Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 47 | 178d | 22 | 10 | ↑0.1/day |
Possible Squatted Stub
|
cursor | npm | 0.0.1-security | — | — | ||
|
Package purpose: security holding package
Matched naming pattern: node-cursor-ai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 178
Registry downloads: 22/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 424 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 47 | 178d | 15 | 10 | ↑0.1/day |
Possible Squatted Stub
|
amazon | npm | 0.0.1-security | — | — | ||
|
Package purpose: security holding package
Matched naming pattern: node-amazon-q
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 178
Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 422 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 47 | 178d | 14 | 10 | ↑0.1/day |
Possible Squatted Stub
|
mistral | npm | 0.0.1-security | — | — | ||
|
Package purpose: security holding package
Matched naming pattern: node-mistral-ai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 178
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 426 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 47 | 178d | 13 | 10 | ↑0.1/day |
Possible Squatted Stub
|
xai | npm | 0.0.1-security | — | — | ||
|
Package purpose: security holding package
Matched naming pattern: node-xai-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 178
Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 420 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 47 | 179d | 45 | 6 | ↑0.3/day |
Possible Squatted Stub
|
azure | npm | 1.0.12 | — | — | ||
|
Package purpose: **Este pacote foi descontinuado e não deve ser utilizado.**
Matched naming pattern: grupoa-azure-azure
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 179
Registry downloads: 45/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 6 lines, 252 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 47 | 182d | 14 | 8 | ↑0.1/day |
Possible Squatted Stub
|
claude | npm | 0.0.1 | niumasijit | — | ||
|
Package purpose: Dynamic Island overlay for Claude Code — real-time status, permission approval, and terminal jump without leaving your current app
Matched naming pattern: node-claude-island
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 182
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 8 lines, 326 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 2h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Provider-agnostic TypeScript core for text-to-speech and speech-to-text.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 3h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 4h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | NexaOmni | — | 🪝 | |
|
Package purpose: NexaChat integration for n8n: conversations, contacts, WhatsApp, Kanban CRM and AI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 5h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Longzai Intelligence Ledger 工具 CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 6h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: OpenCode plugin that generates images with your ChatGPT Plus/Pro subscription
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 9h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: AwLPay JavaScript/TypeScript SDK — agent wallets for multi-rail x402 stablecoin payments (Base + Solana). 5 minutes, zero crypto background.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 11h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Safe, reversible configuration orchestration for 0G coding tools
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 16h | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | Omar-Thing | — | 🪝 | |
|
Package purpose: Python client for the unofficial TikTok API: profiles, followers, videos, comments, live data and search.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 31h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Longzai Intelligence Crossref Markdown CLI - 属主 works 导出转按日 markdown 数据仓的命令行工具
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | Farasat Ali | — | 🪝 🌐 | |
|
Package purpose: A dependency-free WYSIWYG editor that stores Markdown. Mentions, chips, images and uploads, tables, task lists, LaTeX, code highlighting, custom syntax and plugins. Tailwind-friendly and themeable.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 34h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Read and search the messages of the WeChat client signed in on this machine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 51h | — | — | — |
Unverified Signal
|
— | pypi | 0.1.7 | — | — | 🪝 | |
|
Package purpose: Pairs this PC with a phone account by a QR on a loopback page and sends it two kinds of alerts.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 55h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | VaultSpark Studios LLC | — | 🪝 | |
|
Package purpose: Drop-in OIDC client SDK for Obelisk Gate. Point any project at Obelisk and get login, tokens, refresh, userinfo, and local JWKS verification — no per-project auth engine, no custom crypto.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 60h | — | — | — |
Unverified Signal
|
— | npm | latest | Mantu | — | 🪝 🌐 | |
|
Package purpose: Production-grade AI prompt engineering CLI to inject .cursorrules and system prompts into local projects
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 65h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Paidwen | — | 🪝 | |
|
Package purpose: The Paidwen command line: write paidwen.yml, record a journey, verify a pull request and read its verdict.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 65h | — | — | — |
Unverified Signal
|
— | npm | latest | abu_kalam | — | 🪝 🌐 | |
|
Package purpose: Dependency-free FormValidator (successor of the jQuery Validation plugin), FileValidator and an upload widget
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 66h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Check in to Dot Hotel rooms from your terminal: install them as OpenAI skills or plugins.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CLI for Fulkruma (part of the Forjio commerce suite).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 3d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.1 | — | — | 🪝 | |
|
Package purpose: Plots and diagnostics of labeled xarray output from plasma simulations, such as Struphy
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Ellavox AI | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 3d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Fragments Lab Ltd | — | 🪝 | |
|
Package purpose: Connect AI agents (Claude Code, Codex, Cursor and other MCP clients) to Fragments Studio, so they can build, animate and render in your open Fragments tab.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | htmlhost.co | htmlhost.co | 🪝 🌐 | |
|
Package purpose: MCP server for htmlhost.co — deploy, list, and manage sites from AI coding tools
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Anton Zemlyansky | — | 🪝 🌐 | |
|
Package purpose: Portable fitted tabular preprocessing for wlearn over Tranfi
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Longzai Intelligence 国别追踪数据仓 CLI（bin：lzi-nation）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.5 | — | — | 🪝 | |
|
Package purpose: Robodock 平台命令行 & SDK 工具
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 4d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | — | — | 🪝 | |
|
Package purpose: Security Evaluation and Neural Tracing for Intelligent Language-models
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Joshua Bemenderfer | — | 🪝 | |
|
Package purpose: Local MCP server that lets an AI agent (any MCP client) drive CubbyCAD and Cubby Slicer browser tabs over a paired 127.0.0.1 WebSocket.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 4d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Backend contract 1 for Node.js 22+ and Fastify 5.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TypeScript client for Mason's query API: typed queries, row-level-secure tokens, any Mason deployment including your own.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Cortico World 扩展：通过 stdio JSON-RPC 桥接协议，让用 Python 编写的插件也能以原生 Cortico World 协议（工具 / 事件 / store）接入 agent。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.1 | — | — | 🪝 | |
|
Package purpose: Rehearse and verify restic restores locally, on a schedule, with a diff-proof report.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | 上海焕泽信息技术有限公司 | — | 🪝 | |
|
Package purpose: Vue liquid-glass UI: 66 shadcn-vue groups, configurable typography and theme. Noncommercial custom design; upstream MIT retained.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Devin Thomas | — | 🪝 | |
|
Package purpose: Reproducible game capture with scenarios, replayable sessions, OBS recording, and FFmpeg derivatives.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.1 | — | — | 🪝 | |
|
Package purpose: Enterprise-grade Mobile Telegram Cockpit & Gateway for Google Antigravity (agy)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Oddington command-line client
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Core runtime for the Singapore code editor.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 5d | — | — | — |
Very Risky
|
— | pypi | 0.1.1 | Eliza Halpern, Eryn Lipkowitz | — | 🪝 | |
|
Package purpose: Deterministic execution harness for non-deterministic local LLMs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 5d | — | — | — |
Very Risky
|
— | pypi | 0.1.0 | — | — | 🪝 | |
|
Package purpose: Run Python normally and invoke AI at the current statement
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Hangar CLI — publish static sites to Hangar, activate them in preview and roll back, from a terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Multiplayer for browser games without a server: rooms, entity sync with smoothing, host migration, chat and leaderboards. Zero dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Security scanner for MCP servers and the AI agents that use them: tool poisoning, rug pulls, the lethal trifecta, secrets, supply chain
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TypeScript client for Agent Identity — give an agent its own email address, durable event stream, agent-to-agent tasks, and encrypted secret vault.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||