FlagThis | Sentinel Threat Feed

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Taken Down Flagged, then pulled by the registry About What Sentinel does & why

Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →

Search & filter syntax reference

Filter with verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…), ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors), email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d (combine both for a range), state:live / state:taken_down (registry liveness — the feed defaults to state:live), lead:>7d (days we had a since-removed package flagged while it was still up), or a bare word for a package-name search.

Package	Score ▼	Age	Users	Lines	Growth	Verdict	Targeted	Ecosystem	Version	Author	Email domain	Signals
	45	1656d	14	11	↑0.0/day	Possible Squatted Stub	ledger	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-ledger-confidential Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 1656 Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 444 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'confidential-ledger' matches AI hallucination template [node] + [ledger] + [confidential]. HIGHClaims critical enterprise brand identity ('LEDGER'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFOEstablished pre-AI legacy package registered 1650 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 444 bytes). INFOPackage affiliated with trusted vendor 'ledger' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	1672d	6	11	↑0.0/day	Possible Squatted Stub	clerk	npm	1.0.1-security.4	—	—
Package purpose: security holding package Matched naming pattern: test-clerk-slues Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 1672 Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 474 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'test-mlw2-slues-stipe-clerk-dural' matches AI hallucination template [test] + [clerk] + [slues]. HIGHClaims critical enterprise brand identity ('CLERK'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFOEstablished pre-AI legacy package registered 1648 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 474 bytes). INFOPackage affiliated with trusted vendor 'clerk' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	1676d	19	11	↑0.0/day	Possible Squatted Stub	web3	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: moralis-web3-providers Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 1676 Registry downloads: 19/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 456 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'moralis-web3-providers-ws' matches AI hallucination template [moralis] + [web3] + [providers]. HIGHClaims critical enterprise brand identity ('WEB3'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFOEstablished pre-AI legacy package registered 1663 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 456 bytes). INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	1678d	5	11	↑0.0/day	Possible Squatted Stub	uniswap	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: uniswap-uniswap-adapter Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 1678 Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 442 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('UNISWAP'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFOEstablished pre-AI legacy package registered 1654 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes). INFOPackage affiliated with trusted vendor 'uniswap' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	1678d	5	11	↑0.0/day	Possible Squatted Stub	uniswap	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: uniswap-uniswap-adapter Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 1678 Registry downloads: 5/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 442 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('UNISWAP'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFOEstablished pre-AI legacy package registered 1659 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes). INFOPackage affiliated with trusted vendor 'uniswap' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	1678d	7	11	↑0.0/day	Possible Squatted Stub	solana	npm	0.0.1-security.0	—	—
Package purpose: security holding package Matched naming pattern: solana-solana-function Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 1678 Registry downloads: 7/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 464 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('SOLANA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFOEstablished pre-AI legacy package registered 1657 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 464 bytes). INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	1678d	13	10	↑0.0/day	Possible Squatted Stub	polygon	npm	0.0.1-security.0	—	—
Package purpose: security holding package Matched naming pattern: node-polygon-adapter Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 1678 Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 438 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'polygon-adapter' matches AI hallucination template [node] + [polygon] + [adapter]. HIGHClaims critical enterprise brand identity ('POLYGON'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFOEstablished pre-AI legacy package registered 1658 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes). INFOPackage affiliated with trusted vendor 'polygon' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	1678d	13	10	↑0.0/day	Possible Squatted Stub	gemini	npm	0.0.1-security.0	—	—
Package purpose: security holding package Matched naming pattern: node-gemini-adapter Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 1678 Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 436 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'gemini-adapter' matches AI hallucination template [node] + [gemini] + [adapter]. HIGHClaims critical enterprise brand identity ('GEMINI'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFOEstablished pre-AI legacy package registered 1661 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes). INFOPackage affiliated with trusted vendor 'gemini' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	1678d	14	11	↑0.0/day	Possible Squatted Stub	solana	npm	0.0.1-security.0	—	—
Package purpose: security holding package Matched naming pattern: gauntlet-solana-contracts Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 1678 Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 458 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'gauntlet-solana-contracts' matches AI hallucination template [gauntlet] + [solana] + [contracts]. HIGHClaims critical enterprise brand identity ('SOLANA'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFOEstablished pre-AI legacy package registered 1668 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 458 bytes). INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	1678d	13	11	↑0.0/day	Possible Squatted Stub	bitcoin	npm	0.0.1-security.0	—	—
Package purpose: security holding package Matched naming pattern: bitcoin-bitcoin-rpc Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 1678 Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 456 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('BITCOIN'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFOEstablished pre-AI legacy package registered 1671 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 456 bytes). INFOPackage affiliated with trusted vendor 'bitcoin' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	1678d	10	10	↑0.0/day	Possible Squatted Stub	binance	npm	0.0.1-security.0	—	—
Package purpose: security holding package Matched naming pattern: node-binance-adapter Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 1678 Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 438 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'binance-adapter' matches AI hallucination template [node] + [binance] + [adapter]. HIGHClaims critical enterprise brand identity ('BINANCE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFOEstablished pre-AI legacy package registered 1658 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes). INFOPackage affiliated with trusted vendor 'binance' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	1682d	13	10	↑0.0/day	Possible Squatted Stub	microsoft	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: node-microsoft-api Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 1682 Registry downloads: 13/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 432 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'api-microsoft' matches AI hallucination template [node] + [microsoft] + [api]. HIGHClaims critical enterprise brand identity ('MICROSOFT'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFOEstablished pre-AI legacy package registered 1673 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 432 bytes). INFOPackage affiliated with trusted vendor 'microsoft' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	1692d	15	5	↑0.0/day	Possible Squatted Stub	supabase	npm	0.0.1	—	—
Package purpose: Supabase integration providing orm utility for Node Matched naming pattern: node-supabase-orm Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 1692 Registry downloads: 15/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 5 lines, 114 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'supabase-orm' matches AI hallucination template [node] + [supabase] + [orm]. HIGHClaims critical enterprise brand identity ('SUPABASE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFOEstablished pre-AI legacy package registered 1689 days ago (predates modern AI hallucination waves). HIGHMISSING_SOURCE_REPOSITORY_URL MEDIUMPackage is an empty placeholder (5 LOC, 2 file(s), 114 bytes). INFOPackage affiliated with trusted vendor 'supabase' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection. Static code signals: MISSING_SOURCE_REPOSITORY_URL Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	1712d	16	10	↑0.0/day	Possible Squatted Stub	web3	npm	0.0.1-security.9	—	—
Package purpose: security holding package Matched naming pattern: node-web3-ppos Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 1712 Registry downloads: 16/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 10 lines, 426 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: MEDIUMPackage name 'web3-ppos' matches AI hallucination template [node] + [web3] + [ppos]. HIGHClaims critical enterprise brand identity ('WEB3'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFOEstablished pre-AI legacy package registered 1708 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 426 bytes). INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	1734d	11	11	↑0.0/day	Possible Squatted Stub	azure	npm	0.0.1-security	—	—
Package purpose: security holding package Matched naming pattern: azure-azure-windows Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 1734 Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 11 lines, 470 Bytes across 2 files (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('AZURE'). INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk. MEDIUMPackage has empty or near-zero description (potential reservation stub). INFOEstablished pre-AI legacy package registered 1713 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 470 bytes). INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection. Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	45	2197d	50	5	↑0.0/day	Possible Squatted Stub	azure	pypi	0.0.4.dev1	Amine Kaabachi ping@kaabachi.io	kaabachi.io
Package purpose: A Python SDK for the Azure Databricks REST API 2.0. Claimed homepage: http://github.com/aminekaabachi/azure-databricks-sdk-python Matched naming pattern: azure-azure-sdk Official vendor account: No — publisher domain doesn't match the brand it names Days since publish: 2197 Registry downloads: 50/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE) Codebase size: 5 lines, 105 Bytes across 1 file (EMPTY_STUB) Automated signals flagged: HIGHClaims critical enterprise brand identity ('AZURE'). HIGHPublisher email 'ping@kaabachi.io' is not affiliated with official vendor domain. INFOEstablished pre-AI legacy package registered 2188 days ago (predates modern AI hallucination waves). INFONo malicious install-time hooks or shell cradles detected in package AST. MEDIUMPackage is an empty placeholder (5 LOC, 1 file(s), 105 bytes). Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	45	3707d	—	—	—	Unverified Signal	—	npm	latest	Trey Tacon	—	🪝 🌐
Package purpose: A utility for retrieving the desired AWS EC2 instance metadata from a running instance Static code signals: CREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in package/index.js:11 SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/index.js:18 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	0h	—	—	—	Possible Squatted Stub	—	npm	latest	—	—	🪝
Package purpose: 交互式命令行工具，将 Git 仓库指定分支的代码一键同步到 SVN 仓库。 Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/index.js:19 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	1h	—	—	—	Unverified Signal	—	npm	latest	—	—	🪝
Package purpose: Sun Code: every codebase in one Windows window, each with its own Light Code agent working in parallel Static code signals: BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/dist/sun-fs.exe' in npm tarball SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/sun-code.cjs:52 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	1h	—	—	—	Unverified Signal	—	npm	latest	—	—	🪝 🌐
Package purpose: 知识治理：Word/PDF 导入、图表复核、可恢复任务与固定版本证据检索 Static code signals: SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/lib/client.js:4 SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/lib/client.js:68 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/config.js:7 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	1h	—	—	—	Unverified Signal	—	npm	latest	Bayly AI / Hath0r Core Team	—	🪝
Package purpose: Official Hath0r CLI Node.js Plugin & SDK: non-bypassable enterprise governance engine, AgentGraph quad-graph query bridge, and zero-prompt-tax security gate for Node.js AI agents. Static code signals: SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/client.ts:77 (+1 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/client.ts:29 (+1 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	1h	—	—	—	Unverified Signal	—	npm	latest	Bayly AI / Hath0r Core Team	—	🪝
Package purpose: Non-bypassable enterprise governance engine, AgentGraph query bridge, and zero-prompt-tax security gate for Node.js AI agents. Static code signals: SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/client.ts:77 (+1 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/client.ts:29 (+1 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	1h	—	—	—	Possible Squatted Stub	—	npm	latest	—	—	🪝 🌐
Package purpose: agento: the agent engine (tool loop and guards, Jev as the guide, USD budgets, go/pause/stop hooks, an append-only event log) as a library, plus the `agento` command: a terminal agent that also runs in editors and chats over the Agent Client Protocol. Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/cli/gym/command.js:54 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/cli/gym/command.js:18 (+6 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	1h	—	—	—	Possible Squatted Stub	—	npm	latest	—	—	🪝 🌐
Package purpose: Local Markdown project board and file workspace Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/activity.js:7 (+3 more occurrence(s) elsewhere) SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/web/assets/index-CeMTKJbq.js:1 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	2h	—	—	—	Possible Squatted Stub	—	npm	latest	Inner Animal Media	—	🪝 🌐
Package purpose: Capacitor implementation of the AgentSam capability contract with dependency-injected plugins so the package compiles without the native toolchain. Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index.js:71 (+1 more occurrence(s) elsewhere) SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:179 (+1 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	2h	—	—	—	Unverified Signal	—	npm	latest	—	—	🪝
Package purpose: Control-plane CLI for propagating Nestled template upgrades to downstream projects. Static code signals: SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/lib/feed.js:35 (+2 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/lib/feed.js:237 (+1 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	2h	—	—	—	Unverified Signal	—	npm	latest	Rafael de Paula	—	🪝 🌐
Package purpose: ClickUp MCP Server with direct API client and high rate limits (61 tools) Static code signals: SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/client.js:87 (+1 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/config.js:5 SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/handlers.js:533 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	2h	—	—	—	Possible Squatted Stub	—	npm	latest	—	—	🪝 🌐
Package purpose: Shape from the command line: sign in, list folders, pull them down and push them up. Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/api.js:153 (+2 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/main.js:79 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	2h	—	—	—	Possible Squatted Stub	—	npm	latest	—	—	🪝 🌐
Package purpose: Servidor de Base de Datos Inmortal Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/public/assets/index-jk2bkUa1.js:1 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/server.js:7 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	3h	—	—	—	Possible Squatted Stub	—	npm	latest	Dylan Caponi	—	🪝 🌐
Package purpose: MCP server for Agent Press Wire: AI agents announce launches and distribute press releases to 500+ news sites, paid per call in USDC over x402. Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/guard.js:100 (+1 more occurrence(s) elsewhere) SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:81 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	3h	—	—	—	Possible Squatted Stub	—	npm	latest	—	—	🪝 🌐
Package purpose: Prebuilt storefront and theme configurer that @ab.honeycomb/theme-cli serves during `bee dev`. Build artifacts only. Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/storefront/chunk-FZE3JWPR.js:23 (+1 more occurrence(s) elsewhere) SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/storefront/chunk-SA2G6UON.js:2 (+3 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	3h	—	—	—	Possible Squatted Stub	—	npm	latest	Suresh Ghimire	—	🪝 🌐
Package purpose: Unofficial, type-safe TypeScript SDK for the eSewa payment gateway (ePay v2 and Token payment). Zero dependencies, runs on Node 18+, Bun, Deno and edge runtimes. Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index.cjs:124 (+1 more occurrence(s) elsewhere) SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.cjs:336 (+1 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	4h	—	—	—	Possible Squatted Stub	—	npm	latest	—	—	🪝
Package purpose: Vector CLI binary for windows-arm64 Static code signals: MISSING_SOURCE_REPOSITORY_URL BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bin/vector.exe' in npm tarball Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	4h	—	—	—	Possible Squatted Stub	—	npm	latest	—	—	🪝
Package purpose: Linux installer for Even-Pilot: monitor existing Pi, Codex and Claude sessions on Even G2 Static code signals: LIFECYCLE_SCRIPT: 'postinstall' -> 'node bin/even-pilot-setup.mjs --postinstall' SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/bin/even-pilot-setup.mjs:46 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	4h	—	—	—	Unverified Signal	—	npm	latest	—	—	🪝
Package purpose: Command-line checker and language server for Proschi architecture diagrams Static code signals: SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/dist/server.cjs:8869 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/server.cjs:8911 SOURCE_CODE_ENV_VARS_ACCESS: 'Bulk Environment Harvesting' found in package/dist/server.cjs:8961 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	4h	—	—	—	Possible Squatted Stub	—	npm	latest	—	—	🪝 🌐
Package purpose: Drop-in web component for depositing to and withdrawing from Stellar over Lumenline. Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/index.js:2605 SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/index.js:2624 SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:12303 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	4h	—	—	—	Unverified Signal	—	npm	latest	—	—	🪝 🌐
Package purpose: Use AI Subscription as OpenAI SDK adapter (Codex/Kimi/...) Static code signals: SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/providers/codex/images.js:349 (+13 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/demo/server/index.js:2 (+1 more occurrence(s) elsewhere) SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/protocols/responses.js:320 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	4h	—	—	—	Possible Squatted Stub	—	npm	latest	—	—	🪝 🌐
Package purpose: Deploy applications with Revenact Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/index.js:83 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/index.js:47 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	5h	—	—	—	Possible Squatted Stub	—	npm	latest	Vasiliy Loginevskiy	—	🪝
Package purpose: require or eval modules Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_DYNAMIC_EXECUTION: 'vm.runInContext' found in package/index.js:43 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	5h	—	—	—	Possible Squatted Stub	—	npm	latest	—	—	🪝 🌐
Package purpose: Secure MCP server for Mambu API v2 lending operations Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/mambu/client.js:67 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/mambu/client.js:4 (+1 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	5h	—	—	—	Unverified Signal	—	npm	latest	Nnamdi Michael Okpala	—	🪝
Package purpose: GNU Smalltalk binding (C call-outs) for the Polycall C library, binding ABI v1 Static code signals: SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/scripts/build-native.js:35 (+3 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/scripts/build-native.js:35 (+2 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	6h	—	—	—	Unverified Signal	—	npm	latest	—	—	🪝
Package purpose: Embedded key-value store (babeldb: fjall + WAL, group-committed writes) as a native Node.js addon Static code signals: SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:59 SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/index.js:59 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/index.js:67 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	6h	—	—	—	Possible Squatted Stub	—	npm	latest	—	—	🪝
Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_DYNAMIC_EXECUTION: 'require('child_process')' found in package/index.js:1 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	6h	—	—	—	Unverified Signal	—	pypi	1.1.0	—	—	🪝
Package purpose: Nexargio Sovereign Cyber-Physics Threat Scanner for MCP Static code signals: CREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in nexargio_mcp-1.1.0/nexargio_mcp.py:184 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in nexargio_mcp-1.1.0/nexargio_mcp.py:65 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	40	7h	—	—	—	Unverified Signal	—	pypi	0.1.0	Maroon Elephant contributors	—	🪝
Package purpose: AI-era threat modeling & repo scanning — OWASP-2026 aligned (LLM / Agentic / Data Security / MCP). Deterministic-first, zero-dependency core. Static code signals: CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in maroon_elephant-0.1.0/maroon/analyzer.py:115 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in maroon_elephant-0.1.0/maroon/cli.py:43 CREDENTIAL_PATH_HARVESTING: 'Cloud Instance Metadata (AWS/GCP/Azure IMDS)' found in maroon_elephant-0.1.0/maroon/ingest.py:126 CREDENTIAL_PATH_HARVESTING: 'IDE / AI Agent Configuration Hijacking' found in maroon_elephant-0.1.0/maroon/ingest.py:30 SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in maroon_elephant-0.1.0/maroon/ingest.py:159 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in maroon_elephant-0.1.0/maroon/ingest.py:157 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in maroon_elephant-0.1.0/maroon/reporters/terminal.py:22 SOURCE_CODE_DYNAMIC_EXECUTION: 'Python Subprocess / OS Execution' found in maroon_elephant-0.1.0/maroon/subscanners/greypanda.py:34 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI →
	40	7h	—	—	—	Unverified Signal	—	npm	latest	—	—	🪝
Package purpose: Shared decision memory for AI coding agents. Static code signals: SOURCE_CODE_DYNAMIC_EXECUTION: 'execSync/spawnSync' found in package/dist/review/actor-name.js:5 (+7 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/review/actor-name.js:24 (+16 more occurrence(s) elsewhere) SOURCE_CODE_DYNAMIC_EXECUTION: 'eval()' found in package/dist/store/frontmatter.js:123 (+1 more occurrence(s) elsewhere) SOURCE_CODE_ENV_VARS_ACCESS: 'Sensitive Token Harvesting' found in package/dist/capture/redact-patterns.js:266 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	7h	—	—	—	Unverified Signal	—	npm	latest	—	—	🪝 🌐
Package purpose: Squire — AI-native desktop & browser automation over MCP: drive a real browser like a human (multi-tab, navigation-tolerant scripts, vision grounding). Built on the appium-mcp foundation; retains Appium mobile tools. Not affiliated with Appium. Static code signals: SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/activity-log.js:10 (+23 more occurrence(s) elsewhere) SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/hunch/client.js:33 (+7 more occurrence(s) elsewhere) SOURCE_CODE_ENCODED_PAYLOAD: 'Buffer.from(..., 'base64')' found in package/dist/tools/interactions/screenshot.js:42 (+1 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	7h	—	—	—	Possible Squatted Stub	—	npm	latest	—	—	🪝 🌐
Package purpose: The pulse command: manage Pulse tasks, tags and action reports from the terminal, scripts and AI agents. Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/bin.mjs:125 SOURCE_CODE_ENV_VARS_ACCESS: 'Environment Variable Access (process.env / os.environ)' found in package/dist/bin.mjs:1122 Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	8h	—	—	—	Possible Squatted Stub	—	npm	latest	—	—	🪝
Package purpose: Reward new-api users based on the usage of their contributed channels Static code signals: MISSING_SOURCE_REPOSITORY_URL BUNDLED_NATIVE_BINARY: Unexpected compiled binary 'package/bin/newapi-give-and-take.exe' in npm tarball Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →
	40	8h	—	—	—	Possible Squatted Stub	—	npm	latest	—	—	🪝 🌐
Static code signals: MISSING_SOURCE_REPOSITORY_URL SOURCE_CODE_ENCODED_PAYLOAD: 'atob()' found in package/dist/cli.js:1299 (+2 more occurrence(s) elsewhere) SOURCE_CODE_NETWORK_CALL: 'fetch/axios/XMLHttpRequest' found in package/dist/cli.js:19769 (+3 more occurrence(s) elsewhere) Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 1656

Registry downloads: 14/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'confidential-ledger' matches AI hallucination template [node] + [ledger] + [confidential].
HIGHClaims critical enterprise brand identity ('LEDGER').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFOEstablished pre-AI legacy package registered 1650 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 444 bytes).
INFOPackage affiliated with trusted vendor 'ledger' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 1.0.1-security.4

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 1672

Registry downloads: 6/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'test-mlw2-slues-stipe-clerk-dural' matches AI hallucination template [test] + [clerk] + [slues].
HIGHClaims critical enterprise brand identity ('CLERK').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFOEstablished pre-AI legacy package registered 1648 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 474 bytes).
INFOPackage affiliated with trusted vendor 'clerk' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 1676

Registry downloads: 19/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'moralis-web3-providers-ws' matches AI hallucination template [moralis] + [web3] + [providers].
HIGHClaims critical enterprise brand identity ('WEB3').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFOEstablished pre-AI legacy package registered 1663 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 456 bytes).
INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 1678

Registry downloads: 5/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('UNISWAP').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFOEstablished pre-AI legacy package registered 1654 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes).
INFOPackage affiliated with trusted vendor 'uniswap' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 1678

Registry downloads: 5/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('UNISWAP').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFOEstablished pre-AI legacy package registered 1659 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 442 bytes).
INFOPackage affiliated with trusted vendor 'uniswap' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security.0

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 1678

Registry downloads: 7/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('SOLANA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFOEstablished pre-AI legacy package registered 1657 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 464 bytes).
INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security.0

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 1678

Registry downloads: 13/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'polygon-adapter' matches AI hallucination template [node] + [polygon] + [adapter].
HIGHClaims critical enterprise brand identity ('POLYGON').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFOEstablished pre-AI legacy package registered 1658 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes).
INFOPackage affiliated with trusted vendor 'polygon' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security.0

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 1678

Registry downloads: 13/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'gemini-adapter' matches AI hallucination template [node] + [gemini] + [adapter].
HIGHClaims critical enterprise brand identity ('GEMINI').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFOEstablished pre-AI legacy package registered 1661 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 436 bytes).
INFOPackage affiliated with trusted vendor 'gemini' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security.0

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 1678

Registry downloads: 14/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'gauntlet-solana-contracts' matches AI hallucination template [gauntlet] + [solana] + [contracts].
HIGHClaims critical enterprise brand identity ('SOLANA').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFOEstablished pre-AI legacy package registered 1668 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 458 bytes).
INFOPackage affiliated with trusted vendor 'solana' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security.0

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 1678

Registry downloads: 13/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('BITCOIN').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFOEstablished pre-AI legacy package registered 1671 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 456 bytes).
INFOPackage affiliated with trusted vendor 'bitcoin' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security.0

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 1678

Registry downloads: 10/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'binance-adapter' matches AI hallucination template [node] + [binance] + [adapter].
HIGHClaims critical enterprise brand identity ('BINANCE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFOEstablished pre-AI legacy package registered 1658 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 438 bytes).
INFOPackage affiliated with trusted vendor 'binance' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 1682

Registry downloads: 13/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'api-microsoft' matches AI hallucination template [node] + [microsoft] + [api].
HIGHClaims critical enterprise brand identity ('MICROSOFT').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFOEstablished pre-AI legacy package registered 1673 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 432 bytes).
INFOPackage affiliated with trusted vendor 'microsoft' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1

Author: Unknown

Package purpose: Supabase integration providing orm utility for Node

Official vendor account: No

Days since publish: 1692

Registry downloads: 15/month

Codebase size: 5 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'supabase-orm' matches AI hallucination template [node] + [supabase] + [orm].
HIGHClaims critical enterprise brand identity ('SUPABASE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFOEstablished pre-AI legacy package registered 1689 days ago (predates modern AI hallucination waves).
HIGHMISSING_SOURCE_REPOSITORY_URL
MEDIUMPackage is an empty placeholder (5 LOC, 2 file(s), 114 bytes).
INFOPackage affiliated with trusted vendor 'supabase' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (70 -> 35) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security.9

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 1712

Registry downloads: 16/month

Codebase size: 10 lines (EMPTY_STUB)

Automated signals flagged:

MEDIUMPackage name 'web3-ppos' matches AI hallucination template [node] + [web3] + [ppos].
HIGHClaims critical enterprise brand identity ('WEB3').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFOEstablished pre-AI legacy package registered 1708 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (10 LOC, 2 file(s), 426 bytes).
INFOPackage affiliated with trusted vendor 'web3' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (55 -> 27) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

Package: npm · 0.0.1-security

Author: Unknown

Package purpose: security holding package

Official vendor account: No

Days since publish: 1734

Registry downloads: 11/month

Codebase size: 11 lines (EMPTY_STUB)

Automated signals flagged:

HIGHClaims critical enterprise brand identity ('AZURE').
INFOPackage release verified with cryptographic build provenance (npm_slsa_sigstore). Guarantees authentic repository build pipeline and eliminates publisher domain spoofing risk.
MEDIUMPackage has empty or near-zero description (potential reservation stub).
INFOEstablished pre-AI legacy package registered 1713 days ago (predates modern AI hallucination waves).
INFONo malicious install-time hooks or shell cradles detected in package AST.
MEDIUMPackage is an empty placeholder (11 LOC, 2 file(s), 470 bytes).
INFOPackage affiliated with trusted vendor 'azure' (provenance:npm_slsa_sigstore). Applied 50% threat score dampening (30 -> 15) to reduce false positives while retaining hijack/takeover detection.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on npm →

SHARE INTELLIGENCE WIRE