Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Score any agent skill folder as skill, tested, or superskill. An open standard and a zero-dependency CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Ludwig Stockbauer-Muhr | — | 🪝 | |
|
Package purpose: Safety net for manual Cloud Foundry MTA deployments: verifies the targeted org/space against a whitelist, enforces git branch rules for protected targets and asks for confirmation before the deploy proceeds
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: npx launcher for Silk Code, the model-agnostic AI coding agent: phone-first GUI, permission gates, provenance-scanned tools. Bootstraps the Python app and its Chromium into an isolated environment on first run.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | DevLove | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Abas Turabli | — | 🪝 | |
|
Package purpose: Aesthetic architecture diagrams, straight from the code: one animated SVG, light and dark, from a JSON or YAML spec or your coding agent
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Native-first, UI-thread Expo / React Native components you copy into your project. Zero config.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | wangxiang0605 | — | 🪝 | |
|
Package purpose: Pi extension: Opens an overlay via `/sessions` to browse past sessions and delete one or all of them. / Pi 扩展：用 `/sessions` 弹出浮层浏览历史会话，删除单个或全部。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Rolesanywhere.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Resource Groups Tagging API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Resource Groups.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Resource Explorer 2.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Resiliencehubv2.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Resiliencehub.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Repostspace.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Rekognition.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Redshift Serverless.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Redshift Data.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Redshift.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS RDS Data.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Rbin.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS RAM.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Quicksight.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Qconnect.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Qbusiness.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Qapps.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Proton.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Pricing Plan Manager.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Simpllyf Software | — | 🪝 🌐 | |
|
Package purpose: DropBy for your backend: browser sessions, identity proofs and the server API for chat, ideas and asks.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Ika Accounts SDK: walletless Sui accounts for any EVM or Solana wallet — gasless, zero-trust (Ika dWallets), funded from any chain via NEAR Intents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Lucas Kopietz | — | 🪝 | |
|
Package purpose: MCP server exposing the eleven-kit 'honesty SDK' family (grounding-kit, corroboration-kit, payout-invariance-kit, mutation-invariance-kit, trust-core, provenance-kit, claims-registry-kit, audit-chain-kit, advice-ledger-kit, agent-receipt-kit, cost-governo
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Runner SDK - Framework-agnostic agent runtime (TypeScript)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local codebase sync for Artaxor connections.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | fenbs | — | 🪝 🌐 | |
|
Package purpose: Connect any MCP client to your fenbs board over stdio. A tiny bridge to https://fenbs.ai/api/mcp for clients that cannot open a browser or speak remote MCP.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.5 | — | — | 🪝 | |
|
Package purpose: Information-flow control for AI agents: stop tool calls that move untrusted-influenced data or actions somewhere they shouldn't go. Claude Code hooks, an MCP proxy, or a library.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Attacker687 | — | 🪝 🌐 | |
|
Package purpose: 轻量飞书 MCP 服务：让 Claude Code 等 AI 客户端用你自己的飞书账号读写云文档、评论、知识库、画板和电子表格
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Official TypeScript client for the Companybook REST API (Norwegian company data). Zero runtime dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Ali | — | 🪝 | |
|
Package purpose: A second look before your coding agent does something it can't take back. Jev-powered guard for Claude Code: commands, file edits, web fetches, MCP tools, prompt injection.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Pricing.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Polly.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Pipes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Pinpoint Sms Voice V2.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Pinpoint Sms Voice.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Pinpoint Email.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Pinpoint.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS PI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Personalize Runtime.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Personalize Events.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Personalize.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS PCS.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Pca Connector Scep.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||