DSH Web GUI 挂一只可拖动、会跟随鼠标、能换动作与表情的 Live2D 宠物。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | L-ubu | — | 🪝 🌐 | |
|
Package purpose: Know what Cursor is costing you. Per model, per day, per month — from your own dashboard, no admin API key needed.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | jingzhao-l | — | 🪝 | |
|
Package purpose: GlassPane MCP stdio shell: JSON-RPC 2.0 over stdio bridging an AI agent to the glasspane engine daemon
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Steven Velozo | — | 🪝 🌐 | |
|
Package purpose: The plansheet worker-node client: log in to your plansheet, get a fully configured connection to the Ultravisor hub, and run a native or dockerized runner.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Boss | — | 🪝 | |
|
Package purpose: Universal AI Agent Skills: Docker 3-Tier Workflow, Enterprise Production Architecture (NGINX, Cloudflare, Log Rotation), Git Team Workflow, AI API Gateway (9Router & LLM Routing), Oracle External Brain Lifecycle (~/ψ Vault), and Maymint Companion Soul & M
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Grafana Cloud's interactive setup wizard, powered by Grafana Assistant.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | telsoncc | — | 🪝 🌐 | |
|
Package purpose: Command Code API provider for opencode — use Claude, GPT, Gemini, DeepSeek, Qwen, Kimi, GLM, MiniMax, and Step models via Command Code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: OpenDesign as an MCP server — the same skill/design-system/artifact tools the VS Code extension exposes, usable from any MCP-capable coding agent (Claude Code, Codex, and others).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DeepBlend Host service: the blenderStudio business facade over the BlenderRuntime seam.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Nord theme, selectable interface and code font stacks, a settings row, and a DeepSeek balance readout with a detail panel for the dsh Web GUI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Architecture and security audits with Jev screening, continuous linting, and deep agent review.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | Guksu | — | 🪝 🌐 | |
|
Package purpose: Claude Code·Codex의 팀 설정 관리 — 기존 설정을 보존하는 설치·업데이트, 보호 훅과 선택적 검증 도구
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||