FlagThis | Sentinel Threat Feed

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference

Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.

Package	Score ▼	Age	Users	Lines	Growth	Verdict	Targeted	Ecosystem	Version	Author	Email domain
	45	426d	9	10	↑0.0/day	Possible Squatted Stub	solana	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: solana-solana-sdk Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 426 Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 438 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('SOLANA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes). INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	429d	17	10	↑0.0/day	Possible Squatted Stub	google	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: vue4-google-auth Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 429 Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 438 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'vue4-google-auth' matches AI hallucination template [vue4] + [google] + [auth]. HIGHClaims critical enterprise brand identity ('GOOGLE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes). INFOPackage affiliated with trusted vendor 'google' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	433d	10	11	↑0.0/day	Possible Squatted Stub	google	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: google-google-conformance Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 433 Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 460 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('GOOGLE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 460 bytes). INFOPackage affiliated with trusted vendor 'google' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	433d	26	11	↑0.1/day	Possible Squatted Stub	langchain	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: paypal-langchain-langchain Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 433 Registry downloads: 26/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 456 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'paypal-examples-langchain' matches AI hallucination template [paypal] + [langchain] + [langchain]. HIGHClaims critical enterprise brand identity ('LANGCHAIN'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 456 bytes). INFOPackage affiliated with trusted vendor 'langchain' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	433d	21	10	↑0.0/day	Possible Squatted Stub	openai	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-openai-fm Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 433 Registry downloads: 21/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 424 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'openai-fm' matches AI hallucination template [node] + [openai] + [fm]. HIGHClaims critical enterprise brand identity ('OPENAI'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 424 bytes). INFOPackage affiliated with trusted vendor 'openai' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	443d	9	5	↑0.0/day	Possible Squatted Stub	ethers	npm	0.0.1	—	—
Package purpose: Ethers integration providing wallet utility for Ethers Matched naming pattern: ethers-ethers-wallet Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 443 Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 5 lines, 79 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('ETHERS'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). HIGHMISSING_SOURCE_REPOSITORY_URL MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 79 bytes). INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Static code signals: MISSING_SOURCE_REPOSITORY_URL Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	443d	11	10	↑0.0/day	Possible Squatted Stub	sol	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-sol-validator Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 443 Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 432 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'sol-validator' matches AI hallucination template [node] + [sol] + [validator]. HIGHClaims critical enterprise brand identity ('SOL'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 432 bytes). INFOPackage affiliated with trusted vendor 'sol' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	443d	12	10	↑0.0/day	Possible Squatted Stub	eth	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-eth-validator Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 443 Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 432 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'eth-validator' matches AI hallucination template [node] + [eth] + [validator]. HIGHClaims critical enterprise brand identity ('ETH'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 432 bytes). INFOPackage affiliated with trusted vendor 'eth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	443d	18	10	↑0.0/day	Possible Squatted Stub	eth	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: eth-eth-v4 Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 443 Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 436 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('ETH'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes). INFOPackage affiliated with trusted vendor 'eth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	446d	8	11	↑0.0/day	Possible Squatted Stub	okta	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: okta-okta-validator Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 446 Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 452 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('OKTA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 452 bytes). INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	446d	14	11	↑0.0/day	Possible Squatted Stub	crypto-com	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: crypto-crypto-com-developer Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 446 Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 478 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'crypto-com-developer-platform-client' matches AI hallucination template [crypto] + [crypto-com] + [developer]. HIGHClaims critical enterprise brand identity ('CRYPTO-COM'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 478 bytes). INFOPackage affiliated with trusted vendor 'crypto-com' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	446d	8	11	↑0.0/day	Possible Squatted Stub	okta	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: okta-okta-private Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 446 Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 458 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('OKTA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 458 bytes). INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	446d	15	10	↑0.0/day	Possible Squatted Stub	groq	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-groq-link Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 446 Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 424 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'groq-link' matches AI hallucination template [node] + [groq] + [link]. HIGHClaims critical enterprise brand identity ('GROQ'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 424 bytes). INFOPackage affiliated with trusted vendor 'groq' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	451d	7	11	↑0.0/day	Possible Squatted Stub	azure	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: azure-azure-datasource Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 451 Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 460 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('AZURE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 460 bytes). INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	451d	14	11	↑0.0/day	Possible Squatted Stub	azure	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: azure-azure-explorer Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 451 Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 466 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('AZURE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 466 bytes). INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	453d	12	11	↑0.0/day	Possible Squatted Stub	solana	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: phantom-solana-in Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 453 Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 460 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'phantom-sign-in-with-solana' matches AI hallucination template [phantom] + [solana] + [in]. HIGHClaims critical enterprise brand identity ('SOLANA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 460 bytes). INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	453d	19	11	↑0.0/day	Possible Squatted Stub	phantom	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: phantom-phantom-monorepo Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 453 Registry downloads: 19/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 446 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('PHANTOM'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 446 bytes). INFOPackage affiliated with trusted vendor 'phantom' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	453d	16	11	↑0.0/day	Possible Squatted Stub	phantom	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: phantom-phantom-sandbox Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 453 Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 446 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('PHANTOM'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 446 bytes). INFOPackage affiliated with trusted vendor 'phantom' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	453d	22	11	↑0.0/day	Possible Squatted Stub	aws	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: aws-aws-react Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 453 Registry downloads: 22/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 456 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('AWS'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 456 bytes). INFOPackage affiliated with trusted vendor 'aws' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	453d	15	11	↑0.0/day	Possible Squatted Stub	auth0	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: auth0-auth0-website Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 453 Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 454 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('AUTH0'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 454 bytes). INFOPackage affiliated with trusted vendor 'auth0' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	453d	11	10	↑0.0/day	Possible Squatted Stub	auth0	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-auth0-app Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 453 Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 424 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'auth0-app' matches AI hallucination template [node] + [auth0] + [app]. HIGHClaims critical enterprise brand identity ('AUTH0'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 424 bytes). INFOPackage affiliated with trusted vendor 'auth0' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	459d	7	10	↑0.0/day	Possible Squatted Stub	azure	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-azure-sentinel Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 459 Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 434 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'azure-sentinel' matches AI hallucination template [node] + [azure] + [sentinel]. HIGHClaims critical enterprise brand identity ('AZURE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 434 bytes). INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	466d	15	5	↑0.0/day	Possible Squatted Stub	claude	npm	0.0.0	—	—
Package purpose: Claude integration providing API client & connector for Claude Matched naming pattern: claude-claude-api Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 466 Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 5 lines, 58 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('CLAUDE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). HIGHMISSING_SOURCE_REPOSITORY_URL MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 58 bytes). INFOPackage affiliated with trusted vendor 'claude' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Static code signals: MISSING_SOURCE_REPOSITORY_URL Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	471d	20	11	↑0.0/day	Possible Squatted Stub	azure	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: azure-azure-filter Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 471 Registry downloads: 20/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 448 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('AZURE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes). INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	471d	16	10	↑0.0/day	Possible Squatted Stub	azure	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-azure-pipelines Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 471 Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 436 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'azure-pipelines' matches AI hallucination template [node] + [azure] + [pipelines]. HIGHClaims critical enterprise brand identity ('AZURE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes). INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	472d	13	10	↑0.0/day	Possible Squatted Stub	eth	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-eth-auditlog Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 472 Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 430 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'eth-auditlog' matches AI hallucination template [node] + [eth] + [auditlog]. HIGHClaims critical enterprise brand identity ('ETH'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 430 bytes). INFOPackage affiliated with trusted vendor 'eth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	473d	9	11	↑0.0/day	Possible Squatted Stub	solana	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: solana-solana-adapter Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 473 Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 444 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('SOLANA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 444 bytes). INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	481d	27	11	↑0.1/day	Possible Squatted Stub	google	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: google-google-httplib2 Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 481 Registry downloads: 27/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 446 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('GOOGLE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 446 bytes). INFOPackage affiliated with trusted vendor 'google' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	486d	16	5	↑0.0/day	Possible Squatted Stub	aws	npm	0.0.1	—	—
Package purpose: Aws integration providing web utility for Create Matched naming pattern: create-aws-web Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 486 Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 5 lines, 72 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'create-aws-web' matches AI hallucination template [create] + [aws] + [web]. HIGHClaims critical enterprise brand identity ('AWS'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). HIGHMISSING_SOURCE_REPOSITORY_URL MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 72 bytes). INFOPackage affiliated with trusted vendor 'aws' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Static code signals: MISSING_SOURCE_REPOSITORY_URL Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	486d	14	5	↑0.0/day	Possible Squatted Stub	aws	npm	0.0.1	—	—
Package purpose: Aws integration providing web utility for Node Matched naming pattern: node-aws-web Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 486 Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 5 lines, 65 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'aws-web' matches AI hallucination template [node] + [aws] + [web]. HIGHClaims critical enterprise brand identity ('AWS'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). HIGHMISSING_SOURCE_REPOSITORY_URL MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 65 bytes). INFOPackage affiliated with trusted vendor 'aws' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection. Static code signals: MISSING_SOURCE_REPOSITORY_URL Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	489d	7	10	↑0.0/day	Possible Squatted Stub	web3	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: rose-web3-utils Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 489 Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 436 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'rose-web3-utils' matches AI hallucination template [rose] + [web3] + [utils]. HIGHClaims critical enterprise brand identity ('WEB3'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes). INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	492d	17	11	↑0.0/day	Possible Squatted Stub	coinbase	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: coinbase-coinbase-history Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 492 Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 470 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('COINBASE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 470 bytes). INFOPackage affiliated with trusted vendor 'coinbase' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	493d	13	11	↑0.0/day	Possible Squatted Stub	ethereum	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: ethereum-ethereum-contract Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 493 Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 452 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('ETHEREUM'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 452 bytes). INFOPackage affiliated with trusted vendor 'ethereum' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	494d	9	10	↑0.0/day	Possible Squatted Stub	ledger	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-ledger-transport Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 494 Registry downloads: 9/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 438 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'ledger-transport' matches AI hallucination template [node] + [ledger] + [transport]. HIGHClaims critical enterprise brand identity ('LEDGER'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes). INFOPackage affiliated with trusted vendor 'ledger' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	496d	6	10	↑0.0/day	Possible Squatted Stub	web3	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-web3-evm Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 496 Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 422 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'web3-evm' matches AI hallucination template [node] + [web3] + [evm]. HIGHClaims critical enterprise brand identity ('WEB3'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 422 bytes). INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	503d	14	11	↑0.0/day	Possible Squatted Stub	solana	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: solana-solana-bot Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 503 Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 440 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('SOLANA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 440 bytes). INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	506d	11	11	↑0.0/day	Possible Squatted Stub	aws	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: data-aws-framework Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 506 Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 468 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'data-solutions-framework-on-aws' matches AI hallucination template [data] + [aws] + [framework]. HIGHClaims critical enterprise brand identity ('AWS'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 468 bytes). INFOPackage affiliated with trusted vendor 'aws' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	506d	20	10	↑0.0/day	Possible Squatted Stub	solana	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-solana-web3 Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 506 Registry downloads: 20/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 428 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'solana-web3' matches AI hallucination template [node] + [solana] + [web3]. HIGHClaims critical enterprise brand identity ('SOLANA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 428 bytes). INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	507d	12	11	↑0.0/day	Possible Squatted Stub	auth0	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: auth0-auth0-management Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 507 Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 470 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('AUTH0'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 470 bytes). INFOPackage affiliated with trusted vendor 'auth0' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	507d	10	11	↑0.0/day	Possible Squatted Stub	azure	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: coralogix-azure-serverless Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 507 Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 458 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'coralogix-azure-serverless' matches AI hallucination template [coralogix] + [azure] + [serverless]. HIGHClaims critical enterprise brand identity ('AZURE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 458 bytes). INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	507d	13	11	↑0.0/day	Possible Squatted Stub	qdrant	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: qdrant-qdrant-js Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 507 Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 462 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('QDRANT'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 462 bytes). INFOPackage affiliated with trusted vendor 'qdrant' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	507d	8	10	↑0.0/day	Possible Squatted Stub	ethers	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-ethers-xdc Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 507 Registry downloads: 8/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 426 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'ethers-xdc' matches AI hallucination template [node] + [ethers] + [xdc]. HIGHClaims critical enterprise brand identity ('ETHERS'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 426 bytes). INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	516d	13	11	↑0.0/day	Possible Squatted Stub	amazon	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: amazon-amazon-central Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 516 Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 448 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('AMAZON'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes). INFOPackage affiliated with trusted vendor 'amazon' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	519d	14	5	↑0.0/day	Possible Squatted Stub	aws	npm	0.0.1	—	—
Package purpose: Aws integration providing web utility for Aws Matched naming pattern: aws-aws-web Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 519 Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 5 lines, 72 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('AWS'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). HIGHMISSING_SOURCE_REPOSITORY_URL MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 72 bytes). INFOPackage affiliated with trusted vendor 'aws' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection. Static code signals: MISSING_SOURCE_REPOSITORY_URL Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	524d	7	11	↑0.0/day	Possible Squatted Stub	gcp	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: gcp-gcp-service Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 524 Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 440 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('GCP'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 440 bytes). INFOPackage affiliated with trusted vendor 'gcp' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	543d	10	11	↑0.0/day	Possible Squatted Stub	solana	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: wormhole-solana-solana Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 543 Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 456 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'wormhole-messenger-solana' matches AI hallucination template [wormhole] + [solana] + [solana]. HIGHClaims critical enterprise brand identity ('SOLANA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 456 bytes). INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	543d	7	11	↑0.0/day	Possible Squatted Stub	solana	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: solana-solana-oracle Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 543 Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 464 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('SOLANA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 464 bytes). INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	549d	7	11	↑0.0/day	Possible Squatted Stub	aws	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: adult-aws-detection Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 549 Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 460 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'adult-content-detection-aws' matches AI hallucination template [adult] + [aws] + [detection]. HIGHClaims critical enterprise brand identity ('AWS'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 460 bytes). INFOPackage affiliated with trusted vendor 'aws' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	559d	6	11	↑0.0/day	Possible Squatted Stub	solana	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: solana-solana-sdk Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 559 Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 444 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('SOLANA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 444 bytes). INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	563d	18	11	↑0.0/day	Possible Squatted Stub	azure	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: azure-azure-api Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 563 Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 446 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('AZURE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 446 bytes). INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 426

Registry downloads: 9/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('SOLANA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes).
INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 429

Registry downloads: 17/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'vue4-google-auth' matches AI hallucination template [vue4] + [google] + [auth].
HIGHClaims critical enterprise brand identity ('GOOGLE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes).
INFOPackage affiliated with trusted vendor 'google' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 433

Registry downloads: 10/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('GOOGLE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 460 bytes).
INFOPackage affiliated with trusted vendor 'google' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 433

Registry downloads: 26/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'paypal-examples-langchain' matches AI hallucination template [paypal] + [langchain] + [langchain].
HIGHClaims critical enterprise brand identity ('LANGCHAIN').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 456 bytes).
INFOPackage affiliated with trusted vendor 'langchain' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 433

Registry downloads: 21/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'openai-fm' matches AI hallucination template [node] + [openai] + [fm].
HIGHClaims critical enterprise brand identity ('OPENAI').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 424 bytes).
INFOPackage affiliated with trusted vendor 'openai' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1

Author: Unknown

Package purpose: Ethers integration providing wallet utility for Ethers

Official vendor account: No

Days since publish: 443

Registry downloads: 9/month

Codebase size: 5 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('ETHERS').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
HIGHMISSING_SOURCE_REPOSITORY_URL
MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 79 bytes).
INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 443

Registry downloads: 11/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'sol-validator' matches AI hallucination template [node] + [sol] + [validator].
HIGHClaims critical enterprise brand identity ('SOL').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 432 bytes).
INFOPackage affiliated with trusted vendor 'sol' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 443

Registry downloads: 12/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'eth-validator' matches AI hallucination template [node] + [eth] + [validator].
HIGHClaims critical enterprise brand identity ('ETH').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 432 bytes).
INFOPackage affiliated with trusted vendor 'eth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 443

Registry downloads: 18/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('ETH').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes).
INFOPackage affiliated with trusted vendor 'eth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 446

Registry downloads: 8/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('OKTA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 452 bytes).
INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 446

Registry downloads: 14/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'crypto-com-developer-platform-client' matches AI hallucination template [crypto] + [crypto-com] + [developer].
HIGHClaims critical enterprise brand identity ('CRYPTO-COM').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 478 bytes).
INFOPackage affiliated with trusted vendor 'crypto-com' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 446

Registry downloads: 8/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('OKTA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 458 bytes).
INFOPackage affiliated with trusted vendor 'okta' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 446

Registry downloads: 15/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'groq-link' matches AI hallucination template [node] + [groq] + [link].
HIGHClaims critical enterprise brand identity ('GROQ').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 424 bytes).
INFOPackage affiliated with trusted vendor 'groq' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 451

Registry downloads: 7/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('AZURE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 460 bytes).
INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 451

Registry downloads: 14/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('AZURE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 466 bytes).
INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 453

Registry downloads: 12/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'phantom-sign-in-with-solana' matches AI hallucination template [phantom] + [solana] + [in].
HIGHClaims critical enterprise brand identity ('SOLANA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 460 bytes).
INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 453

Registry downloads: 19/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('PHANTOM').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 446 bytes).
INFOPackage affiliated with trusted vendor 'phantom' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 453

Registry downloads: 16/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('PHANTOM').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 446 bytes).
INFOPackage affiliated with trusted vendor 'phantom' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 453

Registry downloads: 22/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('AWS').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 456 bytes).
INFOPackage affiliated with trusted vendor 'aws' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 453

Registry downloads: 15/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('AUTH0').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 454 bytes).
INFOPackage affiliated with trusted vendor 'auth0' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 453

Registry downloads: 11/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'auth0-app' matches AI hallucination template [node] + [auth0] + [app].
HIGHClaims critical enterprise brand identity ('AUTH0').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 424 bytes).
INFOPackage affiliated with trusted vendor 'auth0' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 459

Registry downloads: 7/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'azure-sentinel' matches AI hallucination template [node] + [azure] + [sentinel].
HIGHClaims critical enterprise brand identity ('AZURE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 434 bytes).
INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.0

Author: Unknown

Package purpose: Claude integration providing API client & connector for Claude

Official vendor account: No

Days since publish: 466

Registry downloads: 15/month

Codebase size: 5 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('CLAUDE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
HIGHMISSING_SOURCE_REPOSITORY_URL
MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 58 bytes).
INFOPackage affiliated with trusted vendor 'claude' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 471

Registry downloads: 20/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('AZURE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes).
INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 471

Registry downloads: 16/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'azure-pipelines' matches AI hallucination template [node] + [azure] + [pipelines].
HIGHClaims critical enterprise brand identity ('AZURE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes).
INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 472

Registry downloads: 13/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'eth-auditlog' matches AI hallucination template [node] + [eth] + [auditlog].
HIGHClaims critical enterprise brand identity ('ETH').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 430 bytes).
INFOPackage affiliated with trusted vendor 'eth' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 473

Registry downloads: 9/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('SOLANA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 444 bytes).
INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 481

Registry downloads: 27/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('GOOGLE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 446 bytes).
INFOPackage affiliated with trusted vendor 'google' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1

Author: Unknown

Package purpose: Aws integration providing web utility for Create

Official vendor account: No

Days since publish: 486

Registry downloads: 16/month

Codebase size: 5 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'create-aws-web' matches AI hallucination template [create] + [aws] + [web].
HIGHClaims critical enterprise brand identity ('AWS').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
HIGHMISSING_SOURCE_REPOSITORY_URL
MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 72 bytes).
INFOPackage affiliated with trusted vendor 'aws' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1

Author: Unknown

Package purpose: Aws integration providing web utility for Node

Official vendor account: No

Days since publish: 486

Registry downloads: 14/month

Codebase size: 5 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'aws-web' matches AI hallucination template [node] + [aws] + [web].
HIGHClaims critical enterprise brand identity ('AWS').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
HIGHMISSING_SOURCE_REPOSITORY_URL
MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 65 bytes).
INFOPackage affiliated with trusted vendor 'aws' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (85 -> 42) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 489

Registry downloads: 7/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'rose-web3-utils' matches AI hallucination template [rose] + [web3] + [utils].
HIGHClaims critical enterprise brand identity ('WEB3').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes).
INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 492

Registry downloads: 17/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('COINBASE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 470 bytes).
INFOPackage affiliated with trusted vendor 'coinbase' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 493

Registry downloads: 13/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('ETHEREUM').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 452 bytes).
INFOPackage affiliated with trusted vendor 'ethereum' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 494

Registry downloads: 9/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'ledger-transport' matches AI hallucination template [node] + [ledger] + [transport].
HIGHClaims critical enterprise brand identity ('LEDGER').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes).
INFOPackage affiliated with trusted vendor 'ledger' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 496

Registry downloads: 6/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'web3-evm' matches AI hallucination template [node] + [web3] + [evm].
HIGHClaims critical enterprise brand identity ('WEB3').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 422 bytes).
INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 503

Registry downloads: 14/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('SOLANA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 440 bytes).
INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 506

Registry downloads: 11/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'data-solutions-framework-on-aws' matches AI hallucination template [data] + [aws] + [framework].
HIGHClaims critical enterprise brand identity ('AWS').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 468 bytes).
INFOPackage affiliated with trusted vendor 'aws' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 506

Registry downloads: 20/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'solana-web3' matches AI hallucination template [node] + [solana] + [web3].
HIGHClaims critical enterprise brand identity ('SOLANA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 428 bytes).
INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 507

Registry downloads: 12/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('AUTH0').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 470 bytes).
INFOPackage affiliated with trusted vendor 'auth0' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 507

Registry downloads: 10/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'coralogix-azure-serverless' matches AI hallucination template [coralogix] + [azure] + [serverless].
HIGHClaims critical enterprise brand identity ('AZURE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 458 bytes).
INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 507

Registry downloads: 13/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('QDRANT').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 462 bytes).
INFOPackage affiliated with trusted vendor 'qdrant' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 507

Registry downloads: 8/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'ethers-xdc' matches AI hallucination template [node] + [ethers] + [xdc].
HIGHClaims critical enterprise brand identity ('ETHERS').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 426 bytes).
INFOPackage affiliated with trusted vendor 'ethers' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 516

Registry downloads: 13/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('AMAZON').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 448 bytes).
INFOPackage affiliated with trusted vendor 'amazon' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1

Author: Unknown

Package purpose: Aws integration providing web utility for Aws

Official vendor account: No

Days since publish: 519

Registry downloads: 14/month

Codebase size: 5 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('AWS').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
HIGHMISSING_SOURCE_REPOSITORY_URL
MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 72 bytes).
INFOPackage affiliated with trusted vendor 'aws' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (60 -> 30) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 524

Registry downloads: 7/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('GCP').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 440 bytes).
INFOPackage affiliated with trusted vendor 'gcp' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 543

Registry downloads: 10/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'wormhole-messenger-solana' matches AI hallucination template [wormhole] + [solana] + [solana].
HIGHClaims critical enterprise brand identity ('SOLANA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 456 bytes).
INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 543

Registry downloads: 7/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('SOLANA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 464 bytes).
INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 549

Registry downloads: 7/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'adult-content-detection-aws' matches AI hallucination template [adult] + [aws] + [detection].
HIGHClaims critical enterprise brand identity ('AWS').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 460 bytes).
INFOPackage affiliated with trusted vendor 'aws' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 559

Registry downloads: 6/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('SOLANA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 444 bytes).
INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 563

Registry downloads: 18/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('AZURE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 446 bytes).
INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (45 -> 22) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

SHARE INTELLIGENCE WIRE