Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | SendDart | — | 🪝 🌐 | |
|
Package purpose: SendDart MCP server — give your AI agent native access to the SendDart email API over the Model Context Protocol (stdio + HTTP).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | CCGV2 | — | 🪝 | |
|
Package purpose: ACP adapter for pi coding agent
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Temper Team | — | 🪝 🌐 | |
|
Package purpose: Reads Temper variables and resource records from workflow code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Portable project architecture and documentation skill with a cross-platform CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | HelpfulSoftwareCrew | — | 🪝 | |
|
Package purpose: One winner per node for a long-lived child process: a compare-and-swap PID lock, identification by argv, supervision, and a reaper that outlives the host
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Claude Beach and Paul Bug | — | 🪝 🌐 | |
|
Package purpose: Bright Life Wallet
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | 402 | — | 🪝 🌐 | |
|
Package purpose: TaaP (Trading as a Prompt) MCP server: the agent provisions a trading wallet on connect, the human backs it up through the claim site, then trades by prompting. Paper mode by default — cannot move real money.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Ahmad Arif | — | 🪝 🌐 | |
|
Package purpose: MCP server that generates images through Antigravity's image-generation endpoint, reusing your already logged-in Google AI Pro quota.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Isaac Z. Schlueter | — | 🪝 | |
|
Package purpose: A compatibility-focused modern fork of fs-write-stream-atomic.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Detect and operate an unfamiliar project directory: services, ports, environment and diagnostics.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 2D and 3D map editor for video games — single-file .krea projects, editable models, sprites, terrain, game-ready export, and a stateless HTTP API + skill for AI agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: **the code jen(erator)** – a tiny, zero-dependency scaffolding CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Read-only MCP server for the thejob-jobs-service.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | dtst | — | 🪝 🌐 | |
|
Package purpose: MCP server and CLI for writing text and reasoning over context with any OpenAI-compatible API (OpenAI, OpenRouter, vLLM, Ollama, LiteLLM). Accepts multiple images and saves to agent-specified paths.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | dtst | — | 🪝 🌐 | |
|
Package purpose: MCP server and CLI for generating and editing images through any OpenAI-compatible API (OpenAI, OpenRouter, vLLM, Ollama, LiteLLM). Saves to agent-specified paths.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: In-app support reports for React with annotated screenshots, diagnostics, and email or webhook delivery.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Command-line asset pipeline and AOT (Ahead-of-Time) audio processing tools for the SceneGrid platform.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | mcp-use | — | 🪝 | |
|
Package purpose: Model Context Protocol (MCP) server for SceneGrid, providing AI agents with telemetry and control over the audio engine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Plugsky MCP server — 36 models, RAG knowledge search, platform tools and document ingestion for Claude, Cursor, VS Code, Windsurf, Zed.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 1.0.0 | Rayane Hassani | — | 🪝 | |
|
Package purpose: Your reasoning, kept. A forensic journal of every Claude Code session.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK for the serverless binary platform — handler ABI (GET /healthz, POST /invoke) plus sidecar Env client (KV, blobs, queue, logs, intercom).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cross-platform Oxc semantic analysis for Node.js and WebAssembly
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Share a Claude Code session into an Enrobage room
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Automate The Planet | — | 🪝 | |
|
Package purpose: SAP GUI for Windows scripting bridge for appium-wincore-driver, as an installable Appium plugin
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Forkline CLI - OpenCode runner management
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Private working-hours receipts for Pi, reconciled by a tested Bend accounting policy.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Injected real-time voice call sessions and client protocol helpers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Neens | — | 🪝 🌐 | |
|
Package purpose: Neens pre-prod evaluation runner — the CI one-liner (PULL/PUSH) with gate-as-code, for TypeScript/Node CI. TypeScript parity port of the Python neens-eval SDK.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Command-line tooling for building and validating Riebeckite sites.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Download your Lore knowledge base from the command line.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local-first AI-powered web application builder — CLI + local runtime + browser IDE
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Rafael Bortoli | — | 🪝 🌐 | |
|
Package purpose: SDK do Coatify: métricas, billing e lifecycle para SaaS de assinatura.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Node Effect runtime Layer for open-wa
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: HubbiParts React UI kit built with shadcn/ui primitives.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Yuri | — | 🪝 | |
|
Package purpose: CLI para geração de Swagger com templates customizados para projetos Vue/Quasar
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Felipe Longé | — | 🪝 | |
|
Package purpose: Pass your Claude Code or Codex session to the next agent: one file with the whole conversation, your rules, and your unfinished code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Runs the sessionpipe conformance fixtures against a receiver URL or an adapter. (published unscoped until the @sessionpipe npm org exists; the code is the same)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Zero-config application observability and telemetry SDK for Kweza Observability
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Web engine for e2e agentic end-to-end testing, built on Playwright
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Henry Jewkes | — | 🪝 | |
|
Package purpose: Scan git diff text for home paths, private-workspace paths and private terms, reporting location and rule id only
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Yitom | — | 🪝 | |
|
Package purpose: Headless ACP (Agent Client Protocol) SDK for connecting to Codex, Claude, Cursor, DeepSeek and more
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Pi extension: read your Todoist bugs/tasks from the agent, and close the ones you have finished.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Flitt | — | 🪝 🌐 | |
|
Package purpose: Official TypeScript / JavaScript client for the Flitt Public API: servers, players, firewall, commands, Discord linking, votes, reviews, webhooks and real-time events (FiveM, Garry's Mod, Minecraft).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP server for Curb Cut: workplace accommodation options, published cost evidence, and request drafts. It looks up and it drafts; it never sends anything on anyone's behalf.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Create a new Stagegrid instance
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Stagegrid server: project progress board with MCP
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Reads a git repository and shows what changes what you do next: who knows the code, what is risky, what you forgot.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||