Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 100 | 313d | — | — | — |
Unverified Signal
|
— | npm | latest | Mark Jaquith | — | 🪝 🌐 | |
|
Package purpose: Manage agentic work across repositories with durable workbases
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 322d | — | — | — |
SUSPICIOUS
|
— | npm | latest | YeonGyu-Kim | — | 🪝 🌐 | |
|
Package purpose: The Best AI Agent Harness - Batteries-Included OpenCode Plugin with Multi-Model Orchestration, Parallel Background Agents, and Crafted LSP/AST Tools
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 328d | — | — | — |
Unverified Signal
|
— | npm | latest | Polymorphism Tech | — | 🪝 🌐 | |
|
Package purpose: MORPH-SPEC: NLH (Natural Language Harness) for spec-driven development with Claude Code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 330d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for Hailer - provides 52 tools to AI assistants (Claude Desktop, Claude Code).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 339d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Your personal FDE in Claude and Codex. Understand the work, use the right tools, deliver and retain useful context. One entry: vibe.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 344d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI tool to configure Poe API for developer workflows.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 357d | — | — | — |
SUSPICIOUS
|
— | npm | latest | ooples | — | 🪝 🌐 | |
|
Package purpose: Audit net MCP context avoided per AI coding agent, optimize context, and share a live local knowledge graph across 16 CLI clients
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 362d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Letta Code is a CLI tool for interacting with stateful Letta agents from the terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 373d | — | — | — |
SUSPICIOUS
|
— | npm | latest | elbwalker | — | 🪝 🌐 | |
|
Package purpose: Google Cloud Platform server sources for walkerOS (Cloud Functions, Pub/Sub)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 382d | — | — | — |
Unverified Signal
|
— | npm | latest | Memento Team | — | 🪝 🌐 | |
|
Package purpose: AI Agent 기억 보조 MCP 서버 - 사람의 기억 구조를 모사한 스토리지+검색+요약+망각 메커니즘
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 390d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Anthropic | — | 🪝 🌐 | |
|
Package purpose: SDK for building AI agents with Claude Code's capabilities. Programmatically interact with Claude to build autonomous agents that can understand codebases, edit files, and execute workflows.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 393d | — | — | — |
Very Risky
|
— | npm | latest | OpenRouter | — | 🪝 🌐 | |
|
Package purpose: The OpenRouter TypeScript SDK is a type-safe toolkit for building AI applications with access to 400+ language models through a unified API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 399d | — | — | — |
Unverified Signal
|
— | npm | latest | Netlify Inc. | — | 🪝 🌐 | |
|
Package purpose: CLI tool for running Netlify agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 417d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Alex Newman | — | 🪝 🌐 | |
|
Package purpose: Memory compression system for Claude Code - persist context across sessions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 419d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Simon Lacey | — | 🪝 🌐 | |
|
Package purpose: CrawlForge MCP Server - Professional Model Context Protocol server with 31 web scraping, crawling, deep-research, and autonomous-extraction tools. Returns clean Markdown and structured JSON for Claude, Cursor, and any MCP client. Defaults to local Ollama
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 443d | — | — | — |
Unverified Signal
|
— | npm | latest | Raoul Biagioni | — | 🪝 | |
|
Package purpose: Persistent memory for Claude Code and Pi with native Skills integration, automatic capture, failure learning, and project scoping
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 455d | — | — | — |
Very Risky
|
— | npm | latest | Pablo Rovito | — | 🪝 🌐 | |
|
Package purpose: Git hooks with Claude CLI for code analysis and automatic commit messages
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 462d | — | — | — |
Very Risky
|
— | npm | latest | MoonUI Team | — | 🪝 🌐 | |
|
Package purpose: Premium React components for MoonUI - Advanced UI library with 50+ pro components including performance, interactive, and gesture components
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 462d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Celal Ertug | — | 🪝 🌐 | |
|
Package purpose: A local AI-powered software developer assistant that runs on your own machine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 472d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 475d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Claude Code Templates | — | 🪝 🌐 | |
|
Package purpose: Component templates and tracking system for Claude Code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 484d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Gemini CLI Core
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 499d | — | — | — |
SUSPICIOUS
|
— | npm | latest | RuvNet | — | 🪝 🌐 | |
|
Package purpose: Ruflo - Enterprise AI agent orchestration for Claude Code. Deploy 60+ specialized agents in coordinated swarms with self-learning, fault-tolerant consensus, vector memory, and MCP integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 590d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Defra forms engine
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 604d | — | — | — |
Unverified Signal
|
— | npm | latest | Anthropic | — | 🪝 | |
|
Package purpose: Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 683d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: [](https://github.com/HiromiShikata/npm-cli-github-issue-tower-defence-management/actions/workflows/test.yml) [![code style: pretti
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 736d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: OGCIO Building Blocks SDK
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 911d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 998d | — | — | — |
Very Risky
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Recall Desktop SDK
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 1040d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 1082d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 1184d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Official Superblocks CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 1213d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 1239d | — | — | — |
Unverified Signal
|
— | npm | latest | cc-pwa-kit@salesforce.com cc-pwa-kit@salesforce.com | salesforce.com | 🪝 🌐 | |
|
Package purpose: :loudspeaker: Hey there, Salesforce Commerce Cloud community!
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 1259d | — | — | — |
Very Risky
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Courier CLI – manage notifications from the command line
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 1266d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 1326d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 1359d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 1519d | — | — | — |
Unverified Signal
|
— | npm | latest | BEA Technology Company | — | 🪝 🌐 | |
|
Package purpose: Command line interface for LumenJS — scaffold, develop, and build LumenJS applications. LumenJS is a tiny, fast reactive JavaScript framework for building web applications and interfaces with standard HTML, CSS, and JavaScript.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 1633d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Lightdash CLI tool
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 1826d | — | — | — |
Unverified Signal
|
— | npm | latest | Andreas Thomas | — | 🪝 🌐 | |
|
Package purpose: An HTTP/REST based Redis client built on top of Upstash REST API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 2046d | — | — | — |
Unverified Signal
|
— | npm | latest | ReferralSaaSquatch.com, Inc. | referralsaasquatch.com | 🪝 🌐 | |
|
Package purpose: A minimal design library with components for referral and loyalty experiences. Built with Shoelace components by Saasquatch.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 2090d | — | — | — |
SUSPICIOUS
|
— | npm | latest | NicolasVuillamy @nvuillam nicolasvuillamy@nvuillam | — | 🪝 🌐 | |
|
Package purpose: French-army-knife Toolbox for Salesforce. Orchestrates base commands and assist users with interactive wizards to make much more than native Salesforce CLI + Allows you to define a complete CI/CD Pipeline and Schedule a daily Metadata backup & monitoring
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 2188d | — | — | — |
Unverified Signal
|
— | npm | latest | Dick Van Ocampo | — | 🪝 🌐 | |
|
Package purpose: El Toolkit sagrado del buen Komarquino
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 2529d | — | — | — |
Unverified Signal
|
— | npm | latest | Atlassian | — | 🪝 🌐 | |
|
Package purpose: A command line interface for managing Atlassian-hosted apps
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 2606d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Fimo CLI - create, deploy, and manage Fimo projects
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 3119d | — | — | — |
Very Risky
|
— | npm | latest | O2Team | — | 🪝 🌐 | |
|
Package purpose: cli tool for taro
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 3459d | — | — | — |
Very Risky
|
— | npm | latest | Microsoft | — | 🪝 🌐 | |
|
Package purpose: Azure Functions Core Tools
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4110d | — | — | — |
SUSPICIOUS
|
— | npm | latest | snyk.io | snyk.io | 🪝 🌐 | |
|
Package purpose: snyk library and cli utility
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 100 | 4378d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Martin Luther ETOUMAN NDAMBWE | — | 🪝 🌐 | |
|
Package purpose: MVC framework for Node.js and Bun with built-in HTTP/2, multi-bundle architecture, and scope-based data isolation — no Express dependency
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||