Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Universal Stdio MCP Bridge for Get AI Todo - connects any coding harness (Antigravity, Claude Code, Cursor, Windsurf) to getaitodo.com
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Lucas Coelho de Oliveira Lima | — | 🪝 🌐 | |
|
Package purpose: Enterprise-grade stealth traffic generation framework.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | EYALIN | — | 🪝 | |
|
Package purpose: Check and request device permissions and the state of Location/WiFi/Camera/Bluetooth/NFC/notifications settings, compiling only the modules an app uses. Community fork of cordova.plugins.diagnostic.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Rich Olson | — | 🪝 | |
|
Package purpose: CLI health checks, handoffs, session archives, visual archives, and recovery tools for OpenAI Codex and Claude Code session threads.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | — | — | 🪝 | |
|
Package purpose: VideoFetch MCP server — let any AI agent download video/audio straight into your own object storage
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 2.0.1 | Antonio D'Angelo | — | 🪝 | |
|
Package purpose: BAD: Behavior Anomaly Detection. Cross-platform user behavior analytics, anomaly detection, and SIEM alerting.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | — | — | 🪝 | |
|
Package purpose: Async stream processing on Redis Streams: decorator-based agents, timers and shared state
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | DevFrames | — | 🪝 🌐 | |
|
Package purpose: VIBE Groq & LLM Decision Provider by DevFrames
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | OXVO | — | 🪝 🌐 | |
|
Package purpose: OXVO Insights for Node.js and edge runtimes: server-side event capture, user identification, feature flags with local evaluation and error tracking.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Neo5093 | — | 🪝 🌐 | |
|
Package purpose: HRHOT (hrhot.gaiying.top) HR industry updates MCP server. Read-only, anonymous, no API key required.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | tintinweb | — | 🪝 | |
|
Package purpose: Fork of @tintinweb/pi-subagents with parent model/thinking inheritance and cached agent discovery.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Zero-dependency linter that blocks AI-generated comment slop. Enforces a one-line, why-only comment policy via pre-commit hook, IDE plugin and CI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | ffyfox | — | 🪝 | |
|
Package purpose: DeepSeek Harness 的 Linux 原生桌面集成：XDG 桌面入口、纯净无边框独立窗口，以及由自己启动的服务随窗口关闭而停止的生命周期管理。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Snowy117 | — | 🪝 🌐 | |
|
Package purpose: Load each workspace's direnv environment into every command the DeepSeek Harness runs — automatically, per working directory. 让 DSH 每个工作区的子进程自动带上该工作区的 direnv 环境。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The windows x64 Secant executable, carried for @secantdev/secant.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Minimal native filesystem watcher with conservative rename correlation
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Hayya Design System CLI — installs Hayya UI component source into your app.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Turn application errors into tested, verified pull requests.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CLI to add gotlUI components to your project
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Jimmy Chen | — | 🪝 | |
|
Package purpose: The host behind the Esposter agent console — a loopback WebSocket that runs Claude Code sessions through the Claude Agent SDK and speaks a typed wire to the page.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Manage AI agent skills from the command line: install, deploy, update, rename, check.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Model Context Protocol (MCP) server for Agent Hover. Connects Claude Desktop, Cursor, and AI agents directly to your running UI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | DevOhMyCode | — | 🪝 | |
|
Package purpose: CLI to enable/disable the MCP servers, plugins, skills, hooks, commands and agents of every installed AI agent CLI (Claude Code, Codex, Grok, Cursor, Copilot, Gemini…)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Koushik Dey | — | 🪝 | |
|
Package purpose: Install the Higgsfield API skill (79 video and image models) into every coding agent: Claude Code, Codex, Gemini CLI, Copilot, Cursor, Windsurf and more.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | VibeLabs | — | 🪝 🌐 | |
|
Package purpose: Fail-open update prompts and localized changelogs for Expo and React Native apps.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Sends DMX from the gobo browser app to Art-Net, sACN or OSC. A browser cannot open a UDP socket, so this does that part.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Cross-session error gates for AI coding agents: detects recurring tool-call failures and promotes them into enforced gates. Remind first, block on same-session repeat offense. Works with OpenCode, Claude Code, Codex CLI, Gemini CLI, Cursor, Copilot CLI, a
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Takumi Saito | — | 🪝 🌐 | |
|
Package purpose: MCP server that gives AI coding agents isolated sandboxes on AWS Lambda MicroVMs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Small React parts that attach to an app you already have: a progress bar under the header while a page loads, and a prompt when a new build is deployed. No framework, no dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Alessandro Vioni | — | 🪝 🌐 | |
|
Package purpose: Terminal-first AI chat client for OpenRouter and Venice.ai with streaming responses, session persistence, and cost tracking
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Evidence-first codebase analysis for coding agents (runs the Python package verinoda through uvx, pipx or a private venv)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Explicit DeepSeek Harness adapter for the TaskBelay process graph.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Complete local TaskBelay Host adapter for Claude Code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Complete local TaskBelay Host adapter for ZCode.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | EasyTestData | — | 🪝 🌐 | |
|
Package purpose: EasyTestData server: REST API and job workers for EasyTestData Cloud and local mode
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | CHENBOHAN | — | 🪝 🌐 | |
|
Package purpose: Write documents with your coding agent — MoSage (墨閣) scaffolds the workspace and handles the pages, print layout, and export (PDF and Word).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Zolidar fork of IronCalc Node.js bindings
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Scaffold agent-ready projects from versioned GitHub templates.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TaskBelay tasks in local branches or dedicated worktrees for Codex.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Santhoshkumar Hariharan | — | 🪝 | |
|
Package purpose: Stop AI coding agents from cheating your checks. Diff-aware guard that catches deleted or skipped tests, weakened assertions, @ts-ignore, test-runner detection, lowered coverage and disabled CI steps, with a Claude Code hook that blocks the agent until it
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Workflow skills for coding agents that work in any project: plan, start, implement, verify, and review GitHub issues.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Kendra Ranking.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Kendra.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Kafkaconnect.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Kafka.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Ivschat.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS IVS Realtime.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS IVS.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Iottwinmaker.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Iotthingsgraph.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||