Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 50 | 35d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: VS Code (from a code-server release) inside DSH: a right-sidebar tab driven by the plugin's own launcher over the in-process VS Code server (lib/launcher.mjs), plus an editor bridge (assets/extensions/dshcs-editor-bridge) that gives the agent what only th
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 35d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 35d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A Pulumi provider for managing Infisical secrets management platform, dynamically bridged from the Terraform Infisical provider with support for projects, secrets, identity management, integrations, and access controls.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 35d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: AWS CloudFormation lexicon for chant — declarative IaC in TypeScript
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 42d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Hardhat plugin for compiling and deploying Solidity contracts to TRON TVM.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 45d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run the local Claude Code CLI as a first-class main conversation inside DeepSeek Harness
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 46d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Union workspaces for the dsh web GUI: merge multiple directories into one session (primary + members), persist them under ~/.dsh/union-workspaces.json, apply a permission preset per union, browse member files in a right-side panel, and manage everything f
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 49d | — | — | — |
Unverified Signal
|
— | npm | latest | marisa-4219 | — | 🪝 🌐 | |
|
Package purpose: Multi-provider quota monitor for DeepSeek Harness: balance type (query + JS parser) and window type (local sliding-window metering), with Command Code support, live spend animation and refresh progress. Sidebar widget + Plugins page.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 50d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: WSL workspace support for DeepSeek Harness: add a WSL workspace from the web GUI and run the whole agent session (bash + file tools) inside the WSL distribution, VS Code Remote-WSL style. No toolchain install inside WSL required. Works on DSH Desktop as w
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 51d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Agent CLI usage dashboard: visualize cost, tokens, and cache hit rates from ccusage data
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 51d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Claude Code in OpenCode — local CLI auth, Agent SDK harness, effort variants, tools/MCP, images & compact.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 57d | — | — | — |
Unverified Signal
|
— | npm | latest | Daniel Bates | — | 🪝 | |
|
Package purpose: Unofficial desktop pet: a pixel-art Claude crab that roams your taskbar, reacts to your real Claude Code rate-limit usage, and shows what Claude's doing right now
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 72d | — | — | — |
Unverified Signal
|
— | npm | latest | dichev | — | 🪝 🌐 | |
|
Package purpose: Claude Discover — a desktop tool to browse your local Claude Code sessions: conversations, token costs, and captured API traffic
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 72d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Product-neutral Claude Code launcher, serializer, and canonical harness driver.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 75d | — | — | — |
Unverified Signal
|
— | npm | latest | EstebanForge | — | 🪝 🌐 | |
|
Package purpose: Token & cost ledger for Pi. Captures every assistant message to a per-day JSONL ledger and exposes a /usage command with by-model, by-period breakdowns (today/day/week/month/year/all) showing both real USD and API-equivalent USD.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 81d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mastra Platform workspace sandbox and filesystem providers
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 85d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local Stripe twin — a faithful, stateful local Stripe API your real `stripe` SDK talks to unmodified, its hosted pages and Stripe.js. Built on @volter/world-core.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 99d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Microsoft Azure providers for Alchemy v2
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 101d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Create a base Vue project from yulin96/base_vite_vue3 and push it to Gitea.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 102d | — | — | — |
Unverified Signal
|
— | npm | latest | Antonio Orizondo | — | 🪝 🌐 | |
|
Package purpose: Use Claude Code inside OpenCode. An OpenCode plugin + model provider that bridges Claude Code over ACP (Agent Client Protocol): run it on your Claude subscription while OpenCode orchestrates the tools, permissions and TUI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 106d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Blake Daniel | — | 🪝 🌐 | |
|
Package purpose: Discord notifications for Claude Code. A zero-dependency skill and CLI that sends messages, file attachments, and rich embeds to a Discord webhook.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 109d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: GCP adapter package for Relayfile
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 111d | — | — | — |
Unverified Signal
|
— | npm | latest | WakaTime | — | 🪝 🌐 | |
|
Package purpose: WakaTime plugin for GitHub Copilot CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 115d | — | — | — |
Unverified Signal
|
— | npm | latest | justin-carper | — | 🪝 🌐 | |
|
Package purpose: opencode provider plugin backed by the official Cursor SDK (@cursor/sdk) — adds a Cursor provider and lists its models
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 117d | — | — | — |
Unverified Signal
|
— | npm | latest | Jongtaek Choi | — | 🪝 🌐 | |
|
Package purpose: Drive Claude Code or Codex from Telegram with persistent sessions, provider switching, and zero runtime dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 129d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK for Together Sandbox
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 139d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Claude Code CLI adapter for the Makaio framework.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 139d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Claude Agent SDK adapter using the three-layer architecture.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 139d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Static client definition and schema library for the Anthropic Claude Code CLI. This package declares the user-facing identity of the `claude` binary within the framework — its stable ID, native tool catalog, capability tags, hook event map, and the full s
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 154d | — | — | — |
Unverified Signal
|
— | npm | latest | Mark | — | 🪝 🌐 | |
|
Package purpose: Ollama coding agent that runs in your terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 160d | — | — | — |
Unverified Signal
|
— | npm | latest | Gabriel Sanhueza | — | 🪝 🌐 | |
|
Package purpose: Pi extension for llama.cpp integration. Supports router, single and legacy models. Supports multiple servers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 166d | — | — | — |
Unverified Signal
|
— | npm | latest | Yi Lu | — | 🪝 🌐 | |
|
Package purpose: Self-improving Claude Code, Codex, and OpenCode plugin that turns corrections into Preferences, Project-specific skills, and Shared skills
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 169d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A workspace convention for Claude Code: sessions, handoffs, and shared context as files in git
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 180d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Behaviorally-tuned system prompts for Claude Code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 186d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Install the Atoll project management skill for Claude Code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 193d | — | — | — |
Unverified Signal
|
— | npm | latest | ginuim | — | 🪝 🌐 | |
|
Package purpose: Skill Base CLI - 命令行工具，用于搜索、安装、更新和发布 AI Agent Skills
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 194d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: OpenCode plugin for Claude Max/Pro subscription via @anthropic-ai/sdk - uses Claude Code OAuth credentials
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 195d | 18 | 5 | ↑0.1/day |
Possible Squatted Stub
|
gemini | npm | 0.0.0 | — | — | ||
|
Package purpose: reserved for koishi official
Matched naming pattern: koishi-gemini-llm
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 195
Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 119 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 195d | 11 | 5 | ↑0.1/day |
Possible Squatted Stub
|
anthropic | npm | 0.0.0 | — | — | ||
|
Package purpose: reserved for koishi official
Matched naming pattern: koishi-anthropic-llm
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 195
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 122 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 195d | 17 | 5 | ↑0.1/day |
Possible Squatted Stub
|
openai | npm | 0.0.0 | — | — | ||
|
Package purpose: reserved for koishi official
Matched naming pattern: koishi-openai-llm
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 195
Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 119 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 326d | 11 | 11 | ↑0.0/day |
Possible Squatted Stub
|
azure | npm | 0.0.1-security.1 | — | — | ||
|
Package purpose: security holding package
Matched naming pattern: internal-azure-boar
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 326
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 446 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 331d | — | — | — |
Unverified Signal
|
— | npm | latest | Signmax AB | — | 🪝 🌐 | |
|
Package purpose: Server and shared utils for React Router 8 projects
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 382d | 6 | 5 | ↑0.0/day |
Possible Squatted Stub
|
ripple | npm | 1.0.0 | — | — | ||
|
Package purpose: Ripple integration providing query utility for Node
Matched naming pattern: node-ripple-query
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 382
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 51 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 446d | — | — | — |
Unverified Signal
|
— | npm | latest | snomiao | — | 🪝 🌐 | |
|
Package purpose: A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 494d | — | — | — |
SUSPICIOUS
|
— | pypi | 0.30.0 | vLLM Team | — | 🪝 | |
|
Package purpose: A high-throughput and memory-efficient inference and serving engine for LLMs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 50 | 1150d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Gilad S. | — | 🪝 🌐 | |
|
Package purpose: Run AI models locally on your machine with node.js bindings for llama.cpp. Enforce a JSON schema on the model output on the generation level
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 1314d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TronLink integration for hub. [Homepage](https://www.tronlink.org/) | [Docs](https://docs.tronlink.org/)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 1314d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MetaMask Wallet integration for hub. [Homepage](https://metamask.io/) | [Docs](https://docs.metamask.io/)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 1681d | — | — | — |
Unverified Signal
|
— | npm | latest | Sergei Dorogin | — | 🪝 🌐 | |
|
Package purpose: Google Ads API Report Fetcher (gaarf)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 50 | 1891d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: rLogin - Ledger EIP-1193 provider
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||