🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
50 2290d — — —
Unverified Signal
— npm latest Max Rohde — 🪝
Package purpose: Utilities to work with AWS infrastructure via the cli.
Static code signals:
  • CREDENTIAL_PATH_HARVESTING: 'AWS Credentials (~/.aws/credentials)' found in package/dist/src/awsUserUtils.js:123 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/src/awsUserUtils.js:17 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/dist/src/awsUserUtils.js:18 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
50 2363d — — —
SUSPICIOUS
— npm latest http://Zengenti.com zengenti.com 🪝 🌐
Package purpose: Turbocharge your React web apps with Contensis. This package handles all dependencies for creating full featured web apps in React with Contensis and Site View. Routing is driven by Site View, Redux is used for global state management and server-side rend
Static code signals:
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/esm/App-Bvs7Km54.js:974 (+10 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/cjs/ChangePassword.container-C4Du3Wb1.js:91 (+7 more occurrence(s) elsewhere)
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/cjs/contensis-react-base.js:21
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'process.binding/mainModule' found in package/cjs/sagas-BCy9u6zA.js:3371 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
50 2553d — — —
SUSPICIOUS
— npm latest hoonoh — 🪝
Package purpose: CLI utility to list current global AWS EC2 Spot Instance prices.
Static code signals:
  • CREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in package/dist/cli.js:12 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cli.js:1 (+1 more occurrence(s) elsewhere)
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/dist/cli.js:242 (+1 more occurrence(s) elsewhere)
  • SYSTEM_PERSISTENCE_TAMPERING: 'Shell Profile Backdoor Injection' found in package/dist/cli.js:97
  • ANTI_ANALYSIS_EVASION: 'CI/CD & Sandbox Environment Detection' found in package/dist/cli.js:58

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
50 2803d 287 730 ↑0.1/day
SUSPICIOUS
csmlog pypi 0.28.0 csm10495 csm10495@gmail.com gmail.com 🪝
Package purpose: # csmlog [![Build Status](https://github.com/csm10495/csmlog/workflows/Release/badge.svg)](https://github.com/csm10495/csmlog/actions) Package to setup a python logger the way I like to use it. - By default logs to files per logger and one for the overall project - Sets a master logger with sub l
Claimed homepage: http://github.com/csm10495/csmlog
Matched naming pattern: python-csmlog-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2803
Code-only verdict: Very Risky (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 287/month, 44/week (MODERATE_USAGE)
Codebase size: 730 lines, 32.1 kB across 6 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 2792 days ago (predates modern AI hallucination waves).
  • HIGHSOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in csmlog-0.28.0/csmlog/__init__.py:186
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in csmlog-0.28.0/csmlog/system_call.py:32
  • CRITICALINSTALL_TIME_EXECUTION: 'eval' executed at top-level in csmlog-0.28.0/setup.py:11
  • HIGHSOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in csmlog-0.28.0/setup.py:11
  • INFOSubstantial functional codebase (730 LOC across 6 file(s)).
  • INFOModerate community usage with 287 monthly downloads.
Static code signals:
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in csmlog-0.28.0/csmlog/__init__.py:186
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in csmlog-0.28.0/csmlog/system_call.py:32
  • INSTALL_TIME_EXECUTION: 'eval' executed at top-level in csmlog-0.28.0/setup.py:11
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in csmlog-0.28.0/setup.py:11

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
50 3176d — — —
Unverified Signal
— npm latest — — 🪝
Package purpose: Theia - Search in workspace
Static code signals:
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/lib/node/ripgrep-search-in-workspace-server.js:30 (+1 more occurrence(s) elsewhere)
  • SUSPICIOUS_OBFUSCATION: 'Layered Base64 and Decompress Pipeline' found in package/lib/node/ripgrep-search-in-workspace-server.js:30 (+1 more occurrence(s) elsewhere)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
50 3690d — — —
Unverified Signal
— npm latest Matt Sergeant — 🪝 🌐
Package purpose: Simple and reliable bridge between Node.js and PhantomJS / SlimerJS
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/bridge.js:186
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/node-phantom-simple.js:8
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/node-phantom-simple.js:7
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/node-phantom-simple.js:14

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
50 3767d — — —
Unverified Signal
— npm latest Google API Authors — 🪝 🌐
Package purpose: Google API Extensions
Static code signals:
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/build/src/fallbackServiceStub.js:67
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/build/src/fallbackServiceStub.js:91
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/build/src/gax.js:584 (+2 more occurrence(s) elsewhere)
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/build/src/grpc.js:56

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
50 4006d — — —
Unverified Signal
— npm latest Authress Developers — 🪝 🌐
Package purpose: AWS Architect is a node based tool to configure and deploy AWS-based microservices.
Static code signals:
  • SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:5
  • SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/lib/server.js:232
  • SOURCE_CODE_NETWORK_CALL: 'require('http(s)')' found in package/lib/server.js:5

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 44d 11 11 ↑0.2/day
Possible Squatted Stub
claude npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: polymarket-claude-code
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 44
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 450 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'polymarket-claude-code' matches AI hallucination template [polymarket] + [claude] + [code].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (37 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 450 bytes).
  • INFOPackage affiliated with trusted vendor 'claude' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 44d 1 11 ↑0.0/day
Possible Squatted Stub
ethereum npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-ethereum-validator
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 44
Registry downloads: 1/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 442 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ethereum-validator' matches AI hallucination template [node] + [ethereum] + [validator].
  • HIGHClaims critical enterprise brand identity ('ETHEREUM').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (31 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes).
  • INFOPackage affiliated with trusted vendor 'ethereum' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 44d 20 11 ↑0.5/day
Possible Squatted Stub
supabase npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: mcp-supabase-supabase
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 44
Registry downloads: 20/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 444 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'mcp-server-supabase' matches AI hallucination template [mcp] + [supabase] + [supabase].
  • HIGHClaims critical enterprise brand identity ('SUPABASE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (38 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 444 bytes).
  • INFOPackage affiliated with trusted vendor 'supabase' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 45d 49 14 ↑1.1/day
Possible Squatted Stub
deepseek npm 0.0.1 — —
Package purpose: Reserved package name for the DeepSeek Harness TUI project (dsh-tui). The real package will be published here when development completes.
Matched naming pattern: node-deepseek-terminal
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 45
Registry downloads: 49/month, 12/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 583 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'deepseek-terminal' matches AI hallucination template [node] + [deepseek] + [terminal].
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (31 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (14 LOC, 2 file(s), 583 bytes).
  • INFOPackage affiliated with trusted vendor 'deepseek' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 45d 35 14 ↑0.8/day
Possible Squatted Stub
deepseek npm 0.0.1 — —
Package purpose: Reserved package name for the DeepSeek Harness TUI project (dsh-tui). The real package will be published here when development completes.
Matched naming pattern: node-deepseek-term
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 45
Registry downloads: 35/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 575 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'deepseek-term' matches AI hallucination template [node] + [deepseek] + [term].
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (39 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (14 LOC, 2 file(s), 575 bytes).
  • INFOPackage affiliated with trusted vendor 'deepseek' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 48d 24 10 ↑0.5/day
Possible Squatted Stub
anthropic npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-anthropic-setup
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 48
Registry downloads: 24/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 436 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'anthropic-setup' matches AI hallucination template [node] + [anthropic] + [setup].
  • HIGHClaims critical enterprise brand identity ('ANTHROPIC').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (43 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes).
  • INFOPackage affiliated with trusted vendor 'anthropic' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 48d 20 5 ↑0.4/day
Possible Squatted Stub
weaviate npm 0.0.1-probe.0 — —
Package purpose: name-screening probe (will be deprecate+removed)
Matched naming pattern: node-weaviate-bonklm-weaviate-client
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 48
Registry downloads: 20/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 177 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name '@blackunicorn/bonklm-weaviate-client' matches AI hallucination template [node] + [weaviate] + [bonklm-weaviate-client].
  • HIGHClaims critical enterprise brand identity ('WEAVIATE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (40 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (5 LOC, 2 file(s), 177 bytes).
  • INFOPackage affiliated with trusted vendor 'weaviate' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 48d 45 5 ↑0.9/day
Possible Squatted Stub
qdrant npm 0.0.1-probe.0 — —
Package purpose: name-screening probe (will be deprecate+removed)
Matched naming pattern: node-qdrant-bonklm-qdrant-client
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 48
Registry downloads: 45/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 175 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name '@blackunicorn/bonklm-qdrant-client' matches AI hallucination template [node] + [qdrant] + [bonklm-qdrant-client].
  • HIGHClaims critical enterprise brand identity ('QDRANT').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (47 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (5 LOC, 2 file(s), 175 bytes).
  • INFOPackage affiliated with trusted vendor 'qdrant' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 48d 45 5 ↑0.9/day
Possible Squatted Stub
qdrant npm 0.0.1-probe.0 — —
Package purpose: name-screening probe (will be deprecate+removed)
Matched naming pattern: node-qdrant-bonklm-qdrant-guard
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 48
Registry downloads: 45/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 158 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name '@blackunicorn/bonklm-qdrant-guard' matches AI hallucination template [node] + [qdrant] + [bonklm-qdrant-guard].
  • HIGHClaims critical enterprise brand identity ('QDRANT').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (34 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (5 LOC, 2 file(s), 158 bytes).
  • INFOPackage affiliated with trusted vendor 'qdrant' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 64d 31 10 ↑0.5/day
Possible Squatted Stub
eth npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-eth-bridge
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 64
Registry downloads: 31/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 426 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'eth-bridge' matches AI hallucination template [node] + [eth] + [bridge].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (56 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 426 bytes).
  • INFOPackage affiliated with trusted vendor 'eth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 65d 40 10 ↑0.6/day
Possible Squatted Stub
ethers npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-ethers-v6
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 65
Registry downloads: 40/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 424 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ethers-v6' matches AI hallucination template [node] + [ethers] + [v6].
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (53 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 424 bytes).
  • INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 72d 14 10 ↑0.2/day
Possible Squatted Stub
eth npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-eth-codergen
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 72
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 430 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'eth-codergen' matches AI hallucination template [node] + [eth] + [codergen].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (66 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 430 bytes).
  • INFOPackage affiliated with trusted vendor 'eth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 73d 10 10 ↑0.1/day
Possible Squatted Stub
ethers npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-ethers-packge
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 73
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 432 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ethers-packge' matches AI hallucination template [node] + [ethers] + [packge].
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 432 bytes).
  • INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 83d 17 10 ↑0.2/day
Possible Squatted Stub
openai npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-openai-apps
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 83
Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 428 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'openai-apps' matches AI hallucination template [node] + [openai] + [apps].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (60 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 428 bytes).
  • INFOPackage affiliated with trusted vendor 'openai' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 86d 30 10 ↑0.3/day
Possible Squatted Stub
workspace npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-workspace-lint
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 86
Registry downloads: 30/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 434 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'workspace-lint' matches AI hallucination template [node] + [workspace] + [lint].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (64 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 434 bytes).
  • INFOPackage affiliated with trusted vendor 'workspace' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 88d 17 10 ↑0.2/day
Possible Squatted Stub
ollama npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-ollama-helpers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 88
Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 434 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ollama-helpers' matches AI hallucination template [node] + [ollama] + [helpers].
  • HIGHClaims critical enterprise brand identity ('OLLAMA').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (66 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 434 bytes).
  • INFOPackage affiliated with trusted vendor 'ollama' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 88d 15 11 ↑0.2/day
Possible Squatted Stub
anthropic npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-anthropic-toolkit
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 88
Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 440 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'anthropic-toolkit' matches AI hallucination template [node] + [anthropic] + [toolkit].
  • HIGHClaims critical enterprise brand identity ('ANTHROPIC').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (81 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 440 bytes).
  • INFOPackage affiliated with trusted vendor 'anthropic' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 89d 14 10 ↑0.2/day
Possible Squatted Stub
eth npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-eth-tick
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 89
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 422 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'eth-tick' matches AI hallucination template [node] + [eth] + [tick].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (63 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 422 bytes).
  • INFOPackage affiliated with trusted vendor 'eth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 89d 17 10 ↑0.2/day
Possible Squatted Stub
eth npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-eth-logger
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 89
Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 426 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'eth-logger' matches AI hallucination template [node] + [eth] + [logger].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (76 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 426 bytes).
  • INFOPackage affiliated with trusted vendor 'eth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 103d 12 10 ↑0.1/day
Possible Squatted Stub
claude npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-claude-free
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 103
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 428 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'free-claude' matches AI hallucination template [node] + [claude] + [free].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (83 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 428 bytes).
  • INFOPackage affiliated with trusted vendor 'claude' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 103d 16 11 ↑0.2/day
Possible Squatted Stub
anthropic npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: free-anthropic-claude
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 103
Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 448 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'free-anthropic-claude' matches AI hallucination template [free] + [anthropic] + [claude].
  • HIGHClaims critical enterprise brand identity ('ANTHROPIC').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (78 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes).
  • INFOPackage affiliated with trusted vendor 'anthropic' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 107d 12 10 ↑0.1/day
Possible Squatted Stub
eth npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-eth-util
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 107
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 422 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'eth-util' matches AI hallucination template [node] + [eth] + [util].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (84 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 422 bytes).
  • INFOPackage affiliated with trusted vendor 'eth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 113d 17 11 ↑0.2/day
Possible Squatted Stub
web3 npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: chai-web3-testkit
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 113
Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 440 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'chai-web3-testkit' matches AI hallucination template [chai] + [web3] + [testkit].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (94 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 440 bytes).
  • INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 115d 14 11 ↑0.1/day
Possible Squatted Stub
polygon npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: martinez-polygon-clipping
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 115
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 466 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'martinez-polygon-clipping-tony' matches AI hallucination template [martinez] + [polygon] + [clipping].
  • HIGHClaims critical enterprise brand identity ('POLYGON').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (111 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 466 bytes).
  • INFOPackage affiliated with trusted vendor 'polygon' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 115d 15 10 ↑0.1/day
Possible Squatted Stub
ethers npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-ethers-wordlist
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 115
Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 436 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ethers-wordlist' matches AI hallucination template [node] + [ethers] + [wordlist].
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (93 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes).
  • INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 116d 11 10 ↑0.1/day
Possible Squatted Stub
ethers npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-ethers-jss
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 116
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 426 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ethers-jss' matches AI hallucination template [node] + [ethers] + [jss].
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (98 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 426 bytes).
  • INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 124d 12 11 ↑0.1/day
Possible Squatted Stub
google npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: peertube-google-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 124
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 476 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'peertube-plugin-google-analytics-js' matches AI hallucination template [peertube] + [google] + [google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (100 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 476 bytes).
  • INFOPackage affiliated with trusted vendor 'google' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 130d 10 10 ↑0.1/day
Possible Squatted Stub
ethers npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-ethers-web
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 130
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 426 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ethers-web' matches AI hallucination template [node] + [ethers] + [web].
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (107 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 426 bytes).
  • INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 130d 10 10 ↑0.1/day
Possible Squatted Stub
ethers npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-ethers-hdnode
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 130
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 432 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ethers-hdnode' matches AI hallucination template [node] + [ethers] + [hdnode].
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (108 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 432 bytes).
  • INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 130d 10 10 ↑0.1/day
Possible Squatted Stub
ethers npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-ethers-hash
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 130
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 428 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ethers-hash' matches AI hallucination template [node] + [ethers] + [hash].
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (118 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 428 bytes).
  • INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 130d 12 10 ↑0.1/day
Possible Squatted Stub
ethers npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-ethers-errors
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 130
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 432 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ethers-errors' matches AI hallucination template [node] + [ethers] + [errors].
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (113 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 432 bytes).
  • INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 130d 10 10 ↑0.1/day
Possible Squatted Stub
ethers npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-ethers-contract
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 130
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 436 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ethers-contract' matches AI hallucination template [node] + [ethers] + [contract].
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (120 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes).
  • INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 130d 6 10 ↑0.0/day
Possible Squatted Stub
ethers npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-ethers-address
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 130
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 434 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ethers-address' matches AI hallucination template [node] + [ethers] + [address].
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (115 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 434 bytes).
  • INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 130d 9 10 ↑0.1/day
Possible Squatted Stub
web3 npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-web3-prices
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 130
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 428 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'web3-prices' matches AI hallucination template [node] + [web3] + [prices].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (119 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 428 bytes).
  • INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 132d 18 11 ↑0.1/day
Possible Squatted Stub
claude npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: explorhub-claude-bridge
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 132
Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 452 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'explorhub-claude-bridge' matches AI hallucination template [explorhub] + [claude] + [bridge].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (118 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 452 bytes).
  • INFOPackage affiliated with trusted vendor 'claude' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 142d 15 11 ↑0.1/day
Possible Squatted Stub
gcp npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: apple-gcp-gcp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 142
Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 446 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'apple-infra-gcp-leak' matches AI hallucination template [apple] + [gcp] + [gcp].
  • HIGHClaims critical enterprise brand identity ('GCP').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (138 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 446 bytes).
  • INFOPackage affiliated with trusted vendor 'gcp' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 142d 40 10 ↑0.3/day
Possible Squatted Stub
sol npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-sol-coverage
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 142
Registry downloads: 40/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 430 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'sol-coverage' matches AI hallucination template [node] + [sol] + [coverage].
  • HIGHClaims critical enterprise brand identity ('SOL').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (138 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 430 bytes).
  • INFOPackage affiliated with trusted vendor 'sol' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 178d 17 10 ↑0.1/day
Possible Squatted Stub
groq npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-groq-ai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 178
Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 420 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'groq-ai' matches AI hallucination template [node] + [groq] + [ai].
  • HIGHClaims critical enterprise brand identity ('GROQ').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (173 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 420 bytes).
  • INFOPackage affiliated with trusted vendor 'groq' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 178d 41 10 ↑0.2/day
Possible Squatted Stub
huggingface npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-huggingface-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 178
Registry downloads: 41/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 436 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'huggingface-cli' matches AI hallucination template [node] + [huggingface] + [cli].
  • HIGHClaims critical enterprise brand identity ('HUGGINGFACE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (168 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes).
  • INFOPackage affiliated with trusted vendor 'huggingface' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 178d 10 10 ↑0.1/day
Possible Squatted Stub
midjourney npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-midjourney-ai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 178
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 432 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'midjourney-ai' matches AI hallucination template [node] + [midjourney] + [ai].
  • HIGHClaims critical enterprise brand identity ('MIDJOURNEY').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (158 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 432 bytes).
  • INFOPackage affiliated with trusted vendor 'midjourney' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 178d 22 10 ↑0.1/day
Possible Squatted Stub
cursor npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-cursor-ai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 178
Registry downloads: 22/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 424 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'cursor-ai' matches AI hallucination template [node] + [cursor] + [ai].
  • HIGHClaims critical enterprise brand identity ('CURSOR').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (153 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 424 bytes).
  • INFOPackage affiliated with trusted vendor 'cursor' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
47 178d 15 10 ↑0.1/day
Possible Squatted Stub
amazon npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-amazon-q
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 178
Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 422 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'amazon-q' matches AI hallucination template [node] + [amazon] + [q].
  • HIGHClaims critical enterprise brand identity ('AMAZON').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (153 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 422 bytes).
  • INFOPackage affiliated with trusted vendor 'amazon' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (95 -> 47) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
« Prev Next »
LINK COPIED TO CLIPBOARD