FlagThis | Sentinel Threat Feed

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference

Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.

Package	Score ▼	Age	Users	Lines	Growth	Verdict	Targeted	Ecosystem	Version	Author	Email domain	Signals
	45	163d	12	11	↑0.1/day	Possible Squatted Stub	auth0	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: auth0-auth0-components Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 163 Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 454 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('AUTH0'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). HIGHPackage registered recently (143 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 454 bytes). INFOPackage affiliated with trusted vendor 'auth0' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	179d	12	7	↑0.1/day	Possible Squatted Stub	opensea	npm	0.0.1	OpenSea Developers	—
Package purpose: Reserved — see https://github.com/ProjectOpenSea/opensea-skill Claimed homepage: https://github.com/ProjectOpenSea/opensea-skill#readme Matched naming pattern: node-opensea-skill Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 179 Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 7 lines, 298 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'opensea-skill' matches AI hallucination template [node] + [opensea] + [skill]. HIGHClaims critical enterprise brand identity ('OPENSEA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. HIGHPackage registered recently (160 days ago) during the active AI hallucination slopsquatting wave. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 298 bytes). INFOPackage affiliated with trusted vendor 'opensea' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (80 -> 40) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	191d	11	7	↑0.1/day	Possible Squatted Stub	amazon	npm	0.0.1	CompraComIA contato@compracomia.com	compracomia.com
Package purpose: MCP Server - Assistente de compras para Amazon Brasil via IA. Claimed homepage: https://compracomia.com.br Matched naming pattern: mcp-amazon-brasil Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 191 Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 7 lines, 308 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'mcp-amazon-brasil' matches AI hallucination template [mcp] + [amazon] + [brasil]. HIGHClaims critical enterprise brand identity ('AMAZON'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage registered 181 days ago within the 1-year AI tool proliferation window. HIGHMISSING_SOURCE_REPOSITORY_URL MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 308 bytes). INFOPackage affiliated with trusted vendor 'compracomia.com' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Static code signals: MISSING_SOURCE_REPOSITORY_URL Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	198d	11	5	↑0.1/day	Possible Squatted Stub	gemini	npm	0.0.1	—	—
Package purpose: Reserved - use @skdev-ai/pi-gemini-cli-provider instead Matched naming pattern: pi-gemini-cli Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 198 Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 5 lines, 124 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'pi-gemini-cli-provider' matches AI hallucination template [pi] + [gemini] + [cli]. HIGHClaims critical enterprise brand identity ('GEMINI'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage registered 191 days ago within the 1-year AI tool proliferation window. HIGHMISSING_SOURCE_REPOSITORY_URL MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 124 bytes). INFOPackage affiliated with trusted vendor 'gemini' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Static code signals: MISSING_SOURCE_REPOSITORY_URL Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	198d	8	5	↑0.0/day	Possible Squatted Stub	gemini	npm	0.0.1	—	—
Package purpose: Reserved - use @skdev-ai/pi-gemini-cli-search instead Matched naming pattern: pi-gemini-cli Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 198 Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 5 lines, 120 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'pi-gemini-cli-search' matches AI hallucination template [pi] + [gemini] + [cli]. HIGHClaims critical enterprise brand identity ('GEMINI'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage registered 182 days ago within the 1-year AI tool proliferation window. HIGHMISSING_SOURCE_REPOSITORY_URL MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 120 bytes). INFOPackage affiliated with trusted vendor 'gemini' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Static code signals: MISSING_SOURCE_REPOSITORY_URL Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	198d	18	5	↑0.1/day	Possible Squatted Stub	gemini	npm	0.0.1	—	—
Package purpose: Reserved - use @skdev-ai/pi-gemini-a2a-integration instead Matched naming pattern: pi-gemini-a2a Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 198 Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 5 lines, 130 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'pi-gemini-a2a-integration' matches AI hallucination template [pi] + [gemini] + [a2a]. HIGHClaims critical enterprise brand identity ('GEMINI'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage registered 193 days ago within the 1-year AI tool proliferation window. HIGHMISSING_SOURCE_REPOSITORY_URL MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 130 bytes). INFOPackage affiliated with trusted vendor 'gemini' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Static code signals: MISSING_SOURCE_REPOSITORY_URL Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	198d	15	5	↑0.1/day	Possible Squatted Stub	gemini	npm	0.0.1	—	—
Package purpose: A2A server lifecycle management for Pi/GSD extensions Matched naming pattern: node-gemini-pi-gemini-a2a-integration Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 198 Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 5 lines, 153 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name '@skdev-ai/pi-gemini-a2a-integration' matches AI hallucination template [node] + [gemini] + [pi-gemini-a2a-integration]. HIGHClaims critical enterprise brand identity ('GEMINI'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage registered 197 days ago within the 1-year AI tool proliferation window. HIGHMISSING_SOURCE_REPOSITORY_URL MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 153 bytes). INFOPackage affiliated with trusted vendor 'gemini' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Static code signals: MISSING_SOURCE_REPOSITORY_URL Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	205d	11	11	↑0.1/day	Possible Squatted Stub	solana	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: solana-solana-sdk Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 205 Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 442 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('SOLANA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 199 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes). INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	207d	41	11	↑0.2/day	Possible Squatted Stub	polygon	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: polygon-polygon-api Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 207 Registry downloads: 41/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 440 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('POLYGON'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 203 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 440 bytes). INFOPackage affiliated with trusted vendor 'polygon' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	212d	9	10	↑0.0/day	Possible Squatted Stub	tether	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: tether-tether-docs Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 212 Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 436 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('TETHER'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 194 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes). INFOPackage affiliated with trusted vendor 'tether' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	215d	13	11	↑0.1/day	Possible Squatted Stub	polygon	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: polygon-polygon-api Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 215 Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 446 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('POLYGON'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 198 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 446 bytes). INFOPackage affiliated with trusted vendor 'polygon' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	216d	18	11	↑0.1/day	Possible Squatted Stub	azure	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: azure-azure-auth Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 216 Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 448 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('AZURE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 212 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes). INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	220d	11	8	↑0.1/day	Possible Squatted Stub	gemini	npm	0.0.1	richardcb	—
Package purpose: Multi-agent orchestration extension for Gemini CLI Claimed homepage: https://github.com/richardcb/oh-my-gemini#readme Matched naming pattern: oh-gemini-gemini Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 220 Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 8 lines, 358 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'oh-my-gemini-cli' matches AI hallucination template [oh] + [gemini] + [gemini]. HIGHClaims critical enterprise brand identity ('GEMINI'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage registered 194 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 358 bytes). INFOPackage affiliated with trusted vendor 'gemini' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	221d	16	10	↑0.1/day	Possible Squatted Stub	web3	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: argon-web3-chain Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 221 Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 438 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'argon-web3-chain' matches AI hallucination template [argon] + [web3] + [chain]. HIGHClaims critical enterprise brand identity ('WEB3'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 212 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes). INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	229d	11	9	↑0.0/day	Possible Squatted Stub	gcp	npm	0.0.0-reserved.0	—	—
Package purpose: Reserved package name for SandForge release automation Claimed homepage: https://github.com/sand-forge/sandforge#readme Matched naming pattern: node-gcp-plugin-gcp Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 229 Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 9 lines, 389 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name '@sand-forge/plugin-gcp' matches AI hallucination template [node] + [gcp] + [plugin-gcp]. HIGHClaims critical enterprise brand identity ('GCP'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage registered 220 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (9 LOC, 2 file(s), 389 bytes). INFOPackage affiliated with trusted vendor 'gcp' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	232d	14	10	↑0.1/day	Possible Squatted Stub	web3	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: sinon-web3-chain Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 232 Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 438 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'sinon-web3-chain' matches AI hallucination template [sinon] + [web3] + [chain]. HIGHClaims critical enterprise brand identity ('WEB3'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 206 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes). INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	239d	19	10	↑0.1/day	Possible Squatted Stub	web3	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-web3-sinon Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 239 Registry downloads: 19/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 426 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'web3-sinon' matches AI hallucination template [node] + [web3] + [sinon]. HIGHClaims critical enterprise brand identity ('WEB3'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 222 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 426 bytes). INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	239d	11	10	↑0.0/day	Possible Squatted Stub	web3	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: web3-web3-sinon Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 239 Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 438 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('WEB3'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 226 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes). INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	240d	16	5	↑0.1/day	Possible Squatted Stub	claude	npm	0.0.1	—	—
Package purpose: Agentap Claude Code adapter - coming soon Matched naming pattern: node-claude-adapter-claude-code Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 240 Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 5 lines, 120 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name '@agentap-dev/adapter-claude-code' matches AI hallucination template [node] + [claude] + [adapter-claude-code]. HIGHClaims critical enterprise brand identity ('CLAUDE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage registered 228 days ago within the 1-year AI tool proliferation window. HIGHMISSING_SOURCE_REPOSITORY_URL MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 120 bytes). INFOPackage affiliated with trusted vendor 'claude' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Static code signals: MISSING_SOURCE_REPOSITORY_URL Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	241d	15	10	↑0.1/day	Possible Squatted Stub	web3	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: web3-web3-sync Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 241 Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 436 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('WEB3'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 236 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes). INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	242d	11	11	↑0.0/day	Possible Squatted Stub	solana	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: solana-solana-contracts Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 242 Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 470 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('SOLANA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 233 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 470 bytes). INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	256d	10	10	↑0.0/day	Possible Squatted Stub	weaviate	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-weaviate-js Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 256 Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 428 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'weaviate-js' matches AI hallucination template [node] + [weaviate] + [js]. HIGHClaims critical enterprise brand identity ('WEAVIATE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 233 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 428 bytes). INFOPackage affiliated with trusted vendor 'weaviate' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	256d	14	10	↑0.1/day	Possible Squatted Stub	replicate	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-replicate-js Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 256 Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 430 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'replicate-js' matches AI hallucination template [node] + [replicate] + [js]. HIGHClaims critical enterprise brand identity ('REPLICATE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 250 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 430 bytes). INFOPackage affiliated with trusted vendor 'replicate' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	256d	38	10	↑0.1/day	Possible Squatted Stub	qdrant	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-qdrant-js Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 256 Registry downloads: 38/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 424 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'qdrant-js' matches AI hallucination template [node] + [qdrant] + [js]. HIGHClaims critical enterprise brand identity ('QDRANT'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 246 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 424 bytes). INFOPackage affiliated with trusted vendor 'qdrant' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	256d	18	10	↑0.1/day	Possible Squatted Stub	aws	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: aws-aws-nodejs Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 256 Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 434 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('AWS'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 242 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 434 bytes). INFOPackage affiliated with trusted vendor 'aws' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	256d	28	10	↑0.1/day	Possible Squatted Stub	clerk	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-clerk-js Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 256 Registry downloads: 28/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 422 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'clerk-js' matches AI hallucination template [node] + [clerk] + [js]. HIGHClaims critical enterprise brand identity ('CLERK'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 234 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 422 bytes). INFOPackage affiliated with trusted vendor 'clerk' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	263d	14	5	↑0.1/day	Possible Squatted Stub	claude	npm	0.0.1	—	—
Package purpose: Placeholder package for claude-town Matched naming pattern: node-claude-town Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 263 Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 5 lines, 182 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'claude-town' matches AI hallucination template [node] + [claude] + [town]. HIGHClaims critical enterprise brand identity ('CLAUDE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage registered 253 days ago within the 1-year AI tool proliferation window. HIGHMISSING_SOURCE_REPOSITORY_URL MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 182 bytes). INFOPackage affiliated with trusted vendor 'claude' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Static code signals: MISSING_SOURCE_REPOSITORY_URL Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	265d	15	11	↑0.1/day	Possible Squatted Stub	google	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: passport-google-auth Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 265 Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 458 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'passport-google-auth-token' matches AI hallucination template [passport] + [google] + [auth]. HIGHClaims critical enterprise brand identity ('GOOGLE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 242 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 458 bytes). INFOPackage affiliated with trusted vendor 'google' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	265d	12	10	↑0.0/day	Possible Squatted Stub	pinecone	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-pinecone-js Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 265 Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 428 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'pinecone-js' matches AI hallucination template [node] + [pinecone] + [js]. HIGHClaims critical enterprise brand identity ('PINECONE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 254 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 428 bytes). INFOPackage affiliated with trusted vendor 'pinecone' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	265d	13	10	↑0.0/day	Possible Squatted Stub	llamaindex	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-llamaindex-js Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 265 Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 432 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'llamaindex-js' matches AI hallucination template [node] + [llamaindex] + [js]. HIGHClaims critical enterprise brand identity ('LLAMAINDEX'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 256 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 432 bytes). INFOPackage affiliated with trusted vendor 'llamaindex' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	265d	17	10	↑0.1/day	Possible Squatted Stub	huggingface	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-huggingface-js Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 265 Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 434 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'huggingface-js' matches AI hallucination template [node] + [huggingface] + [js]. HIGHClaims critical enterprise brand identity ('HUGGINGFACE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 252 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 434 bytes). INFOPackage affiliated with trusted vendor 'huggingface' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	270d	15	11	↑0.1/day	Possible Squatted Stub	okta	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: okta-okta-render Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 270 Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 448 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('OKTA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 252 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes). INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	270d	30	10	↑0.1/day	Possible Squatted Stub	okta	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: okta-okta-js Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 270 Registry downloads: 30/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 430 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('OKTA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 250 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 430 bytes). INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	270d	17	11	↑0.1/day	Possible Squatted Stub	matic	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: matic-matic-consumer Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 270 Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 452 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('MATIC'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 247 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 452 bytes). INFOPackage affiliated with trusted vendor 'matic' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	277d	10	11	↑0.0/day	Possible Squatted Stub	azure	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: vscode-azure-mcp Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 277 Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 452 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'vscode-azure-mcp-server' matches AI hallucination template [vscode] + [azure] + [mcp]. HIGHClaims critical enterprise brand identity ('AZURE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 254 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 452 bytes). INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	289d	14	10	↑0.0/day	Possible Squatted Stub	okta	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: okta-okta-library Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 289 Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 438 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('OKTA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 266 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes). INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	293d	15	10	↑0.1/day	Possible Squatted Stub	polygon	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-polygon-src Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 293 Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 428 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'polygon-src' matches AI hallucination template [node] + [polygon] + [src]. HIGHClaims critical enterprise brand identity ('POLYGON'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 272 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 428 bytes). INFOPackage affiliated with trusted vendor 'polygon' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	298d	—	—	—	Unverified Signal	—	pypi	1.69.91	—	—	🪝
Package purpose: Pictograph SDK - agent-native computer vision annotation platform Static code signals: SYSTEM_PERSISTENCE_TAMPERING: 'System Persistence Implant (systemd/cron/registry)' found in pictograph-1.69.91/src/pictograph/_path_safety.py:57 SYSTEM_PERSISTENCE_TAMPERING: 'Cron Job Installation / Tampering' found in pictograph-1.69.91/src/pictograph/_path_safety.py:57 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in pictograph-1.69.91/src/pictograph/_internal/auth.py:39 SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in pictograph-1.69.91/src/pictograph/aio/resources/credits.py:62 SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in pictograph-1.69.91/src/pictograph/aio/resources/datasets.py:84 SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in pictograph-1.69.91/src/pictograph/aio/resources/deployments.py:95 SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in pictograph-1.69.91/src/pictograph/aio/resources/exports.py:130 SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in pictograph-1.69.91/src/pictograph/aio/resources/images.py:132 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	45	306d	19	11	↑0.1/day	Possible Squatted Stub	btc	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: btc-btc-helper Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 306 Registry downloads: 19/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 450 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('BTC'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 281 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 450 bytes). INFOPackage affiliated with trusted vendor 'btc' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	311d	35	10	↑0.1/day	Possible Squatted Stub	bitcoin	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: bitcoin-bitcoin-lib Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 311 Registry downloads: 35/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 438 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('BITCOIN'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 303 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes). INFOPackage affiliated with trusted vendor 'bitcoin' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	311d	14	10	↑0.0/day	Possible Squatted Stub	bitcoin	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: bitcoin-bitcoin-js Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 311 Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 434 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('BITCOIN'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 305 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 434 bytes). INFOPackage affiliated with trusted vendor 'bitcoin' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	312d	17	11	↑0.1/day	Possible Squatted Stub	amazon	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-amazon-testpackage Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 312 Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 442 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'amazon-testpackage' matches AI hallucination template [node] + [amazon] + [testpackage]. HIGHClaims critical enterprise brand identity ('AMAZON'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 308 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes). INFOPackage affiliated with trusted vendor 'amazon' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	317d	8	10	↑0.0/day	Possible Squatted Stub	groq	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: groq-groq-app Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 317 Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 438 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('GROQ'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 306 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes). INFOPackage affiliated with trusted vendor 'groq' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	317d	10	11	↑0.0/day	Possible Squatted Stub	groq	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: groq-groq-images Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 317 Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 458 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('GROQ'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 305 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 458 bytes). INFOPackage affiliated with trusted vendor 'groq' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	324d	12	11	↑0.0/day	Possible Squatted Stub	okta	npm	0.0.1-security.1	—	—
Package purpose: security holding package Matched naming pattern: okta-okta-sluey Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 324 Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 442 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('OKTA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 310 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes). INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	324d	7	11	↑0.0/day	Possible Squatted Stub	okta	npm	0.0.1-security.1	—	—
Package purpose: security holding package Matched naming pattern: okta-okta-sluey Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 324 Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 450 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('OKTA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 306 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 450 bytes). INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	324d	10	11	↑0.0/day	Possible Squatted Stub	okta	npm	0.0.1-security.1	—	—
Package purpose: security holding package Matched naming pattern: okta-okta-sluey Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 324 Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 442 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('OKTA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 310 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes). INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	324d	11	11	↑0.0/day	Possible Squatted Stub	okta	npm	0.0.1-security.1	—	—
Package purpose: security holding package Matched naming pattern: okta-okta-sluey Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 324 Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 452 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('OKTA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 318 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 452 bytes). INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	324d	11	11	↑0.0/day	Possible Squatted Stub	okta	npm	0.0.1-security.1	—	—
Package purpose: security holding package Matched naming pattern: okta-okta-sumpek Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 324 Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 448 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('OKTA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 317 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes). INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	324d	11	11	↑0.0/day	Possible Squatted Stub	okta	npm	0.0.1-security.1	—	—
Package purpose: security holding package Matched naming pattern: okta-okta-sluey Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 324 Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 440 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('OKTA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). MEDIUMPackage registered 315 days ago within the 1-year AI tool proliferation window. INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 440 bytes). INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 163

Registry downloads: 12/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('AUTH0').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
HIGHPackage registered recently (143 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 454 bytes).
INFOPackage affiliated with trusted vendor 'auth0' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1

Author: OpenSea Developers

Package purpose: Reserved — see https://github.com/ProjectOpenSea/opensea-skill

Claimed homepage: https://github.com/ProjectOpenSea/opensea-skill#readme

Official vendor account: No

Days since publish: 179

Registry downloads: 12/month

Codebase size: 7 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'opensea-skill' matches AI hallucination template [node] + [opensea] + [skill].
HIGHClaims critical enterprise brand identity ('OPENSEA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
HIGHPackage registered recently (160 days ago) during the active AI hallucination slopsquatting wave.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 298 bytes).
INFOPackage affiliated with trusted vendor 'opensea' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (80 -> 40) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1

Author: CompraComIA (contato@compracomia.com)

Package purpose: MCP Server - Assistente de compras para Amazon Brasil via IA.

Claimed homepage: https://compracomia.com.br

Official vendor account: No

Days since publish: 191

Registry downloads: 11/month

Codebase size: 7 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'mcp-amazon-brasil' matches AI hallucination template [mcp] + [amazon] + [brasil].
HIGHClaims critical enterprise brand identity ('AMAZON').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage registered 181 days ago within the 1-year AI tool proliferation window.
HIGHMISSING_SOURCE_REPOSITORY_URL
MEDIUMPackage is an empty placeholder (7 LOC, 1 file(s), 308 bytes).
INFOPackage affiliated with trusted vendor 'compracomia.com' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1

Author: Unknown

Package purpose: Reserved - use @skdev-ai/pi-gemini-cli-provider instead

Official vendor account: No

Days since publish: 198

Registry downloads: 11/month

Codebase size: 5 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'pi-gemini-cli-provider' matches AI hallucination template [pi] + [gemini] + [cli].
HIGHClaims critical enterprise brand identity ('GEMINI').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage registered 191 days ago within the 1-year AI tool proliferation window.
HIGHMISSING_SOURCE_REPOSITORY_URL
MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 124 bytes).
INFOPackage affiliated with trusted vendor 'gemini' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1

Author: Unknown

Package purpose: Reserved - use @skdev-ai/pi-gemini-cli-search instead

Official vendor account: No

Days since publish: 198

Registry downloads: 8/month

Codebase size: 5 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'pi-gemini-cli-search' matches AI hallucination template [pi] + [gemini] + [cli].
HIGHClaims critical enterprise brand identity ('GEMINI').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage registered 182 days ago within the 1-year AI tool proliferation window.
HIGHMISSING_SOURCE_REPOSITORY_URL
MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 120 bytes).
INFOPackage affiliated with trusted vendor 'gemini' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1

Author: Unknown

Package purpose: Reserved - use @skdev-ai/pi-gemini-a2a-integration instead

Official vendor account: No

Days since publish: 198

Registry downloads: 18/month

Codebase size: 5 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'pi-gemini-a2a-integration' matches AI hallucination template [pi] + [gemini] + [a2a].
HIGHClaims critical enterprise brand identity ('GEMINI').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage registered 193 days ago within the 1-year AI tool proliferation window.
HIGHMISSING_SOURCE_REPOSITORY_URL
MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 130 bytes).
INFOPackage affiliated with trusted vendor 'gemini' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1

Author: Unknown

Package purpose: A2A server lifecycle management for Pi/GSD extensions

Official vendor account: No

Days since publish: 198

Registry downloads: 15/month

Codebase size: 5 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name '@skdev-ai/pi-gemini-a2a-integration' matches AI hallucination template [node] + [gemini] + [pi-gemini-a2a-integration].
HIGHClaims critical enterprise brand identity ('GEMINI').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage registered 197 days ago within the 1-year AI tool proliferation window.
HIGHMISSING_SOURCE_REPOSITORY_URL
MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 153 bytes).
INFOPackage affiliated with trusted vendor 'gemini' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 205

Registry downloads: 11/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('SOLANA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 199 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes).
INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 207

Registry downloads: 41/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('POLYGON').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 203 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 440 bytes).
INFOPackage affiliated with trusted vendor 'polygon' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 212

Registry downloads: 9/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('TETHER').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 194 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes).
INFOPackage affiliated with trusted vendor 'tether' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 215

Registry downloads: 13/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('POLYGON').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 198 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 446 bytes).
INFOPackage affiliated with trusted vendor 'polygon' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 216

Registry downloads: 18/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('AZURE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 212 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes).
INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1

Author: richardcb

Package purpose: Multi-agent orchestration extension for Gemini CLI

Claimed homepage: https://github.com/richardcb/oh-my-gemini#readme

Official vendor account: No

Days since publish: 220

Registry downloads: 11/month

Codebase size: 8 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'oh-my-gemini-cli' matches AI hallucination template [oh] + [gemini] + [gemini].
HIGHClaims critical enterprise brand identity ('GEMINI').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage registered 194 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (8 LOC, 1 file(s), 358 bytes).
INFOPackage affiliated with trusted vendor 'gemini' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 221

Registry downloads: 16/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'argon-web3-chain' matches AI hallucination template [argon] + [web3] + [chain].
HIGHClaims critical enterprise brand identity ('WEB3').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 212 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes).
INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.0-reserved.0

Author: Unknown

Package purpose: Reserved package name for SandForge release automation

Claimed homepage: https://github.com/sand-forge/sandforge#readme

Official vendor account: No

Days since publish: 229

Registry downloads: 11/month

Codebase size: 9 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name '@sand-forge/plugin-gcp' matches AI hallucination template [node] + [gcp] + [plugin-gcp].
HIGHClaims critical enterprise brand identity ('GCP').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage registered 220 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (9 LOC, 2 file(s), 389 bytes).
INFOPackage affiliated with trusted vendor 'gcp' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 232

Registry downloads: 14/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'sinon-web3-chain' matches AI hallucination template [sinon] + [web3] + [chain].
HIGHClaims critical enterprise brand identity ('WEB3').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 206 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes).
INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 239

Registry downloads: 19/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'web3-sinon' matches AI hallucination template [node] + [web3] + [sinon].
HIGHClaims critical enterprise brand identity ('WEB3').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 222 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 426 bytes).
INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 239

Registry downloads: 11/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('WEB3').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 226 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes).
INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1

Author: Unknown

Package purpose: Agentap Claude Code adapter - coming soon

Official vendor account: No

Days since publish: 240

Registry downloads: 16/month

Codebase size: 5 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name '@agentap-dev/adapter-claude-code' matches AI hallucination template [node] + [claude] + [adapter-claude-code].
HIGHClaims critical enterprise brand identity ('CLAUDE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage registered 228 days ago within the 1-year AI tool proliferation window.
HIGHMISSING_SOURCE_REPOSITORY_URL
MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 120 bytes).
INFOPackage affiliated with trusted vendor 'claude' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 241

Registry downloads: 15/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('WEB3').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 236 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes).
INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 242

Registry downloads: 11/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('SOLANA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 233 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 470 bytes).
INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 256

Registry downloads: 10/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'weaviate-js' matches AI hallucination template [node] + [weaviate] + [js].
HIGHClaims critical enterprise brand identity ('WEAVIATE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 233 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 428 bytes).
INFOPackage affiliated with trusted vendor 'weaviate' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 256

Registry downloads: 14/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'replicate-js' matches AI hallucination template [node] + [replicate] + [js].
HIGHClaims critical enterprise brand identity ('REPLICATE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 250 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 430 bytes).
INFOPackage affiliated with trusted vendor 'replicate' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 256

Registry downloads: 38/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'qdrant-js' matches AI hallucination template [node] + [qdrant] + [js].
HIGHClaims critical enterprise brand identity ('QDRANT').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 246 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 424 bytes).
INFOPackage affiliated with trusted vendor 'qdrant' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 256

Registry downloads: 18/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('AWS').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 242 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 434 bytes).
INFOPackage affiliated with trusted vendor 'aws' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 256

Registry downloads: 28/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'clerk-js' matches AI hallucination template [node] + [clerk] + [js].
HIGHClaims critical enterprise brand identity ('CLERK').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 234 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 422 bytes).
INFOPackage affiliated with trusted vendor 'clerk' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1

Author: Unknown

Package purpose: Placeholder package for claude-town

Official vendor account: No

Days since publish: 263

Registry downloads: 14/month

Codebase size: 5 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'claude-town' matches AI hallucination template [node] + [claude] + [town].
HIGHClaims critical enterprise brand identity ('CLAUDE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage registered 253 days ago within the 1-year AI tool proliferation window.
HIGHMISSING_SOURCE_REPOSITORY_URL
MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 182 bytes).
INFOPackage affiliated with trusted vendor 'claude' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 265

Registry downloads: 15/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'passport-google-auth-token' matches AI hallucination template [passport] + [google] + [auth].
HIGHClaims critical enterprise brand identity ('GOOGLE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 242 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 458 bytes).
INFOPackage affiliated with trusted vendor 'google' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 265

Registry downloads: 12/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'pinecone-js' matches AI hallucination template [node] + [pinecone] + [js].
HIGHClaims critical enterprise brand identity ('PINECONE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 254 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 428 bytes).
INFOPackage affiliated with trusted vendor 'pinecone' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 265

Registry downloads: 13/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'llamaindex-js' matches AI hallucination template [node] + [llamaindex] + [js].
HIGHClaims critical enterprise brand identity ('LLAMAINDEX').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 256 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 432 bytes).
INFOPackage affiliated with trusted vendor 'llamaindex' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 265

Registry downloads: 17/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'huggingface-js' matches AI hallucination template [node] + [huggingface] + [js].
HIGHClaims critical enterprise brand identity ('HUGGINGFACE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 252 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 434 bytes).
INFOPackage affiliated with trusted vendor 'huggingface' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 270

Registry downloads: 15/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('OKTA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 252 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes).
INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 270

Registry downloads: 30/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('OKTA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 250 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 430 bytes).
INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 270

Registry downloads: 17/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('MATIC').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 247 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 452 bytes).
INFOPackage affiliated with trusted vendor 'matic' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 277

Registry downloads: 10/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'vscode-azure-mcp-server' matches AI hallucination template [vscode] + [azure] + [mcp].
HIGHClaims critical enterprise brand identity ('AZURE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 254 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 452 bytes).
INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 289

Registry downloads: 14/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('OKTA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 266 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes).
INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 293

Registry downloads: 15/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'polygon-src' matches AI hallucination template [node] + [polygon] + [src].
HIGHClaims critical enterprise brand identity ('POLYGON').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 272 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 428 bytes).
INFOPackage affiliated with trusted vendor 'polygon' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 306

Registry downloads: 19/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('BTC').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 281 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 450 bytes).
INFOPackage affiliated with trusted vendor 'btc' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 311

Registry downloads: 35/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('BITCOIN').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 303 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes).
INFOPackage affiliated with trusted vendor 'bitcoin' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 311

Registry downloads: 14/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('BITCOIN').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 305 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 434 bytes).
INFOPackage affiliated with trusted vendor 'bitcoin' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 312

Registry downloads: 17/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'amazon-testpackage' matches AI hallucination template [node] + [amazon] + [testpackage].
HIGHClaims critical enterprise brand identity ('AMAZON').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 308 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes).
INFOPackage affiliated with trusted vendor 'amazon' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 317

Registry downloads: 8/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('GROQ').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 306 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes).
INFOPackage affiliated with trusted vendor 'groq' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 317

Registry downloads: 10/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('GROQ').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 305 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 458 bytes).
INFOPackage affiliated with trusted vendor 'groq' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security.1

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 324

Registry downloads: 12/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('OKTA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 310 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes).
INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security.1

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 324

Registry downloads: 7/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('OKTA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 306 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 450 bytes).
INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security.1

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 324

Registry downloads: 10/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('OKTA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 310 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes).
INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security.1

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 324

Registry downloads: 11/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('OKTA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 318 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 452 bytes).
INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security.1

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 324

Registry downloads: 11/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('OKTA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 317 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes).
INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security.1

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 324

Registry downloads: 11/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('OKTA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
MEDIUMPackage registered 315 days ago within the 1-year AI tool proliferation window.
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 440 bytes).
INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

SHARE INTELLIGENCE WIRE