Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | aiAxonIQ Browser Agent Team | — | 🪝 🌐 | |
|
Package purpose: aiAxonIQ Browser Agent
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Embeddable PTY terminal toolkit inspired by Orca
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | mohak34 | — | 🪝 | |
|
Package purpose: Fork of @mohak34/opencode-notifier with OpenCode 2 plugin API support. OpenCode plugin that sends system notifications and plays sounds when permission is needed, generation completes, or errors occur
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Import Vendure products from a native CSV, a Shopify products_export.csv, or the Shopify Admin API — with pre-import validation and per-row error reporting.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Seyhun Akyurek | — | 🪝 🌐 | |
|
Package purpose: Agent-friendly CLI for the Seyhun Akyurek WebMCP portfolio API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Git worktrees beside the main checkout, each with its own ports, env files and optional local Supabase stack
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 用于生成遵循统一 UI 规范的 Vite 前端项目。首版支持 React + Ant Design 和 Vue 3 + Element Plus。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Pablo Loschi | — | 🪝 | |
|
Package purpose: Automated Kubernetes manifest migration tool for API version upgrades
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server exposing the Confluence Server/Data Center REST API (search, pages, spaces, labels, attachments)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Official TypeScript/JavaScript SDK for the EasySignage Open API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Show Volcengine Ark Coding Plan / Agent Plan usage in the pi TUI via arkcli
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Jason Song | — | 🪝 | |
|
Package purpose: Zero-pollution, 0-idle-token task memory for AI coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Small evidence-based verification loop for coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.1 | — | — | 🪝 | |
|
Package purpose: Python SDK bridge for Holonomy
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeSafe Jev's three judgments (noul/choice/score) as one stdin-to-cut-line CLI for coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Multi-Platform Social Media Intelligence MCP Server CLI wrapper
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Sergei Drozdov | — | 🪝 | |
|
Package purpose: Architectural memory for AI coding agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | sirine.sarray | sirine.sarray | 🪝 | |
|
Package purpose: CI gate that blocks releases when live Supabase Postgres privileges drift from what your migrations declare.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Reza Salimi | — | 🪝 | |
|
Package purpose: Smart RTL patcher with UI settings for Antigravity Desktop and Antigravity IDE.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: npm create @usequeek/theme — start a Queek storefront theme from the official starter.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local spreadsheet authoring, formula calculation and loss-conscious XLSX editing for Xpert sandboxes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | PledgeStack Contributors | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI for connecting AI Generator content creation to personal Agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Samsad Chalil Valappil | — | 🪝 | |
|
Package purpose: Shared ADB capability layer for the ADB Controller VS Code extension and MCP server.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Write native React Native modules in TypeScript: the Lucent compiler, CLI, Metro integration, Expo config plugin and editor plugin
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Cross-Agent CLI for Pinduoduo product-page data and review exports through an authenticated Chrome CDP session
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Ahmed ALABSI | — | 🪝 | |
|
Package purpose: Measures how a webpage actually renders and prints it as compact text for AI coding agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Profullstack, LLC | — | 🪝 🌐 | |
|
Package purpose: Web Push that works everywhere, once: VAPID + RFC 8291 encryption from node:crypto (zero dependencies), a browser client that fetches the key at runtime and says exactly why push is unavailable, and service-worker handlers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Guillaume Mongin | — | 🪝 | |
|
Package purpose: Generic enforcement for the transpose/review engineering suite - registry, evidence, fingerprints, verdicts
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: DeepSeek Harness (DSH) bundle plugin: expose agent-mcp MCP tools as mcp__agentmcp__* via @deepseek-ai/dsh-mcp-client (stdio).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DeepSeek Harness session management (unofficial fork of dsh-chat-manager, not affiliated with DeepSeek or the upstream author): an official-slot plugin for dsh >= 0.2.0-rc.2 that reads archived conversations in place and permanently deletes sessions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Prebuilt ccwork-cli binary for windows-x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Prebuilt ccwork-cli binary for windows-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Auland-UI 的 MCP 服务：让 Cursor / Codex / Claude Code 之类的 AI 工具自己查到有哪些块、怎么取、提示词是什么。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | JacobLinCool | — | 🪝 | |
|
Package purpose: A CLI speech recognition tool, using OpenAI Whisper, supports audio file transcription and near-realtime microphone input.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | zimv | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Non-interactive OMA CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | SimplePod | — | 🪝 🌐 | |
|
Package purpose: MCP server for SimplePod GPU rental platform — manage instances, templates, market, billing, and SSH keys
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Kivo Browser local installer and release artifacts.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Model bindings for Castle agents: Anthropic, OpenAI-compatible and OpenRouter, Gemini and ChatGPT Codex.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Connect Castle agents to outside systems. First connector: a Playwright-driven browser.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Non-interactive OMA CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Sleekdo Contributors | — | 🪝 | |
|
Package purpose: Agent orchestration and verification system
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: CLI + MCP server for Kintsugi visual regression guard (install with: npx @kintsugi-ai/cli init)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | NightingaleWK | — | 🪝 | |
|
Package purpose: Local WorkHub workspace initialization and registry CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||