Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 6d | — | — | — |
Unverified Signal
|
— | pypi | 1.0.0 | Abhyuday Mishra | — | 🪝 | |
|
Package purpose: Oculon: Delhi Hotspots ML Spatiotemporal Crime Forecasting & MCP Server
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Watch your coding-agent sessions as a story: a canvas of the work, chapters, and the claims that lack evidence.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Ryan Barbosa | — | 🪝 🌐 | |
|
Package purpose: Open-source study system built on learning science: AI weekly plan, focus mode, closed-book tests and a degree record. Runs locally or on your own Cloudflare + Supabase.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ClearRun public SDK — HostedApiClient + MockKernelClient implementing the HonestyKernelClient boundary. Depends only on @clearrun/core-types; runs standalone against the mock with the closed kernel absent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ClearRun vendor integration surface (OPEN) — model registry, adapters, providers, routing. Folds the former engine/{adapters,providers,registry}. Self-contained; no scoring/governance.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ClearRun CLI – Score AI responses for reliability
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The TypeScript SDK for the STX exchange: markets, trading, your account and live WebSocket channels, with API-key signing and typed responses.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Reece Holmdahl | — | 🪝 | |
|
Package purpose: Create a new pywire app: runs the create-pywire-app wizard through uv, installing uv if needed
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Open Token | — | 🪝 🌐 | |
|
Package purpose: Open Token SDK: fail-open routing to the Open Token gateway with direct Amazon Bedrock fallback, cost spans, shadow dry-runs and one-line OpenTelemetry auto-instrumentation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: SDK for the MPP32 Machine-Payable API Platform — Solana token intelligence with x402 USDC on Solana and Base, plus Tempo pathUSD
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Session Deck in the terminal: background Claude Code and Copilot CLI sessions with a live preview and attach/detach, native on Windows
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Curated better-auth building blocks: one shared Auth Worker (Cloudflare D1), a client subpath for React session hooks, a cli subpath for Device Login, and a server subpath for backend-to-backend verification
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Switch between multiple Kiro accounts (kiro-cli + Kiro Crew) without repeatedly handling teammates' raw credentials.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | devn | — | 🪝 | |
|
Package purpose: Framework-independent server-side behavioral risk engine and anti-bot validation
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for the Aptora API: create assessments, invite candidates, pull grading results
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Christopher Schweda | — | 🪝 | |
|
Package purpose: Listen through a website with a real screen reader: voicecap takes NVDA page by page, saves every word it says as transcripts, and records what people reviewed.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Seb Insua | — | 🪝 | |
|
Package purpose: Query a TypeScript project's compiler-resolved code graph from the shell: symbols, edges and exact line ranges for coding agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Harshit Varshney | — | 🪝 | |
|
Package purpose: Make FLAC, WAV and MP3 buffers seekable in a browser — inject a FLAC SEEKTABLE, repair WAV headers a streaming writer left wrong — and fingerprint a FLAC from its first 42 bytes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP server that lets an AI agent run shell commands and transfer files in one pre-registered WSL distro through wsl.exe — no sshd, no key, no port — with every command and path screened by the @akms/mcp-ssh guard policy.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Fast dependency analysis and architecture rules for JavaScript and TypeScript (CLI and Node.js API)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Jean Ayala | — | 🪝 🌐 | |
|
Package purpose: Drop-in sign-in for Lens apps: thirdweb wallet, Lens account sign-in and creation, and Convex auth.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | mimajiushi | — | 🪝 | |
|
Package purpose: DSH host plugin: makes /compact use a user-chosen provider/model instead of the session's chat model, configurable in Settings.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A local web UI for exploring line-based logs from the command line.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: JavaScript host SDK for Jevscript: drives the jevscript runtime over JSON-RPC on stdio
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Alexander Arzhaev | — | 🪝 🌐 | |
|
Package purpose: Offline Jev token counting, request accounting, and preflight guards for Node.js and Next.js.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Scaffold new NPC projects for The Innkeeper's Ledger
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Tejas | — | 🪝 | |
|
Package purpose: A practical developer toolkit for inspecting, maintaining, and managing projects.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | mika-f | — | 🪝 🌐 | |
|
Package purpose: Visual regression tests for React Native Storybook stories, run from Vitest
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | mimajiushi | — | 🪝 | |
|
Package purpose: DSH plugin: Settings → Plugins card for AgentTeams member cap and per-team concurrency cap.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | mimajiushi | — | 🪝 | |
|
Package purpose: DSH host plugin: retries EVERY model-gateway error (429, quota, auth, network, ...) with a linear 5s-step backoff capped at 5 minutes, covering agent-loop requests and direct ctx.llm.stream calls (compaction, session title). Max retries configurable in Se
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | mimajiushi | — | 🪝 | |
|
Package purpose: DSH web plugin: gives the plan-review card ('计划待审') a second home in the right sidebar — same card, same decision buttons — with a per-card switch that moves it between the sidebar and the main conversation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | mimajiushi | — | 🪝 | |
|
Package purpose: DSH plugin: a Settings switch that disables the subagent tool family (subagent/subagent_fork/workflow/ralph/list_subagent_models/send_message) and tells the model to use Agent Teams instead.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Shared Claude Code skills, written into a repository from one config file and kept in step with it
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Eval harness (defineEval) + grader taxonomy (exact / regex / json-shape / schema / model-graded + a fail-closed injection class) + a regression-vs-committed-baseline gate. Offline + deterministic (cassette-replayed judge).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: WebUI desktop sidecar for Windows ARM64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: WebUI desktop sidecar for Windows x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local hybrid retrieval base: sqlite-vec (vec0 FLOAT[N]) + FTS5 + Reciprocal-Rank-Fusion (RRF_K=60) merge with an always-available FTS5 path, degrading to FTS-only on a missing/failed vec leg; file-per-tenant isolation floor. Embedding is an injected seam
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: WebUI Press platform-specific binary for Windows ARM64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 6d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: WebUI Press platform-specific binary for Windows x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Run Codex CLI with isolated local account profiles.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | Aitherium | — | 🪝 | |
|
Package purpose: AitherCapture — capture your AI coding sessions (Claude Code, Codex, Copilot, Cursor, Antigravity) into clean ShareGPT datasets you own.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Siddharth Gosavi | — | 🪝 | |
|
Package purpose: The complete collection of OpenCode coding agent configs: agents, skills, hooks, commands, rules, and Graphify code intelligence.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | sandeco | — | 🪝 | |
|
Package purpose: Framework agêntico para criação e manutenção de canais dark no YouTube, instalado por pasta via NPX
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Kaquill | — | 🪝 🌐 | |
|
Package purpose: Kaquill SDK for Node.js — predictive conversion intelligence for SaaS.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | ccdex | — | 🪝 | |
|
Package purpose: Fork of puppeteer-real-browser. Bypass bot-detecting captchas such as Cloudflare. Compatible with rebrowser-puppeteer-core 24.x.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Official TypeScript SDK for Orisift contact-data validation. Server-side only.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 1.0.0rc4 | — | — | 🪝 | |
|
Package purpose: Self-hosted web app to drive Claude Code sessions on your Linux server from a phone, tablet or laptop
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CDK construct for a stateless (MCP 2026-07-28) MCP server on API Gateway + Lambda
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Start an app or website for Tiniest Cloud: React, TypeScript, Vite, Tailwind CSS and shadcn/ui, or Astro.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
SUSPICIOUS
|
— | pypi | 0.1.12 | — | — | 🪝 | |
|
Package purpose: Bundled Python runtimes per platform with an architecture-aware selector
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||