Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Braith coding-agent setup and outcome manifest CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Scaffold de harness para projetos com agentes de IA (Claude Code): papeis, specs, guardrails e docs de contexto.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | ferpalma21 | — | 🪝 🌐 | |
|
Package purpose: CLI security scanner for identifying potential exposure to CVE-2025-29927 in publicly accessible Next.js applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Independent verifier for Bixel's evidence chain: content, merkle inclusion, hash chain, and OpenTimestamps anchoring in the Bitcoin blockchain.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Official client for APIStack: 100+ developer APIs (validation, dates, finance, web/DNS/SSL, reference data, AI text) behind one key
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Rime streaming text-to-speech SDK for Node.js
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Remicall | — | 🪝 🌐 | |
|
Package purpose: Server-side SDK for the Remicall Voice API: trade your master API key for short-lived agent session tokens
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Servidor MCP de Futtebol: 10 competiciones oficiales, Dixon-Coles, XGBoost y simulacion Monte Carlo para agentes autonomos.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | carol | — | 🪝 | |
|
Package purpose: Deep vulnerability scanning of your own code, run entirely inside your Pi session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, eac
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local Cloudflare API twin for accounts, zones, Cloudflare Tunnels, tunnel configurations and zone DNS records, built on @volter/world-core.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local xAI (Grok) twin — a faithful, stateful local API plus the Grok Build device-OAuth browser surface. The model is stubbed (deterministic) and Live Search citations are labeled stubs, while the OAuth/account/usage world and API protocol envelopes remai
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | OmniRoute contributors; standalone packaging by Piyush Mehta | — | 🪝 🌐 | |
|
Package purpose: OpenCode v2 plugin for live OmniRoute model discovery, combos, authentication, and metadata.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Weft Sandboxes SDK helpers and admin CLI. Use the unmodified E2B SDK for sandboxes; use this package to configure it and to manage teams, keys, egress policies and templates.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 | |
|
Package purpose: Local LiveKit control-plane twin built on @volter/world-core.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local Mixpanel twin — the vendor's 104-operation surface compiled from its own 14 first-party OpenAPI documents, served with honest loud gaps; the ingestion plane (track, $identify, $create_alias, profile $set) modeled over kernel state and verified again
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 🌐 | |
|
Package purpose: Local PlanetScale twin: the psdb HTTP wire protocol (POST /psdb.v1alpha1.Database/CreateSession | Execute | CloseSession, Basic auth, protojson QueryResult with base64 row packing) served over a real stateful MySQL-subset engine folded out of the @volter/
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter | — | 🪝 | |
|
Package purpose: Shim-only attach client for Twins worlds: point any Node app at a local or served world with zero repo integration (docs/guides/route-a-cli-through-the-world.md). No twins in it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Filesystem-backed path canonicalization and repository mutation containment for the Pi coding agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Govind Sharma | — | 🪝 🌐 | |
|
Package purpose: Sudarshana — Premium Futuristic Spiritual AI Assistant inspired by a cosmic universe
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | grkn | — | 🪝 | |
|
Package purpose: Parallel read-only pi branches with a live panel above the input box, the delegate skill that starts them, and /umb-loop, which resubmits a prompt on a count or a timer.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Hand off your coding agent's work to your personal assistant, with your approval.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Danny Keane | — | 🪝 🌐 | |
|
Package purpose: Official TypeScript SDK and CLI for the dannykeane.com public API: work history, GitHub contributions, live stats, and the Habbo NPC chat. Zero dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Hello World app with an Angular frontend and a NestJS backend, runnable with npx
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local-first professional diagrams for agents and humans
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cut LLM costs: route routine tasks to cheap subagent models (DeepSeek Harness plugin)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Native Windows x64 binary for SkillCode
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | AppLooma LLC | — | 🪝 | |
|
Package purpose: AppLooma RTC native bindings for Node.js
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Run long Markdown implementation roadmaps through fresh CLI coding-agent sessions until completion.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Medical Imaging.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Mediatailor.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Mediastore Data.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Mediastore.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Mediapackagev2.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Mediapackage Vod.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Mediapackage.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Medialive.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: AgentCode 的 ReAct 运行时
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Mediaconnect.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Marketplace Reporting.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Marketplace Metering.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Marketplace Entitlement Service.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Marketplace Discovery.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Marketplace Deployment.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Marketplace Commerce Analytics.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Marketplace Catalog.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Saving an ACRYL app to its own git repository: the secret check, the private/public guard, commit and push, and connecting a remote through the user's own gh login. Host-independent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server exposing tabletop RPG rules lookup tools. Pathfinder 2e via Archives of Nethys.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server that lets AI agents drive Firefox through the BrowserDuck extension.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 1.0.0 | Abhyuday Mishra | — | 🪝 | |
|
Package purpose: Oculon: Delhi Hotspots ML Spatiotemporal Crime Forecasting & MCP Server
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Watch your coding-agent sessions as a story: a canvas of the work, chapters, and the claims that lack evidence.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||