Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 鲸鱼娘·灵动挂件：余额/用量/上下文进度/彩蛋
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: In-terminal file previews for Pi and Oh My Pi
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Leon Liu | — | 🪝 🌐 | |
|
Package purpose: Renderer for the flipbook agent skill: deterministic HTML-to-MP4 with built-in acceptance checks
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Muhammadjon Rahmatullayev | — | 🪝 | |
|
Package purpose: Mini games in your terminal while Claude Code works: typing race, 2048 and Bug Smash. Tells you the moment Claude is done.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Multi-shape pi subagent delegation: supervised forks, direct workers, chain steps, detached drivers, steering, and worktree isolation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run only the tests that matter. Test impact analysis powered by Jev.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A map of your codebase for AI agents: code graph, search, call paths and change impact. No API key.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: An OpenMRS seed application for building microfrontends
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | Sandeep Sirodia | — | 🪝 | |
|
Package purpose: Make your AI agent forget the secrets it saw. Finds and redacts API keys in Claude Code / Codex transcripts.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Talk to a coding agent in a herdr pane from the browser: chat, live status, and a shared browser screen.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Virgil in your terminal — an AI agent that does real work on your machine. No account, no store, one command.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Sign in with the AI plan you already pay for, into your app's own store.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Sergii Kozak | — | 🪝 | |
|
Package purpose: Gugu build of pi-acp 0.0.34: upstream source plus the patches in https://github.com/shuxueshuxue/gugu-acp/tree/main/bridges/pi-acp
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Optional local STDIO bridge for the Izdax remote MCP service
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Arena CLI runtime binary for win32-x64. Installed automatically as an optionalDependency of @pawbxj/arena-cli.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The giga command: version CAD files with GigaCAD from your terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Himz | — | 🪝 | |
|
Package purpose: Contract-driven UI for coding agents. Ship component contracts, let the agent materialize them once, compose screens from them, and gate every step with a deterministic check.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Jebadiah | — | 🪝 🌐 | |
|
Package purpose: LangChain.js StructuredTools for Jebadiah's x402 pay-per-call data APIs on Base mainnet
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: gydwdyy_ses 企业项目初始化与开发规范工具，包含受管理 Skill
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Jebadiah | — | 🪝 🌐 | |
|
Package purpose: Vercel AI SDK tools for Jebadiah's x402 pay-per-call data APIs on Base mainnet
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | xingwangzhe | — | 🪝 | |
|
Package purpose: Native Rust multilingual font subsetting and persistent cache for Vite builds
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: See which Git worktree and branch is serving each localhost port.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Render Markdown and Markdown diffs in the terminal
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | maimai2025 | — | 🪝 🌐 | |
|
Package purpose: 【自用】把 bot 的真实指令变成在线沙盒 API：文档站 / 控制台都能直接试运行指令，支持多轮会话、图片、语音（SILK 转码）与文件，附件可直接给网络 URL 由沙盒代拉，沙盒用户自带头像（默认文档里麦麦的）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Remove metadata (GPS, device, dates, AI labels) from video, PDF, RAW and photos from Claude, Cursor and other AI assistants. Uses the AI Metadata Cleaner API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: JavaScript-like scripting language with Minang keywords
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Host-side WAV decode (in-process) and FLAC decode (via FFmpeg) for 8BitAudio. The compiler calls this; the target image never contains it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Installer for three optional native OpenCode V2 agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Node.js binding for FastFileLink, backed by the portable ffl.com APE
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Yeffet | — | 🪝 🌐 | |
|
Package purpose: Open-access art in your terminal — find one exact work (never a guess), search 11,500 public-domain works from 13 museums, and download full-resolution files with their rights attached. Built for coding agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | jhhornn | — | 🪝 🌐 | |
|
Package purpose: Enterprise-grade NestJS module for Odoo ERP integration via XML-RPC
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The @amritk/nish native compiler for Linux on x86_64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The @amritk/nish native compiler for Linux on ARM64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The @amritk/nish native compiler for macOS on ARM64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The @amritk/nish native compiler for macOS on x86_64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CDK8s constructs for composing Tekton pipelines as code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Tomáš Šafář | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | SyntaxCodeBR | — | 🪝 🌐 | |
|
Package purpose: James-IA — agente de terminal (CLI) com ferramentas reais de arquivo/shell, autocorreção e memória por projeto, via james-ia.com.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Pedro Borges | — | 🪝 | |
|
Package purpose: Deploy every git branch to its own HTTPS URL on your own VPS.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Servidor MCP para crear y ejecutar tests de SwiftTestQA desde Claude Code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A browser front-end that lets anyone deploy their own Sui coin — a client-side equivalent of `blockchain/sui/sui-token-template`. **Everything runs in the browser**: the user's wallet signs and pays gas, and nothing is compiled or signed on a server. The
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Extenshi.io | extenshi.io | 🪝 🌐 | |
|
Package purpose: Lightweight payment SDK for browser extensions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Autonomous CLI agents (pi harness) that work GitHub issues independently in isolated worktrees and open pull requests
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Deployment workbench: provider registry, per-role sources, credentials, GitHub environments, rta deploy/github commands.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||