Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS MPA.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Migrationhubstrategy.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Migrationhuborchestrator.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Migrationhub Config.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Migration Hub Refactor Spaces.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Migration Hub.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Mgn.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Memorydb.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Kiss Industries | — | 🪝 🌐 | |
|
Package purpose: FotóAI from the command line and for AI agents: images, video and speech with your fotoai.hu credits — quote first, wait, download, JSON output, Claude Code skill.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | foxian | — | 🪝 | |
|
Package purpose: Enterprise Skill Library (ESL) command-line client
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | NextTrace Team | — | 🪝 🌐 | |
|
Package purpose: Next.js integration for NextTrace with dev-only gating, server fetch collection, and overlay component
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Generic CLI-binary -> MCP-server stdio wrapper (the only sanctioned shell-out layer).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | wanghm25 | — | 🪝 | |
|
Package purpose: A clear, worktree-aware view of local Git branches and their descriptions.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server exposing Flunter data for connected user
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Real-time embeddable ICU telemetry visualizer, bedside monitor, and command center
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Guava License SDK — Ed25519 License 本地验签 / 在线验证 / Feature 授权
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 为命令行 AI agent 的 cron 定时任务提前预热并保活交互式会话
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Brandon | — | 🪝 | |
|
Package purpose: Agent-facing AXI for Honcho
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Interactive local CLI for learning AI Platform Engineering, MLOps, and LLMOps
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | fan56 | — | 🪝 | |
|
Package purpose: dsh plugin: Jev-guided dispatch advice — before a turn starts, a TypeSafe Jev call decides whether the task belongs to a registered agent and which one, then injects a four-line, ignore-if-unsuited recommendation. Jev-optional: no key means silence.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Consumer-side integration for WMM Studio: content, analytics, attribution.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local-first learning workflows for DeepSeek Harness
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Moksa1123 | — | 🪝 | |
|
Package purpose: Agent skill that drives Adobe Illustrator on Windows over COM: dialog-free ExtendScript, 452/452 scriptable menu commands and 115 live effects verified by readback, an API index built from your own Illustrator, a tested design library, 53 design-size pres
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: ZCode Rust executable for win32-x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Resolve the current model ID for xAI, Anthropic, Gemini and OpenRouter at runtime. Config-file-driven: include/exclude patterns, pins, and fallbacks live in YAML/JSON, not in code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Martin | — | 🪝 🌐 | |
|
Package purpose: One-line CLI for grsai image & video generation (nano-banana / gpt-image-2 / gpt-image-2.5 / minimax-h3). Auto-retry, concurrent multi-image, bundled agent skills.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A02 职业数据 MCP Server（Node 版）：招聘数据（聚合数据）/ 学习资源（GitHub）/ 职业趋势（快照）/ 职业百科（百度百科），三级降级链，来源全程可溯
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Aryabh | — | 🪝 🌐 | |
|
Package purpose: A TypeScript framework for agents, typed tools and durable workflows.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local SQLite-backed job queue + background worker for biji.com batch jobs (link analysis, media upload).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for Nerdbase Partner API — game topup via Claude/Cursor
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Transfocus | — | 🪝 🌐 | |
|
Package purpose: Official Node.js/TypeScript client for the Transfocus TMS public API (v1 and v2): typed resource clients, partner password-grant authentication with token refresh, retries, pagination and structured logging.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Ahmad Nawawi | — | 🪝 | |
|
Package purpose: OpenCode V2 plugin for tracking Gemini API Key Usage, Rate Limits, Spend, and Billing
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: pi 扩展：用 qwen3.8-omni-flash 读视频（画面 + 声音/口播转写）。本地文件自动分流 base64 内联或百炼官方临时上传，也支持 http(s) / oss:// 输入；quick/standard/fine 三档。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | zimv | — | 🪝 🌐 | |
|
Package purpose: Based on the OpenAPI specification, generate request and response type declarations and request method bodies for APIs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Prebuilt ffmpeg and ffprobe binaries for HarmonyOS (OpenHarmony) aarch64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Mash Jungalist Prime | — | 🪝 🌐 | |
|
Package purpose: Read mashprime.dev from your terminal — essays and build notes on agentic systems.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Shigma | — | 🪝 | |
|
Package purpose: Plugin loader for cordis
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Sign-in and data access for apps hosted on Naive: accept the platform's entry ticket, read who is viewing, call the API from the server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | SendPing | — | 🪝 🌐 | |
|
Package purpose: SendPing MCP server — give your AI agent native access to the SendPing email API over the Model Context Protocol (stdio + HTTP).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Find and download published podcast EPUBs from Podcast Reader
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Put Scute in front of any MCP server: users sign in with your app, every tool call passes your agent guardrails, and changed tool definitions are held for review.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | fan56 | — | 🪝 | |
|
Package purpose: dsh plugin: Jev-guided dispatch advice — before a turn starts, a TypeSafe Jev call decides whether the task belongs to a registered agent and which one, then injects a four-line, ignore-if-unsuited recommendation. Jev-optional: no key means silence.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Prometheus lexicon for chant — typed recording and alerting rule groups and Alertmanager routing, serialized to a rule file and alertmanager.yml
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | danielzzz | — | 🪝 | |
|
Package purpose: a simple wrapper for ping
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | AppDrift | — | 🪝 🌐 | |
|
Package purpose: Read AppDrift keyword observations and prepare reviewable listing drafts with MCP. AI actions consume AppDrift tokens.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Synthetic | — | 🪝 | |
|
Package purpose: Control Adobe Photoshop with 409 AI tools via MCP — layers, text, masks, filters, adjustments, smart objects, export. By Synthetic (synthetic.com.ar).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Code-first evals for AI agents and LLM apps
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 通过 pnpm create my-next-app 创建 Next.js 脚手架
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The Armory MCP server: search, get, and submit agent-harness components from the Armory registry over stdio. (This is Armory's OWN harness, not one of the cataloged components.)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||