🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
45 41d 40 10 ↑1.0/day
Possible Squatted Stub
langchain npm 0.0.1 — —
Package purpose: Reserved for LastSearch — verified search infrastructure for AI agents. Full release imminent. https://lastsearch.ai
Claimed homepage: https://github.com/lastsearch-hq/lastsearch#readme
Matched naming pattern: node-langchain-lastsearch
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 41
Registry downloads: 40/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 413 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-lastsearch' matches AI hallucination template [node] + [langchain] + [lastsearch].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (37 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 413 bytes).
  • INFOPackage affiliated with trusted vendor 'langchain' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (80 -> 40) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 44d 10 11 ↑0.2/day
Possible Squatted Stub
polygon npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: polygon-polygon-validator
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 44
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 456 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('POLYGON').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (38 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 456 bytes).
  • INFOPackage affiliated with trusted vendor 'polygon' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 44d — — —
Possible Squatted Stub
— npm latest — — 🪝
Package purpose: External BYOK provider for GitHub Copilot in cmd.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL
  • SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/chunk-EO2W2NPS.js:2
  • SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:143

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 45d 27 14 ↑0.6/day
Possible Squatted Stub
deepseek npm 0.0.1 — —
Package purpose: Reserved package name for the DeepSeek Harness TUI project (dsh-tui). The real package will be published here when development completes.
Matched naming pattern: deepseek-deepseek-ui
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 45
Registry downloads: 27/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 581 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (38 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (14 LOC, 2 file(s), 581 bytes).
  • INFOPackage affiliated with trusted vendor 'deepseek' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 45d 31 14 ↑0.7/day
Possible Squatted Stub
deepseek npm 0.0.1 — —
Package purpose: Reserved package name for the DeepSeek Harness TUI project (dsh-tui). The real package will be published here when development completes.
Matched naming pattern: deepseek-deepseek-ui
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 45
Registry downloads: 31/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 589 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (43 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (14 LOC, 2 file(s), 589 bytes).
  • INFOPackage affiliated with trusted vendor 'deepseek' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 45d 34 14 ↑0.8/day
Possible Squatted Stub
deepseek npm 0.0.1 — —
Package purpose: Reserved package name for the DeepSeek Harness TUI project (dsh-tui). The real package will be published here when development completes.
Matched naming pattern: deepseek-deepseek-tui
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 45
Registry downloads: 34/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 597 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (45 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (14 LOC, 2 file(s), 597 bytes).
  • INFOPackage affiliated with trusted vendor 'deepseek' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 45d 36 14 ↑0.8/day
Possible Squatted Stub
deepseek npm 0.0.1 — —
Package purpose: Reserved package name for the DeepSeek Harness TUI project (dsh-tui). The real package will be published here when development completes.
Matched naming pattern: deepseek-deepseek-tui
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 45
Registry downloads: 36/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 597 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (40 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (14 LOC, 2 file(s), 597 bytes).
  • INFOPackage affiliated with trusted vendor 'deepseek' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 45d 36 14 ↑0.8/day
Possible Squatted Stub
deepseek npm 0.0.1 — —
Package purpose: Reserved package name for the DeepSeek Harness TUI project (dsh-tui). The real package will be published here when development completes.
Matched naming pattern: deepseek-deepseek-term
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 45
Registry downloads: 36/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 591 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (37 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (14 LOC, 2 file(s), 591 bytes).
  • INFOPackage affiliated with trusted vendor 'deepseek' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 45d 41 14 ↑0.9/day
Possible Squatted Stub
deepseek npm 0.0.1 — —
Package purpose: Reserved package name for the DeepSeek Harness TUI project (dsh-tui). The real package will be published here when development completes.
Matched naming pattern: deepseek-deepseek-term
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 45
Registry downloads: 41/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 583 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (39 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (14 LOC, 2 file(s), 583 bytes).
  • INFOPackage affiliated with trusted vendor 'deepseek' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 45d 45 14 ↑1.0/day
Possible Squatted Stub
deepseek npm 0.0.1 — —
Package purpose: Reserved package name for the DeepSeek Harness TUI project (dsh-tui). The real package will be published here when development completes.
Matched naming pattern: deepseek-deepseek-cli
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 45
Registry downloads: 45/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 14 lines, 581 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (34 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (14 LOC, 2 file(s), 581 bytes).
  • INFOPackage affiliated with trusted vendor 'deepseek' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 51d 6 11 ↑0.1/day
Possible Squatted Stub
google npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: google-google-utils
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 51
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 464 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (41 days ago) during the active AI hallucination slopsquatting wave.
  • MEDIUMPackage name 'google-logging-utils-internal' contains 'internal' namespace token, a common indicator of targeted dependency confusion attacks or internal library shadowing.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 464 bytes).
  • INFOPackage affiliated with trusted vendor 'google' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 54d 6 11 ↑0.1/day
Possible Squatted Stub
eth npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: eth-eth-utils
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 54
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 440 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('ETH').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (43 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 440 bytes).
  • INFOPackage affiliated with trusted vendor 'eth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 54d 6 11 ↑0.1/day
Possible Squatted Stub
eth npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: eth-eth-toolkit
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 54
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 444 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('ETH').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (40 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 444 bytes).
  • INFOPackage affiliated with trusted vendor 'eth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 73d 18 11 ↑0.2/day
Possible Squatted Stub
ethers npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: ethers-ethers-packages
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 73
Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 450 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (71 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 450 bytes).
  • INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 73d 12 11 ↑0.2/day
Possible Squatted Stub
ethers npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: ethers-ethers-package
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 73
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 448 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (62 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes).
  • INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 79d 17 11 ↑0.2/day
Possible Squatted Stub
anthropic npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: anthropic-anthropic-latest
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 79
Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 452 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('ANTHROPIC').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (74 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 452 bytes).
  • INFOPackage affiliated with trusted vendor 'anthropic' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 80d 14 11 ↑0.2/day
Possible Squatted Stub
claude npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: claude-claude-tracker
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 80
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 454 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (59 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 454 bytes).
  • INFOPackage affiliated with trusted vendor 'claude' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 80d 18 20 ↑0.2/day
Possible Squatted Stub
openai npm 0.0.1 Shawn Hartsock —
Package purpose: Prebuilt newt-provider-openai binary for win32-x64. Placeholder reserving the name.
Claimed homepage: https://github.com/Gilamonster-Foundation/newt-agent#readme
Matched naming pattern: node-openai-newt-provider-openai-win32-x64
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 80
Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 824 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name '@gilamonster/newt-provider-openai-win32-x64' matches AI hallucination template [node] + [openai] + [newt-provider-openai-win32-x64].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (54 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (20 LOC, 2 file(s), 824 bytes).
  • INFOPackage affiliated with trusted vendor 'openai' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (80 -> 40) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 80d 14 20 ↑0.2/day
Possible Squatted Stub
openai npm 0.0.1 Shawn Hartsock —
Package purpose: Prebuilt newt-provider-openai binary for linux-x64. Placeholder reserving the name.
Claimed homepage: https://github.com/Gilamonster-Foundation/newt-agent#readme
Matched naming pattern: node-openai-newt-provider-openai-linux-x64
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 80
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 824 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name '@gilamonster/newt-provider-openai-linux-x64' matches AI hallucination template [node] + [openai] + [newt-provider-openai-linux-x64].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (67 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (20 LOC, 2 file(s), 824 bytes).
  • INFOPackage affiliated with trusted vendor 'openai' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (80 -> 40) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 80d 24 20 ↑0.3/day
Possible Squatted Stub
openai npm 0.0.1 Shawn Hartsock —
Package purpose: Prebuilt newt-provider-openai binary for darwin-x64. Placeholder reserving the name.
Claimed homepage: https://github.com/Gilamonster-Foundation/newt-agent#readme
Matched naming pattern: node-openai-newt-provider-openai-darwin-x64
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 80
Registry downloads: 24/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 827 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name '@gilamonster/newt-provider-openai-darwin-x64' matches AI hallucination template [node] + [openai] + [newt-provider-openai-darwin-x64].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (77 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (20 LOC, 2 file(s), 827 bytes).
  • INFOPackage affiliated with trusted vendor 'openai' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (80 -> 40) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 80d 19 20 ↑0.2/day
Possible Squatted Stub
openai npm 0.0.1 Shawn Hartsock —
Package purpose: Prebuilt newt-provider-openai binary for darwin-arm64. Placeholder reserving the name.
Claimed homepage: https://github.com/Gilamonster-Foundation/newt-agent#readme
Matched naming pattern: node-openai-newt-provider-openai-darwin-arm64
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 80
Registry downloads: 19/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 833 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name '@gilamonster/newt-provider-openai-darwin-arm64' matches AI hallucination template [node] + [openai] + [newt-provider-openai-darwin-arm64].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (60 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (20 LOC, 2 file(s), 833 bytes).
  • INFOPackage affiliated with trusted vendor 'openai' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (80 -> 40) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 80d 22 20 ↑0.3/day
Possible Squatted Stub
openai npm 0.0.1 Shawn Hartsock —
Package purpose: newt-agent `newt-provider-openai` binary shim. Placeholder; real per-platform shim lands via newt-agent#1221.
Claimed homepage: https://github.com/Gilamonster-Foundation/newt-agent#readme
Matched naming pattern: node-openai-newt-provider-openai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 80
Registry downloads: 22/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 830 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name '@gilamonster/newt-provider-openai' matches AI hallucination template [node] + [openai] + [newt-provider-openai].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (61 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (20 LOC, 2 file(s), 830 bytes).
  • INFOPackage affiliated with trusted vendor 'openai' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (80 -> 40) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 81d 12 10 ↑0.1/day
Possible Squatted Stub
web3 npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: web3-web3-utils
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 81
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 434 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (60 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 434 bytes).
  • INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 81d 16 10 ↑0.2/day
Possible Squatted Stub
web3 npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: web3-web3-util
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 81
Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 432 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (57 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 432 bytes).
  • INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 81d 19 11 ↑0.2/day
Possible Squatted Stub
ethereum npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: ethereum-ethereum-utils
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 81
Registry downloads: 19/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 442 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('ETHEREUM').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (76 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes).
  • INFOPackage affiliated with trusted vendor 'ethereum' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 82d 14 1 ↑0.2/day
Possible Squatted Stub
vllm pypi 0.1.0 Amazon Web Services, Inc. aws-neuron-support@amazon.com amazon.com
Package purpose: WRONG PACKAGE. Please install the package from Neuron Repository - pip.repos.neuron.amazonaws.com
Claimed homepage: https://pypi.org/project/vllm-omni-neuron/
Matched naming pattern: vllm-vllm-neuron
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 82
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 119 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('VLLM').
  • INFOPackage lineage verified as trusted vendor 'amazon' via domain:amazon.com.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (62 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 119 bytes).
  • INFOPackage affiliated with trusted vendor 'amazon' (domain:amazon.com). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
45 82d 23 11 ↑0.3/day
Possible Squatted Stub
google npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: google-google-bower
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 82
Registry downloads: 23/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 440 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (56 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 440 bytes).
  • INFOPackage affiliated with trusted vendor 'google' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 88d 15 11 ↑0.2/day
Possible Squatted Stub
openai npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: openai-openai-helpers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 88
Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 448 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (85 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes).
  • INFOPackage affiliated with trusted vendor 'openai' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 102d 30 11 ↑0.3/day
Possible Squatted Stub
web3 npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: web3-web3-helper
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 102
Registry downloads: 30/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 440 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (87 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 440 bytes).
  • INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 106d 13 1 ↑0.1/day
Possible Squatted Stub
vllm pypi 0.1.0 Amazon Web Services, Inc. aws-neuron-support@amazon.com amazon.com
Package purpose: WRONG PACKAGE. Please install the package from Neuron Repository - pip.repos.neuron.amazonaws.com
Claimed homepage: https://pypi.org/project/vllm-neuron/
Matched naming pattern: python-vllm-neuron
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 106
Registry downloads: 13/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1 lines, 119 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'vllm-neuron' matches AI hallucination template [python] + [vllm] + [neuron].
  • HIGHClaims critical enterprise brand identity ('VLLM').
  • INFOPackage lineage verified as trusted vendor 'amazon' via domain:amazon.com.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (100 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (1 LOC, 1 file(s), 119 bytes).
  • INFOPackage affiliated with trusted vendor 'amazon' (domain:amazon.com). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
45 107d 11 11 ↑0.1/day
Possible Squatted Stub
ethereum npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: ethereum-ethereum-reporter
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 107
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 448 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('ETHEREUM').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (99 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes).
  • INFOPackage affiliated with trusted vendor 'ethereum' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 108d 10 13 ↑0.1/day
Possible Squatted Stub
claude npm 0.15.0 — —
Package purpose: This package has been renamed. See hippoclaudus.
Matched naming pattern: claude-claude-remembers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 108
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 13 lines, 546 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • HIGHPackage registered recently (84 days ago) during the active AI hallucination slopsquatting wave.
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (13 LOC, 2 file(s), 546 bytes).
  • INFOPackage affiliated with trusted vendor 'claude' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 115d 20 11 ↑0.2/day
Possible Squatted Stub
auth0 npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: auth0-auth0-scripts
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 115
Registry downloads: 20/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 452 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AUTH0').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (111 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 452 bytes).
  • INFOPackage affiliated with trusted vendor 'auth0' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 116d 19 11 ↑0.2/day
Possible Squatted Stub
coinbase npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: coinbase-coinbase-utils
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 116
Registry downloads: 19/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 448 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('COINBASE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (95 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes).
  • INFOPackage affiliated with trusted vendor 'coinbase' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 120d — — —
Unverified Signal
— npm latest D0n9X1n — 🪝 🌐
Package purpose: Yet, just another relay for Claude Code to use a GitHub Copilot subscription.
Static code signals:
  • CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in package/dist/main.js:1141
  • SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/main.js:559

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 125d 8 11 ↑0.1/day
Possible Squatted Stub
stripe npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: stripe-stripe-utils
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 125
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 448 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('STRIPE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (118 days ago) during the active AI hallucination slopsquatting wave.
  • MEDIUMPackage name 'stripe-internal-utils' contains 'internal' namespace token, a common indicator of targeted dependency confusion attacks or internal library shadowing.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes).
  • INFOPackage affiliated with trusted vendor 'stripe' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 125d 17 11 ↑0.1/day
Possible Squatted Stub
claude npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: claude-claude-utils
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 125
Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 448 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (120 days ago) during the active AI hallucination slopsquatting wave.
  • MEDIUMPackage name 'claude-internal-utils' contains 'internal' namespace token, a common indicator of targeted dependency confusion attacks or internal library shadowing.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes).
  • INFOPackage affiliated with trusted vendor 'claude' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 125d 12 11 ↑0.1/day
Possible Squatted Stub
anthropic npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: anthropic-anthropic-logger
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 125
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 452 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('ANTHROPIC').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (117 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 452 bytes).
  • INFOPackage affiliated with trusted vendor 'anthropic' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 129d 14 11 ↑0.1/day
Possible Squatted Stub
claude npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: claude-claude-imessage
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 129
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 452 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (112 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 452 bytes).
  • INFOPackage affiliated with trusted vendor 'claude' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 130d 30 11 ↑0.2/day
Possible Squatted Stub
ethers npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: ethers-ethers-key
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 130
Registry downloads: 30/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 442 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (113 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes).
  • INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 130d 11 11 ↑0.1/day
Possible Squatted Stub
ethers npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: ethers-ethers-wallet
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 130
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 442 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (116 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes).
  • INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 130d 11 11 ↑0.1/day
Possible Squatted Stub
ethers npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: ethers-ethers-signer
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 130
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 450 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (116 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 450 bytes).
  • INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 132d 11 11 ↑0.1/day
Possible Squatted Stub
auth0 npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: auth0-auth0-sdk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 132
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 444 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AUTH0').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (118 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 444 bytes).
  • INFOPackage affiliated with trusted vendor 'auth0' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 132d 13 11 ↑0.1/day
Possible Squatted Stub
auth0 npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: auth0-auth0-collector
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 132
Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 454 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AUTH0').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (113 days ago) during the active AI hallucination slopsquatting wave.
  • MEDIUMPackage name 'auth0-internal-collector' contains 'internal' namespace token, a common indicator of targeted dependency confusion attacks or internal library shadowing.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 454 bytes).
  • INFOPackage affiliated with trusted vendor 'auth0' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 132d 14 11 ↑0.1/day
Possible Squatted Stub
auth0 npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: auth0-auth0-helper
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 132
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 458 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AUTH0').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (127 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 458 bytes).
  • INFOPackage affiliated with trusted vendor 'auth0' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 135d 16 11 ↑0.1/day
Possible Squatted Stub
chainlink npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: chainlink-chainlink-feed
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 135
Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 468 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('CHAINLINK').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (130 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 468 bytes).
  • INFOPackage affiliated with trusted vendor 'chainlink' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 138d 11 10 ↑0.1/day
Possible Squatted Stub
gcp npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: gcp-gcp-enabler
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 138
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 436 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('GCP').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (126 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes).
  • INFOPackage affiliated with trusted vendor 'gcp' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 142d 12 10 ↑0.1/day
Possible Squatted Stub
web3 npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: web3-web3-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 142
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 436 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (129 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes).
  • INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 151d 8 11 ↑0.1/day
Possible Squatted Stub
web3 npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: web3-web3-loader
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 151
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 442 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (134 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes).
  • INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 157d 16 11 ↑0.1/day
Possible Squatted Stub
gcp npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: gcp-gcp-research
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 157
Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 456 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('GCP').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (156 days ago) during the active AI hallucination slopsquatting wave.
  • MEDIUMPackage name 'gcp-internal-research-poc' contains 'internal' namespace token, a common indicator of targeted dependency confusion attacks or internal library shadowing.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 456 bytes).
  • INFOPackage affiliated with trusted vendor 'gcp' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
« Prev Next »
LINK COPIED TO CLIPBOARD