Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run the swerver gateway with TypeScript route handlers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: OnlyFlow MCP server: let Claude, Cursor or Codex read your accounts and analytics, upload media and schedule tasks.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Lean markdown-folder-to-single-HTML documentation viewer. Two dependencies. Zero nonsense.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Mike G0KAD | — | 🪝 🌐 | |
|
Package purpose: Cast live KIP dashboards to low-cost ESP32 touchscreens, with touch passed back to KIP
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Kyle McCullough | — | 🪝 | |
|
Package purpose: Rank a repo's test files by how useless they are: cost carried versus regressions they can plausibly catch.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for Google image and video models (Nano Banana, Gemini Omni, Veo) on Gemini Enterprise Agent Platform, with a one-command service account setup for Claude Code, Cursor and Codex
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | kitasid | — | 🪝 | |
|
Package purpose: Turn a codebase into a knowledge graph your coding agent can query: a SKILL.md skill plus zero-dependency graph tools.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Daniel Dewhurst | — | 🪝 | |
|
Package purpose: Agent skills and a companion CLI for planning, tracking, and drafting fiction in markdown.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Praroop Anand | — | 🪝 🌐 | |
|
Package purpose: Full-Stack Airtable MCP Server: Unified REST/Metadata API and Browser CDP Interface Designer Automation
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Open any terminal program (like Claude Code) on your phone: tui2web claude
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Sourabh Shegane | — | 🪝 | |
|
Package purpose: Stash multiple prompts for later in Claude Code and Codex CLI: Ctrl+F to park a draft, Ctrl+Q to bring it back. Persistent, per repo.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Cesar Lopez | — | 🪝 | |
|
Package purpose: CLI for creating projects from the Cesarq React Starter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Screenshot-based page catalog & visual regression MCP server (Playwright driver)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Nik S. | — | 🪝 | |
|
Package purpose: OpenCode plugin — prunes broken graphify nodes and merges your OKF bundle after every graphify update.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | yusixian | — | 🪝 | |
|
Package purpose: Agent-friendly versioning and release notes from change fragments
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Context-budget and compaction handoff support for pi: pressure markers, seed rewriting, proactive compaction, prior-session search, and context cache.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Graphify knowledge graph plugin — CLI wrapper tools for agents and interactive graph visualization
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Find third-party API calls in your code that use endpoints the vendor has already deprecated, migrate the ones with a safe replacement, and check whether your tests would notice.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript client for the gmaps.dev places API. Not affiliated with Google.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK for OrisNFT — private encrypted inboxes on Robinhood Chain
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A static website builder for Cloudflare Workers with editable pages, Markdown posts, local search, themes, and consent-gated integrations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Min Xie | — | 🪝 | |
|
Package purpose: MCP connector that lets any AI agent operate PixInsight: a toolbox of PixInsight operations, extensible with runtime tool packs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 多 Agent 微信远程环境检查工具，检测 Node.js、DSH、Codex 与 Claude Code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Template project for writing node package with napi-rs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A live inspector for Effect programs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Know your Git state from inside Node.js.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Workspace-first authorization, scoped approvals, and macOS shell containment for Pi (formerly pi-warden). See SECURITY.md and docs/COMPATIBILITY.md for verified versions and limits.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Spaceage, LLC | — | 🪝 🌐 | |
|
Package purpose: TypeScript client for the Visibox Remote Control API, for building Visibox integrations
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for Unfenced - full-web access for AI agents: fetch any page as a real user sees it and get clean, LLM-ready markdown back, with a real-browser fallback for JS-heavy and protected sites.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Rahul Arya | — | 🪝 🌐 | |
|
Package purpose: Native Cursor provider for Pi Coding Agent (OAuth + Connect/protobuf streamSimple)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 多 Agent 微信连接环境检查工具，检测 Node.js、DSH、Codex 与 Claude Code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Siamak Mokhtari | — | 🪝 🌐 | |
|
Package purpose: Unofficial MCP server for torob.com — Iran's price comparison engine
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Jev-Omni decision classifier running in the browser on WebGPU
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The Space Lens workbench as a DeepSeek Harness panel: the directory the current session is working in, scanned and explored by Space Lens itself.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Check, format and sync Archer (.arch) architecture files — and reach the Archer MCP server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Empx | — | 🪝 🌐 | |
|
Package purpose: MCP server exposing EmpX's cross-chain aggregator to AI agents (Claude Code, Codex, any MCP-aware host)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Zettai Labs Code Windows background manager
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Zettai Labs Code Windows background manager
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Read-only MCP server exposing the BeaconMFG灯塔工厂 supplier directory (search vendors, get vendor detail, get capability card, multi-turn sourcing) to any MCP-compatible agent. No API key required.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Per-session DSH prompt cache keepalive
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The win32-arm64 binary for the aimlapi npm package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The win32-x64 binary for the aimlapi npm package
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript client for the Apixa API: db, storage, kv, queues, functions, browser, mail, auth, sandbox and apps. fetch only, zero dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Use Jev's calibrated probability entropy to decide which migration/refactor sites can be safely automated, and which need a human.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Native linux-arm64-musl runtime for @arcships/light-ocr
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||