🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference
Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.
Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
45 326d 10 11 ↑0.0/day
Possible Squatted Stub
okta npm 0.0.1-security.1 — —
Package purpose: security holding package
Matched naming pattern: okta-okta-wekto
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 326
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 446 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('OKTA').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 302 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 446 bytes).
  • INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 326d 12 11 ↑0.0/day
Possible Squatted Stub
okta npm 0.0.1-security.1 — —
Package purpose: security holding package
Matched naming pattern: okta-okta-breki
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 326
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 442 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('OKTA').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 308 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes).
  • INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 326d 11 11 ↑0.0/day
Possible Squatted Stub
okta npm 0.0.1-security.1 — —
Package purpose: security holding package
Matched naming pattern: okta-okta-wekto
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 326
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 450 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('OKTA').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 304 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 450 bytes).
  • INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 326d 12 11 ↑0.0/day
Possible Squatted Stub
okta npm 0.0.1-security.1 — —
Package purpose: security holding package
Matched naming pattern: okta-okta-sukiwir
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 326
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 444 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('OKTA').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 314 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 444 bytes).
  • INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 326d 12 11 ↑0.0/day
Possible Squatted Stub
okta npm 0.0.1-security.1 — —
Package purpose: security holding package
Matched naming pattern: okta-okta-wekto
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 326
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 440 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('OKTA').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 310 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 440 bytes).
  • INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 326d 13 11 ↑0.0/day
Possible Squatted Stub
okta npm 0.0.1-security.1 — —
Package purpose: security holding package
Matched naming pattern: okta-okta-breki
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 326
Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 440 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('OKTA').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 317 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 440 bytes).
  • INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 326d 10 11 ↑0.0/day
Possible Squatted Stub
okta npm 0.0.1-security.1 — —
Package purpose: security holding package
Matched naming pattern: okta-okta-kyuki
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 326
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 448 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('OKTA').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 315 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes).
  • INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 328d 10 10 ↑0.0/day
Possible Squatted Stub
phantom npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-phantom-fixer
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 328
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 432 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'phantom-fixer' matches AI hallucination template [node] + [phantom] + [fixer].
  • HIGHClaims critical enterprise brand identity ('PHANTOM').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 320 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 432 bytes).
  • INFOPackage affiliated with trusted vendor 'phantom' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 328d 13 10 ↑0.0/day
Possible Squatted Stub
cursor npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-cursor-bypass
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 328
Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 432 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'cursor-bypass' matches AI hallucination template [node] + [cursor] + [bypass].
  • HIGHClaims critical enterprise brand identity ('CURSOR').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 303 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 432 bytes).
  • INFOPackage affiliated with trusted vendor 'cursor' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 338d 5 10 ↑0.0/day
Possible Squatted Stub
web3 npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-web3-wc
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 338
Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 420 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'web3-wc' matches AI hallucination template [node] + [web3] + [wc].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 318 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 420 bytes).
  • INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 339d 13 11 ↑0.0/day
Possible Squatted Stub
google npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: epic-google-maps
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 339
Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 450 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'epic-google-maps-tools' matches AI hallucination template [epic] + [google] + [maps].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 325 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 450 bytes).
  • INFOPackage affiliated with trusted vendor 'google' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 339d 9 10 ↑0.0/day
Possible Squatted Stub
trezor npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-trezor-rollout
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 339
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 434 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'trezor-rollout' matches AI hallucination template [node] + [trezor] + [rollout].
  • HIGHClaims critical enterprise brand identity ('TREZOR').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 317 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 434 bytes).
  • INFOPackage affiliated with trusted vendor 'trezor' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 340d 8 11 ↑0.0/day
Possible Squatted Stub
binance npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: binance-binance-js
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 340
Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 446 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('BINANCE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 323 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 446 bytes).
  • INFOPackage affiliated with trusted vendor 'binance' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 354d 9 11 ↑0.0/day
Possible Squatted Stub
cryptocom npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: cryptocom-cryptocom-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 354
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 446 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('CRYPTOCOM').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 332 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 446 bytes).
  • INFOPackage affiliated with trusted vendor 'cryptocom' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 359d 16 10 ↑0.0/day
Possible Squatted Stub
ledger npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-ledger-orbital
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 359
Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 434 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'orbital-ledger' matches AI hallucination template [node] + [ledger] + [orbital].
  • HIGHClaims critical enterprise brand identity ('LEDGER').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 354 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 434 bytes).
  • INFOPackage affiliated with trusted vendor 'ledger' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 359d 9 10 ↑0.0/day
Possible Squatted Stub
ethers npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: web3j-ethers-ethers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 359
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 436 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'web3j-io-ethers' matches AI hallucination template [web3j] + [ethers] + [ethers].
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 351 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes).
  • INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 369d 19 2 ↑0.1/day
Possible Squatted Stub
weaviate pypi 0.0.0a1 — af-support@microsoft.com microsoft.com
Package purpose: Microsoft Agent Framework weaviate.
Claimed homepage: https://pypi.org/project/agent-framework-weaviate/
Matched naming pattern: agent-weaviate-weaviate
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 369
Registry downloads: 19/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 37 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'agent-framework-weaviate' matches AI hallucination template [agent] + [weaviate] + [weaviate].
  • HIGHClaims critical enterprise brand identity ('WEAVIATE').
  • INFOPackage lineage verified as trusted vendor 'microsoft' via domain:microsoft.com.
  • MEDIUMPackage registered 360 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 2 file(s), 37 bytes).
  • INFOPackage affiliated with trusted vendor 'microsoft' (domain:microsoft.com). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
45 369d 25 2 ↑0.1/day
Possible Squatted Stub
pinecone pypi 0.0.0a1 — af-support@microsoft.com microsoft.com
Package purpose: Microsoft Agent Framework Pinecone.
Claimed homepage: https://pypi.org/project/agent-framework-pinecone/
Matched naming pattern: agent-pinecone-pinecone
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 369
Registry downloads: 25/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 37 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'agent-framework-pinecone' matches AI hallucination template [agent] + [pinecone] + [pinecone].
  • HIGHClaims critical enterprise brand identity ('PINECONE').
  • INFOPackage lineage verified as trusted vendor 'microsoft' via domain:microsoft.com.
  • MEDIUMPackage registered 360 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 2 file(s), 37 bytes).
  • INFOPackage affiliated with trusted vendor 'microsoft' (domain:microsoft.com). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
45 369d 22 2 ↑0.1/day
Possible Squatted Stub
chroma pypi 0.0.0a1 — af-support@microsoft.com microsoft.com
Package purpose: Microsoft Agent Framework Chroma.
Claimed homepage: https://pypi.org/project/agent-framework-chroma/
Matched naming pattern: agent-chroma-chroma
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 369
Registry downloads: 22/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 37 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'agent-framework-chroma' matches AI hallucination template [agent] + [chroma] + [chroma].
  • HIGHClaims critical enterprise brand identity ('CHROMA').
  • INFOPackage lineage verified as trusted vendor 'microsoft' via domain:microsoft.com.
  • MEDIUMPackage registered 360 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 2 file(s), 37 bytes).
  • INFOPackage affiliated with trusted vendor 'microsoft' (domain:microsoft.com). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
45 369d 22 2 ↑0.1/day
Possible Squatted Stub
mistralai pypi 0.0.0a1 — af-support@microsoft.com microsoft.com
Package purpose: Microsoft Agent Framework MistralAI.
Claimed homepage: https://pypi.org/project/agent-framework-mistralai/
Matched naming pattern: agent-mistralai-mistralai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 369
Registry downloads: 22/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 37 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'agent-framework-mistralai' matches AI hallucination template [agent] + [mistralai] + [mistralai].
  • HIGHClaims critical enterprise brand identity ('MISTRALAI').
  • INFOPackage lineage verified as trusted vendor 'microsoft' via domain:microsoft.com.
  • MEDIUMPackage registered 360 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 2 file(s), 37 bytes).
  • INFOPackage affiliated with trusted vendor 'microsoft' (domain:microsoft.com). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
45 369d 0 2 ↑0.0/day
Possible Squatted Stub
google pypi 0.0.0a1 — af-support@microsoft.com microsoft.com
Package purpose: Microsoft Agent Framework Google.
Claimed homepage: https://pypi.org/project/agent-framework-google/
Matched naming pattern: agent-google-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 369
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 37 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'agent-framework-google' matches AI hallucination template [agent] + [google] + [google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • INFOPackage lineage verified as trusted vendor 'microsoft' via domain:microsoft.com.
  • MEDIUMPackage registered 360 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 2 file(s), 37 bytes).
  • INFOPackage affiliated with trusted vendor 'microsoft' (domain:microsoft.com). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
45 369d 31 2 ↑0.1/day
Possible Squatted Stub
aws pypi 0.0.0a1 — af-support@microsoft.com microsoft.com
Package purpose: Microsoft Agent Framework AWS.
Claimed homepage: https://pypi.org/project/agent-framework-aws/
Matched naming pattern: agent-aws-aws
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 369
Registry downloads: 31/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 37 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'agent-framework-aws' matches AI hallucination template [agent] + [aws] + [aws].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • INFOPackage lineage verified as trusted vendor 'microsoft' via domain:microsoft.com.
  • MEDIUMPackage registered 360 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 2 file(s), 37 bytes).
  • INFOPackage affiliated with trusted vendor 'microsoft' (domain:microsoft.com). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
45 370d 17 10 ↑0.0/day
Possible Squatted Stub
eth npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: eth-eth-txs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 370
Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 430 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('ETH').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage registered 365 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 430 bytes).
  • INFOPackage affiliated with trusted vendor 'eth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 382d 9 10 ↑0.0/day
Possible Squatted Stub
web3 npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-web3-ws
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 382
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 420 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'web3-ws' matches AI hallucination template [node] + [web3] + [ws].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 420 bytes).
  • INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 382d 10 5 ↑0.0/day
Possible Squatted Stub
ripple npm 1.0.0 — —
Package purpose: Ripple integration providing i18n utility for Node
Matched naming pattern: node-ripple-i18n
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 382
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 50 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ripple-i18n' matches AI hallucination template [node] + [ripple] + [i18n].
  • HIGHClaims critical enterprise brand identity ('RIPPLE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 50 bytes).
  • INFOPackage affiliated with trusted vendor 'ripple' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 382d 9 5 ↑0.0/day
Possible Squatted Stub
ripple npm 1.0.0 — —
Package purpose: Ripple integration providing form utility for Node
Matched naming pattern: node-ripple-form
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 382
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 50 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ripple-form' matches AI hallucination template [node] + [ripple] + [form].
  • HIGHClaims critical enterprise brand identity ('RIPPLE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 50 bytes).
  • INFOPackage affiliated with trusted vendor 'ripple' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 382d 10 5 ↑0.0/day
Possible Squatted Stub
ripple npm 1.0.0 — —
Package purpose: Ripple integration providing icons utility for Node
Matched naming pattern: node-ripple-icons
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 382
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 5 lines, 51 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ripple-icons' matches AI hallucination template [node] + [ripple] + [icons].
  • HIGHClaims critical enterprise brand identity ('RIPPLE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHMISSING_SOURCE_REPOSITORY_URL
  • MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 51 bytes).
  • INFOPackage affiliated with trusted vendor 'ripple' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.
Static code signals:
  • MISSING_SOURCE_REPOSITORY_URL

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 388d 10 10 ↑0.0/day
Possible Squatted Stub
ethers npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-ethers-sdk
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 388
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 426 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'sdk-ethers' matches AI hallucination template [node] + [ethers] + [sdk].
  • HIGHClaims critical enterprise brand identity ('ETHERS').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 426 bytes).
  • INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 389d 13 10 ↑0.0/day
Possible Squatted Stub
google npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-google-payment
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 389
Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 434 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'google-payment' matches AI hallucination template [node] + [google] + [payment].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 434 bytes).
  • INFOPackage affiliated with trusted vendor 'google' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 398d 14 11 ↑0.0/day
Possible Squatted Stub
openai npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: text-openai-embedding
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 398
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 454 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'text-openai-embedding-js' matches AI hallucination template [text] + [openai] + [embedding].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 454 bytes).
  • INFOPackage affiliated with trusted vendor 'openai' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 398d 14 11 ↑0.0/day
Possible Squatted Stub
azure npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: azure-azure-api
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 398
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 466 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 466 bytes).
  • INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 398d 14 11 ↑0.0/day
Possible Squatted Stub
azure npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: azure-azure-ai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 398
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 456 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 456 bytes).
  • INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 398d 9 10 ↑0.0/day
Possible Squatted Stub
azure npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: azure-azure-ui
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 398
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 432 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 432 bytes).
  • INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 398d 6 11 ↑0.0/day
Possible Squatted Stub
azure npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: azure-azure-stresstests
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 398
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 448 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes).
  • INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 398d 11 11 ↑0.0/day
Possible Squatted Stub
azure npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: azure-azure-templates
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 398
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 468 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 468 bytes).
  • INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 402d 19 11 ↑0.0/day
Possible Squatted Stub
copilot npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: global-copilot-menu
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 402
Registry downloads: 19/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 444 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'global-copilot-menu' matches AI hallucination template [global] + [copilot] + [menu].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 444 bytes).
  • INFOPackage affiliated with trusted vendor 'copilot' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 403d 9 11 ↑0.0/day
Possible Squatted Stub
azure npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: azure-azure-parameterflattening
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 403
Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 464 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 464 bytes).
  • INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 403d 4 11 ↑0.0/day
Possible Squatted Stub
supabase npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-supabase-tailwind
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 403
Registry downloads: 4/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 440 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'tailwind-supabase' matches AI hallucination template [node] + [supabase] + [tailwind].
  • HIGHClaims critical enterprise brand identity ('SUPABASE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 440 bytes).
  • INFOPackage affiliated with trusted vendor 'supabase' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 404d 16 11 ↑0.0/day
Possible Squatted Stub
eth npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: eth-eth-staking
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 404
Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 450 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('ETH').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 450 bytes).
  • INFOPackage affiliated with trusted vendor 'eth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 405d 12 11 ↑0.0/day
Possible Squatted Stub
microsoft npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: microsoft-microsoft-api
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 405
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 446 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 446 bytes).
  • INFOPackage affiliated with trusted vendor 'microsoft' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 410d 15 10 ↑0.0/day
Possible Squatted Stub
metamask npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-metamask-api
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 410
Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 430 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'metamask-api' matches AI hallucination template [node] + [metamask] + [api].
  • HIGHClaims critical enterprise brand identity ('METAMASK').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 430 bytes).
  • INFOPackage affiliated with trusted vendor 'metamask' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 411d 15 11 ↑0.0/day
Possible Squatted Stub
azure npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: azure-azure-node
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 411
Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 448 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes).
  • INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 416d 11 11 ↑0.0/day
Possible Squatted Stub
web3 npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: web3-web3-swisstronik
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 416
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 452 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 452 bytes).
  • INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 416d 24 10 ↑0.1/day
Possible Squatted Stub
openai npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-openai-tsp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 416
Registry downloads: 24/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 426 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'openai-tsp' matches AI hallucination template [node] + [openai] + [tsp].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 426 bytes).
  • INFOPackage affiliated with trusted vendor 'openai' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 416d 11 10 ↑0.0/day
Possible Squatted Stub
ledger npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-ledger-provider
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 416
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 436 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'ledger-provider' matches AI hallucination template [node] + [ledger] + [provider].
  • HIGHClaims critical enterprise brand identity ('LEDGER').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes).
  • INFOPackage affiliated with trusted vendor 'ledger' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 416d 20 11 ↑0.0/day
Possible Squatted Stub
microsoft npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: microsoft-microsoft-integrations
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 416
Registry downloads: 20/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 462 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 462 bytes).
  • INFOPackage affiliated with trusted vendor 'microsoft' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 418d 13 10 ↑0.0/day
Possible Squatted Stub
google npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-google-jsdocless
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 418
Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 438 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'google-jsdocless' matches AI hallucination template [node] + [google] + [jsdocless].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes).
  • INFOPackage affiliated with trusted vendor 'google' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 423d 10 10 ↑0.0/day
Possible Squatted Stub
auth0 npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: auth0-auth0-server
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 423
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 438 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('AUTH0').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes).
  • INFOPackage affiliated with trusted vendor 'auth0' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 423d 12 10 ↑0.0/day
Possible Squatted Stub
auth0 npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: node-auth0-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 423
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 10 lines, 426 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'auth0-base' matches AI hallucination template [node] + [auth0] + [base].
  • HIGHClaims critical enterprise brand identity ('AUTH0').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 426 bytes).
  • INFOPackage affiliated with trusted vendor 'auth0' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
45 425d 11 11 ↑0.0/day
Possible Squatted Stub
openai npm 0.0.1-security — —
Package purpose: security holding package
Matched naming pattern: openai-openai-console
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 425
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 466 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 466 bytes).
  • INFOPackage affiliated with trusted vendor 'openai' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →
« Prev Next »
LINK COPIED TO CLIPBOARD