Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: AI agents forget everything between sessions. Every new chat re-derives decisions, re-breaks constraints that were already settled, and re-debugs errors that were already fixed last week.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Robit | — | 🪝 | |
|
Package purpose: Guarded host doctor and installer for the Qwen Omni desktop indicator runtime
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: NewsNext CLI for win32-arm64-msvc
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Traffic Lights Node.js SDK — emit business events to Traffic Lights over HTTPS. Server-side only.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | lucas7x7 | — | 🪝 🌐 | |
|
Package purpose: A stable public URL for webhooks, with an inbox. No signup, no card, no dashboard.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: <!-- fg:version -->
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Aurostack | — | 🪝 | |
|
Package purpose: Scaffold new projects from house templates: a NestJS API, React app or Turborepo monorepo, and Node or Python workers. Subtractive templates plus a zero-dependency generator.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server that lets an AI agent add coins to a Numikeep collection, using a connection key the owner created.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Puppetflow | — | 🪝 🌐 | |
|
Package purpose: Activepieces piece for Puppetflow: trigger browser automation flows, follow runs, and retrieve results, screenshots, downloads, and recordings.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.4 | ILESP Contributors | — | 🪝 | |
|
Package purpose: Intelligent Logistics Equipment Scheduling Platform — WCS + RCS + built-in simulation with an adapter seam for real devices
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: 迷因捕手 — a free, open-source app for collecting memes and finding them by what they say.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | hazem_morsy | — | 🪝 🌐 | |
|
Package purpose: Watanya Lucide Plus — React icons (Lucide + custom SVGs + live registry)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | hazem_morsy | — | 🪝 🌐 | |
|
Package purpose: Watanya Lucide Plus — React icons (Lucide + custom SVGs + live registry)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local-first context packing and handoff CLI for coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Runtime-record flow and runtime-trace-bundle producer for dependency evidence; ships the dep-diet runtime-record adapter.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Collaby Labs | — | 🪝 | |
|
Package purpose: One-command production-grade opencode setup: 21 MCPs, 10 plugins, 44 skills, global workflow, Kodus + PR-Agent review loops.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Install or update Morphite on your Mac or Windows PC: npx @webprodigies/morphite
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Mark Lopez | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Fast, diff-aware mutation testing for TypeScript and JavaScript
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | 刘天赫 | — | 🪝 | |
|
Package purpose: Crypto Bill of Materials — scan, diff, report (CycloneDX 1.6 CBOM)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: RipGrep mirror for Windows
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Luka Vidakovic | — | 🪝 🌐 | |
|
Package purpose: wireui — browse a recorded wire.sqlite in a local, read-only web UI: sessions, runs, requests, payloads, timings, checks.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: An AI-powered CLI coding agent for your local codebase
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Zalmox from the terminal and from AI agents: generate game-ready 3D models, VFX flipbooks, textures, skyboxes and terrains. CLI + MCP server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.2 | — | — | 🪝 | |
|
Package purpose: A data harness that guides AI agents through your lakehouse: context, guardrails and verification.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.1 | Cloud Security Alliance | — | 🪝 | |
|
Package purpose: Read, compose and send Gmail, and manage Google Calendar events
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Renat Berezovsky | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Renat Berezovsky | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: GeoPulse React Native SDK — on-device geofence detection and event sync.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Discover and install Open Knowledge Format bundles from okfs.sh
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Generated TypeScript IPC package for the Wsdb service.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: pankhllm prebuilt binary for win32-x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Read Celestia Indexer data through MCP over stdio or Streamable HTTP.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The LLM gateway that learns to skip the LLM: trains its own tiny decision model on your agent's traffic and answers repeat decisions in 0.2 ms with no LLM call. OpenAI-compatible, one Rust binary. `npx pankhllm serve`.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Inflowra | — | 🪝 🌐 | |
|
Package purpose: Browser-first SDK for turning a document into a verifiable credential: place a QR, extract claims, issue, and stamp — all client-side.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Jonatan Kruszewski | — | 🪝 | |
|
Package purpose: The tooling every rxova repository shares: lint, format, commit, build and test presets, and the repo scripts behind the pre-push gate.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | APP-ALBA contributors | — | 🪝 | |
|
Package purpose: Windows x64 native runtime for openseesjs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: PeerJS signaling server that runs on Vercel Fluid compute and on Node.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Bitfield Creek | — | 🪝 | |
|
Package purpose: Stdio MCP server: read-only codebase Q&A tools for AI models (overview, search, symbols, git).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | mrbeandev and contributors | — | 🪝 | |
|
Package purpose: Deterministic, zero-LLM, byte-budget context compaction for DeepSeek Harness, with byte-exact recall of compacted history.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Githumbi | — | 🪝 🌐 | |
|
Package purpose: Self-hosted collector and MCP server for Grabby feedback comments
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: signalbox systemd service adapter for @signalbox/service-cli: unit rendering, hardening, credential sealing, and lifecycle management
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Stephan Randle | — | 🪝 | |
|
Package purpose: Vite plugin for generating iconify svg sprite maps in memory
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Shreyash Kumar Singh | — | 🪝 🌐 | |
|
Package purpose: A direct, agent-first video editor that lives entirely in your terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The cross-engine conformance harness (SPEC-CONFORMANCE, private). One engine-agnostic scenario format, authored once, executed against two engines — the native core and the pinned web oracle (`motion-dom@12.42.2`, see [SEAMS.md](./SEAMS.md)) — then differ
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Nano Empire AI | — | 🪝 🌐 | |
|
Package purpose: ElizaOS plugin for Nano Empire AI: x402 micropayments and RecallGuard compliance verification
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Ashish Sharda | — | 🪝 | |
|
Package purpose: Local-first, single-file database for AI agents: runs, retries, traces, memory. Zero dependencies (node:sqlite).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: npx launcher for the task-checkpoint MCP server. The server itself is Python, standard library only — prefer `pipx install task-checkpoint-mcp`.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Robey Beswick | — | 🪝 | |
|
Package purpose: Plan-aware guardrail for AI coding agents: blocks terraform apply / cdk deploy runs that would delete or replace your databases, buckets and keys.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||