Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 9d | — | — | — |
Unverified Signal
|
— | pypi | 0.1 | — | — | 🪝 | |
|
Package purpose: Python test server launcher intended for use with Mozilla testing
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 方寸台桌面助手 MCP — 确认锁 + 来源标记 + 回收站 + 记事文件夹整理，安全地用自然语言管理家庭账本与记事
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The BitGraph SDK: record files (one file fused solo, many as one set under one position), check and fetch proofs, open a position before the work exists and seal the task under it, verify proofs and BitGraphed files fully offline. One engine, three socket
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Xro 8.5 Autonomous coding agent CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Core authorship policy engine for Gommage.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Attribute LLM spend to the exact source line, and push it to the AIght Workspace at aight.studio.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Structured multi-agent software engineering orchestrator for Pi
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: OpenCode TUI plugin that renders LaTeX as Unicode using TeXicode.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: PTY wrapper that streams an agent CLI session (Claude Code, Codex) to a relay so someone else can watch it live in a browser.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Jeevan | — | 🪝 | |
|
Package purpose: A CLI dev-server watcher for Node/Express/MongoDB that catches runtime crashes and explains them in plain English with fixes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | sue738 | — | 🪝 | |
|
Package purpose: What your coding agents did, from their own transcripts — Claude Code, Codex CLI, Gemini CLI and more, side by side.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Build Elm custom elements and an Elm app in one JavaScript bundle
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: See and control what your coding agent does
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | — | — | 🪝 | |
|
Package purpose: Read-only Linux host security checkup: audit accounts, SSH, permissions, network and kernel
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Deploy Next.js apps to EasyHost
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: This project was bootstrapped with
[Create React App](https://github.com/facebook/create-react-app).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | ChaosChild | — | 🪝 🌐 | |
|
Package purpose: One command for all your AI subscription quotas – agent-first usage tracking across Claude, GLM, Alibaba, Google, OpenCode Zen and OpenRouter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Gas Killer gkvm toolchain launcher: installs gk-run, gk-anvil and gk on first use, then runs gk
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: File converter for Node.js and the command line: convert documents, spreadsheets, presentations, images, audio, video, ebooks, archives, data files and PDFs (docx to pdf, heic to jpg, mp4 to mp3, ...). Library, CLI and HTTP API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 50heads on the command line: ask verified real people from scripts and CI, wait for the answers and read the results.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Deepak | — | 🪝 🌐 | |
|
Package purpose: Web socket based finvu API implementation
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Amos Blomqvist | — | 🪝 | |
|
Package purpose: Interactive subagents for pi - spawn, orchestrate, and manage sub-agent sessions in Herdr panes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Sunil Singh | — | 🪝 🌐 | |
|
Package purpose: Official Node.js Telemetry & Crash Diagnostic SDK for AuraTrace Autonomous Backend Diagnostics
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Mlola | — | 🪝 | |
|
Package purpose: Source-copy CLI that writes framework-free Mlola UI items into your project
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Accounts by iAurelius for Expo: sign-in on the hosted page in an authentication session, tokens in SecureStore, useAuth() and getToken() that refreshes itself.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Read PDF and Word documents and produce AI summaries with Claude. Works in React Native, Node.js and the browser.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: L5 Container Runtime ABB 的执行侧（M14 计划 S2 轨）：一个 `SandboxExecutionBackend` SPI、 三层实现（进程内策略 / 子进程 rlimit / 容器短命实例）、装配期可用性降级链（③→②→①， fail-closed），以及 T8 资源封顶（CPU/内存）到各后端的接线与结构化超限事实。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Install BMad plus the bglad overlay (Dev and Analysis, Jira specs, GitLab MRs).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Shigma | — | 🪝 | |
|
Package purpose: Plugin loader for cordis
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Errors, tracing, logs, profiling, session replay, user feedback and cron monitoring for browser, React, Next.js and Node.js apps, reported to FiveDock.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: ---
description: "The out-of-tree ocr tool: recognizes a scanned PDF or image page by page, merges the pages in order only after the last one, and saves one Markdown document with the heading levels the model decided."
kind: "package-reference"
---
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Yugash | — | 🪝 | |
|
Package purpose: Itero — Durable, model-agnostic engineering-loop control plane. Declarative workflows, quality gates, evaluators, and repair loops for autonomous AI coding agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Install SkyLab skills into your project
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Isaac Matthew | — | 🪝 🌐 | |
|
Package purpose: Model Context Protocol server exposing LinkedIn business-intelligence tools via the official LinkedIn API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Zero-glue document parser & AI extraction toolkit. Slice any PDF, DOCX, XLSX, TXT into raw text or guaranteed typed JSON with Zod.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A throwaway Docker sandbox: run untrusted code network-off, memory-capped and timed.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The agent's eye: render your UI at real viewports and measure what a glance would catch.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The whole tools-for-agents kit in one install: nine zero-dependency MCP tools for coding agents — coordinate, read code, run safely, hold secrets, remember, read the web, read data, recall, see — and ghost, a self that persists across sessions.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Claude Code 多 Provider 余量状态栏(零依赖,本地安装)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | EnRaiha | — | 🪝 | |
|
Package purpose: Evidence-gated bug-fix drill for DeepSeek Harness: failure signal to symbols, stage gates that a negative lookup cannot satisfy, plugin-run red/green proofs bound to a commit, c2g localization with a tgrep fallback, and a PR body rendered from the ledger.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Sylphx | — | 🪝 | |
|
Package purpose: Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web pages, images (OCR), audio and video (metadata, subtitles, transcripts). A fast Rust MCP server and CLI that runs on your machine. No API key.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Magneto IT Solutions LLC | — | 🪝 | |
|
Package purpose: Zero-touch autonomous Pinterest tracking for EDS
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | caodangdung | — | 🪝 | |
|
Package purpose: Continuous verification harness CLI for AI-assisted SDLC
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Inspect the Windows system/user PATH and other environment variables, and report which commands each directory actually resolves, which are shadowed, and which entries are dead or duplicated
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Antonio Blanco | — | 🪝 | |
|
Package purpose: Chat con Codex CLI (suscripción ChatGPT, sin API) desde tu app. Multi-turno + MCPs por proyecto.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Rostislav Matov | — | 🪝 🌐 | |
|
Package purpose: See every tool call your AI agent makes over MCP, hold the risky ones for your approval, and keep a secret-redacted journal that is tamper-evident with an external anchor. Self-hosted; grows into a control plane for many agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Lily: a terminal coding agent whose every run is isolated, pinned and recorded — a daily agent and a clean trajectory generator
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||