Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Browser/Node.js client for KZTEK Finger Agent (BioMini, ZKTeco fingerprint readers)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Sarah Temmel | — | 🪝 🌐 | |
|
Package purpose: Auralis als Werkzeug fuer KI-Assistenten: Bilder, Videos und Sprachausgabe direkt im Gespraech erzeugen.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Pi skill for driving TUI, REPL, and stdin programs through an isolated tmux PTY helper.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Authenticated Supply Chain uploads for centrally governed Signals Corps scans
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Loopback-only local companion for CodingTool.dev AI usage tracking
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Deterministic OpenSpec candidate-code-scope CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A minimal coding agent built on Pi — Extension 选装，不做中间层
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Matthieu Pesnot-Pin | — | 🪝 🌐 | |
|
Package purpose: MCP server that connects an AI agent to one Telegram channel through a bot: read incoming posts, publish, edit, delete, pin, react and exchange files.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Nikita Sokolsky | — | 🪝 | |
|
Package purpose: MCP server and CLI for searching and downloading books and articles from Anna's Archive
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Meterbox MCP server: the hosted /mcp endpoint's tools and policy, plus a stdio bridge (npx @meterbox/mcp) for MCP clients that only speak stdio.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Radiant Software Ltd | — | 🪝 🌐 | |
|
Package purpose: Shablonix command-line client for document generation
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | SmartLifeGames | — | 🪝 🌐 | |
|
Package purpose: Most MCP do platformy SmartLifeGames — narzędzia platformy (baza wiedzy, generowanie obrazów, modele) dla agentów uruchamiających serwery MCP lokalnie.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | XYZ | — | 🪝 🌐 | |
|
Package purpose: XYZ Studio CLI: design and redesign websites through AI coding CLIs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Web novel writing platform for DeepSeek Harness: writing-desk panel, novel_* agent tools, 16 bundled writing skills, and the novel Remote namespace
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Sanjay Kumar | — | 🪝 | |
|
Package purpose: SelectorsHub for AI agents: verified XPath, CSS, Playwright, Selenium, Cypress and WebdriverIO locators from the SelectorsHub engine, including shadow DOM, iframes and SVG.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | ODESTINY | — | 🪝 🌐 | |
|
Package purpose: Modern, standalone feedback and bug reporting widget for Vue 3 with screenshot capture and Telegram/Webhook integration.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: React player SDK for CHORKI BYTES — vertical short videos via Shaka Player.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Write one annotated body of facts once and render a gated, per-audience version of one communication for every reader.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Pranay Prakash | — | 🪝 🌐 | |
|
Package purpose: A Workflow SDK World that runs in the browser: IndexedDB storage, a durable queue consumed by one tab at a time, and streams over BroadcastChannel.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Slid Phi Labs | — | 🪝 🌐 | |
|
Package purpose: Dual-licensed hosted lossless compression client. Open license or a paid grant. Calls the lab host; every pathway runs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Paperclip TTS | — | 🪝 🌐 | |
|
Package purpose: Paperclip plugin that speaks new agent chat comments aloud in the browser.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Convert PDF bank statements to CSV or JSON from the command line, using the Bank Statement Converter API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | EightDoor | — | 🪝 🌐 | |
|
Package purpose: On-device PII anonymization core SDK (opencode-rehydra-core). Ships the OpenCode plugin as opencode-rehydar.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | wwj | — | 🪝 | |
|
Package purpose: Configurable LSP tools for Pi agents: Go, Rust, Java (Lombok-aware), TypeScript and Vue diagnostics, hovers, definitions, references and symbols
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Quo | — | 🪝 | |
|
Package purpose: Aiterm's steer delivery as a library: deliver text to the parent AI session that called your MCP tool — steered into the running turn when it is busy, delivered normally when it is idle. Codex (official queue + sync hooks), Claude Code (asyncRewake hooks)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Slid Phi Labs | — | 🪝 🌐 | |
|
Package purpose: Dual-licensed hosted compression client, quotes, checkout, and MCP. Open license or a paid grant. First 2 GB/month free, then 8¢/GB.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Slid Phi Labs | — | 🪝 🌐 | |
|
Package purpose: Dual-licensed compression client. Zeros pack locally to 8 bytes. Everything else uses hosted AWARE (every pathway on the lab machine).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Prisma AIRS Harness: a local coding agent using your Prisma AIRS AI Gateway.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | felixmosh | — | 🪝 | |
|
Package purpose: A Dashboard server API built on top of bull or bullmq.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Headless Cloudinary media layer: config, upload/format validation, HMAC URL and upload signing, delivery URL transforms, a browser upload client, and a typed CloudinaryClient. Framework-agnostic; the DB-backed service and audit trail stay in the app.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Pick coding models by benchmark score and cost in Paseo.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local-first AI engineering company operating system
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP + CLI toolkit for teams: T-shaped skills, DSL specs, docs-hub, tests-docs, codegen, and audit gates with AI agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Server-side AI crawler tracking: see which AI bots (ChatGPT, Claude, Perplexity, Gemini…) crawl your site, which pages they read, and which ones 404.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ZenTao MCP: projects, executions, stories, tasks, bugs, testtasks via REST Token + webpage form for stories
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: flowcerta binary for Windows x64. Installed automatically by @flowcerta/cli.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Scaffold a production-ready multi-process File-JSON-DB TCP server
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | goodman-b | — | 🪝 | |
|
Package purpose: Multi-agent swarm for the pi coding agent: board-coordinated peers, an independent harvest verifier, and an optional sandboxed writer. pi extension
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Base components for TecSU UI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | KaxyotiK | — | 🪝 | |
|
Package purpose: Project a Grove and its Trees into cmux native workspace groups
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Persona-based browser testing: Jev decides what a named person would do next, Playwright does it, and the run is recorded
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: alan-code standalone binary for windows arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: alan-code standalone binary for windows x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Pi extension that bridges the Qoder Agent SDK (official @qoder-ai/qoder-agent-sdk) into Pi as a model provider
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Jake Harding | — | 🪝 | |
|
Package purpose: Grunt task for executing shell commands.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Official TypeScript SDK for the Evinor API: event search, sensors, structured reports, and webhook verification.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Vojta Jina | — | 🪝 | |
|
Package purpose: A Karma plugin. Launcher for Firefox.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Billete SDK: server client, browser client and webhook verification
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Scaffold a NestJS vertical slice monolith with Docker, Sequelize, and Postgres
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Kadeep Technologies | — | 🪝 | |
|
Package purpose: KaDeep Studios CLI: AI end-to-end testing from your terminal, CI/CD and coding agents. Run test suites on web, mobile and desktop, read results, gate releases, and give Cursor or Claude Code KaDeep as MCP tools.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||