Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | timtarou | — | 🪝 | |
|
Package purpose: An HP bar for your AI accounts: weekly usage limits, reset times and banked resets for all your Claude Code and Codex accounts, in one table
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Rafie Hasannudin | — | 🪝 🌐 | |
|
Package purpose: Standalone TypeScript toolkit of agent-callable tools with MCP-compatible output.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Furkan Suren | — | 🪝 🌐 | |
|
Package purpose: MobileScreen MCP server: design, edit and export App Store / Play Store screenshots from your coding agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | kitasid | — | 🪝 | |
|
Package purpose: Change things without breaking prod: zero-downtime schema migrations, dependency upgrades and API contract diffs, each backed by a zero-dependency checker script.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Servidor MCP y CLI para la API de Avisos del Ayuntamiento de Madrid (AVSICAPI)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Transparent stdio proxy that records MCP tool call interactions for the Lowdown reputation experiment.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Matt Harrison | — | 🪝 | |
|
Package purpose: Open huge JS object caches in about a millisecond: a memory-mapped binary format that decodes lazily
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Yonas Yeneneh | — | 🪝 | |
|
Package purpose: Sanoy: an agentic AI development workflow for Claude Code: plan, build, change, learn, ship. One living document per feature, a build-verifying Stop hook, a fresh-eyes reviewer, and an onboarding skill that teaches the AI your codebase first.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI do Kleos: gere, agende e meça posts UGC do seu app pelo terminal ou por qualquer agente de IA. Cliente do MCP em https://mcp.zurc.app/mcp.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Molecule Dev, Inc. | — | 🪝 🌐 | |
|
Package purpose: molecule.dev hosted speech provider — text-to-speech and transcription billed to your molecule project, no vendor account
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CLI tool for Indonesian stock market (IDX) analysis
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local-first repo dashboard and agent-driven Kanban board. Cards are markdown files in .repoboard/, git is the history; one bin serves the CLI, the HTTP/WebSocket dashboard, and an MCP server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Algrith LLC | — | 🪝 | |
|
Package purpose: A Tailwind-native styled() utility for React and Next.js, born from twin.macro breaking under Next.js's Turbopack — plus a live dev-time invalid-class validator with an in-browser overlay.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Prometiam | — | 🪝 🌐 | |
|
Package purpose: Official TypeScript/JavaScript client for the Prometiam Risk Intelligence API: EU company registry data (ES, FR, GB, IE, PL, NO, FI, SE, HR, BE, DK), corporate insolvency across twelve markets, sanctions screening, VAT and LEI lookups. Typed from the publ
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local-first, multi-harness agent operating system. One agent.config.yaml → Claude Code, Codex, Antigravity, Cursor, Windsurf. Zero API dependency.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Phone number field for Directus: country selector, as-you-type formatting, E.164 storage and server-side validation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MetaSSR CLI: polyglot server-side rendering framework powered by MetaCall
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Elya Livshitz | — | 🪝 🌐 | |
|
Package purpose: MCP server for Jev (TypeSafe AI) probabilistic decision model — typed answers + probabilities over pluggable providers (Vercel AI Gateway, OpenRouter Decisions API).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | profplum700 | — | 🪝 | |
|
Package purpose: Local read-only Etsy MCP server for AI agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Xentium, the open-source community platform, ready to run. Install it with `npm create xentium`.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Sanity Studio panel showing backup health across foundry repos, with on-demand triggering
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Validate, play and package Shards of Stone custom maps and mods — from the command line or a local MCP server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Leon Liu | — | 🪝 🌐 | |
|
Package purpose: Covers that get the click, for WeChat, X, YouTube, Xiaohongshu, Douyin and more: your agent picks a free photo, adds your headline and palette, and renders it locally
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Guto Mezêncio | — | 🪝 | |
|
Package purpose: Map/link custom local domains to apps running on local ports, at the OS level.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Alberto Gonzalez | — | 🪝 | |
|
Package purpose: Agent skill: honest service-topology / request-path diagrams. Verified path vs inferred companions, never hallucinate components.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Typed client for the Flex on the Job tenant API (/api/v1): inventory, jobs, invoices, purchasing.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Oliver Kohl | — | 🪝 | |
|
Package purpose: A faithful port of chokidar to the Bare runtime
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Manage Git worktrees as development workspaces
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | SnowSky1 | — | 🪝 🌐 | |
|
Package purpose: Bring Codex imagegen workflows and its prompt library to any agent, with configurable APIs and compatible Qwen-Image deployments.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Publique seu site na Way Cloud direto do terminal: waycloud deploy
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | cyborgx0x | — | 🪝 🌐 | |
|
Package purpose: MCP server for OpenProject API integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | ffschrattenecker | — | 🪝 🌐 | |
|
Package purpose: Personal testing fork of flameY3T1/tm1-mcp-server (npm: tm1-mcp-server). Use the original.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | justjam2023 | — | 🪝 | |
|
Package purpose: Bounded native ICMP Echo using Rust and Node-API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Sidebar thread list that shows each thread's state, harness and child threads at a glance.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Per-thread usage and cost for bb, rolled up over child threads, with LiteLLM gateway support.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 1.2.0 | — | — | 🪝 | |
|
Package purpose: Detects invisible Unicode (tags, variation selectors, bidi, zero-width) used to smuggle prompt-injection payloads into code, docs and AI agent instructions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.14 | Alexander Degtyarev | — | 🪝 | |
|
Package purpose: P2P-with-relay-fallback ssh/tcp tunnels between Linux boxes, built on frp
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CCode — a coding agent for your terminal. (win32-x64 binary)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CCode — a coding agent for your terminal. (win32-arm64 binary)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CCode — a coding agent for your terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Arpan Patelia | — | 🪝 | |
|
Package purpose: Beautiful test execution reports for Playwright
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: OpenCode v2 CLI with prompt modes, code-review-graph auto-indexing, and the browser skill
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for read-only SQL Server queries across LinkIt dev environments (internal/staging/uat/preprod/prod/au)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Yeşilçam Studios CLI and MCP server: AI film, fashion try-on and Maket from your terminal or from Claude.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Epic Design Labs | — | 🪝 | |
|
Package purpose: Render .env files from 1Password, matching variables to fields by name.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Multichain + cross-chain swap SDK for Awarizon — 0x, Jupiter and LI.FI behind one API, with a remotely hosted asset list
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Scaffold a production-minded monorepo (Vite React + Fastify or FastAPI)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Deploy static sites to AutoPush from the command line.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run HardLabs board simulations from your terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||