Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 45 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: React location picker on MapLibre (Persian RTL, mobile-first, vector tiles)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 6d | — | — | — |
🐛 Potential Cross-Ecosystem Worm
Very Risky
|
— | pypi | 0.1.1 | — | — | 🪝 🐛 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: The googleoauth twin (Protocol 3).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Tade Strehk | — | 🪝 🌐 | |
|
Package purpose: OpenID Connect provider for local development: users and claims in one YAML file, a login page to pick them, and a Vite plugin that makes it work behind --host.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 6d | — | — | — |
Very Risky
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: tiny folder watchdog that spots ransomware-ish behavior
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Framework-independent knowledge source, document, and loader contracts for the AI Copilot SDK - the ingestion boundary RAG builds on.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP connector for the Taesty Mac app. Run with npx -y taesty-mcp.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | — | — | 🪝 | |
|
Package purpose: Plan in ChatGPT, build with your local agents: a safe MCP bridge to your workspace and Claude Code, Codex, or Pi
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | AID Edge Inc. | — | 🪝 | |
|
Package purpose: Local-first workflow runner for Velorona: validated link workflows, per-link Path Clearance runs, crash-safe run history, comparison, evidence export, and a scheduler-friendly CLI. Shared by Velorona Web and the Velorona QGIS plugin.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | Coreho | — | 🪝 | |
|
Package purpose: Strip tracking junk off any link you copy — the same real URL, trimmed.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Official Git/gh companion for AGS host setup, task identity and cross-tool association.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Drop-in Vue 3 chat and video-call UI, driven by your own backend handlers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Headless CLI for Polaris Television canvas automation
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.0.9 | IoTSploit Team | — | 🪝 | |
|
Package purpose: Bounded privileged-operation client for IoTSploit
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Pinflow contributors | — | 🪝 🌐 | |
|
Package purpose: Add a comment layer to any web page, then hand the export to your coding agent. One script tag, zero dependencies, and reviewers don't install anything.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A Node In Layers Package that wraps the Deepgram SDK making it available to node in layers applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: BaocPhotoV24 update assets (backup distribution mirror)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 9d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.3 | — | — | 🪝 | |
|
Package purpose: Fit elliptical isophotes to astronomical FITS images (ELLIPROF)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: P31 CANON — the agent-native design system. Tokens + contracts + CSS, generated exports only; a family-first, tamper-evident design canon (Apache-2.0).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Reference tooling for the AI Evidence Manifest: a static /ai.json file linking website claims to the first-party evidence supporting them.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 9d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | Marco D'Aleo | — | 🪝 | |
|
Package purpose: Inspect and manage Linux scheduled jobs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Rinas | — | 🪝 | |
|
Package purpose: Protect application secrets from AI coding agents with encrypted-at-rest storage and runtime injection
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 9d | — | — | — |
Unverified Signal
|
— | pypi | 1.0.1 | — | — | 🪝 | |
|
Package purpose: Official Python SDK for Nano Empire x402 Clearing House and Behavioral Attestations
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 10d | — | — | — |
SUSPICIOUS
|
— | pypi | 0.1.1 | JKyung Agent Bazaar | — | 🪝 | |
|
Package purpose: Official Python SDK & AI Agent Tool for Korea High-Value Industrial Intelligence & B2A Data Bazaar (14M+ Records)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 10d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.8 | — | — | 🪝 | |
|
Package purpose: Fast, ATS-focused resume tailoring and PDF generation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Run Castle agents in Node.js: sessions, persistence, approval, workspaces, MCP and child agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 10d | — | — | — |
Very Risky
|
— | pypi | 0.23.5 | — | — | 🪝 | |
|
Package purpose: VIAME: Video and Image Analytics for Marine Environments
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Technographics — what a website is built with, read from the page itself.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Durable, verifiable runtime for visible Pi workers
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 10d | — | — | — |
Unverified Signal
|
— | pypi | 1.0.997 | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Longzai Intelligence 变更日志工具 CLI（lzi-changelog）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Longzai Intelligence README 门禁 CLI（lzi-readme）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: React location picker on MapLibre (Persian RTL, mobile-first, vector tiles)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | proxy | — | 🪝 🌐 | |
|
Package purpose: Bridge between ioBroker states and MQTT with JSON export and Remote Sync
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Longzai Intelligence GitHub Trending Markdown CLI - GitHub Trending 快照转 markdown 数据仓的命令行工具
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | linbin-mk | — | 🪝 🌐 | |
|
Package purpose: Session sync UI plugin for the dsh web GUI: the Sync settings page (git remote, cadence, cleanup, and the read-only synced-session tree), the session row's sync toggle, and the sync-records dialog, all talking to the host through the plugin's own same-ori
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Tiptap extension/command layer bound to @wulperstd/schema's block set.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Pair a host or VM with a miaBot account
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 14d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Shared workspace auth, project selection, and managed credential helpers for Kognitive apps
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Expo | — | 🪝 | |
|
Package purpose: Redis cache adapter for @expo/entity
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 16d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Admin SPA for mantle — React 19 + Vite + Tailwind v4 + shadcn, shipped as static assets.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 1.3 | — | — | 🪝 | |
|
Package purpose: Log hunting and threat-pattern scanner for authorized security assessments, with fast-mode triage
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 21d | — | — | — |
Unverified Signal
|
— | npm | latest | Anurag Hazra | — | 🪝 🌐 | |
|
Package purpose: Dynamically generate stats for your GitHub readme
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 45 | 22d | — | — | — |
Very Risky
|
— | pypi | 0.8.0 | Arie Hofland | — | 🪝 | |
|
Package purpose: A headless painting engine for AI agents: brushes, paint load, wet blending, canvas texture.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 23d | — | — | — |
Very Risky
|
— | pypi | 1.2.1 | Remi Rampin | — | 🪝 | |
|
Package purpose: Free and open source qualitative research tool
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 28d | — | — | — |
Unverified Signal
|
— | pypi | 1.3.0.post3 | Quadrants developers | — | 🪝 | |
|
Package purpose: The Quadrants Programming Language
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 30d | — | — | — |
SUSPICIOUS
|
— | pypi | 0.24.0 | Marco Zwyssig | — | 🪝 | |
|
Package purpose: Delivery orchestrator for any software component that follows a CI/CD flow
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 45 | 35d | — | — | — |
Unverified Signal
|
— | npm | latest | vilmire | — | 🪝 🌐 | |
|
Package purpose: ADHDev standalone daemon — embedded HTTP/WS server for local dashboard
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||