Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: ChatGPT Codex backend model binding for Castle agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Can Sirin | — | 🪝 | |
|
Package purpose: Agent-native TypeScript code-graph + smell CLI: parse a folder with oxc, resolve it with tsgo, measure every function, flag smells, and rank refactor targets as deterministic JSON.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Playwright-based browser host for @namzu/sdk: accessibility snapshots with element refs, a host-side site policy checked after every navigation, sign-in and CAPTCHA detection that hands the page to a person, and persistent profiles.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Playwright browser capability for Castle agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Ken Hibino | — | 🪝 | |
|
Package purpose: A React component for Google Maps Places Autocomplete
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for LaunchEngine.dev — find public posts where someone is asking for a tool like yours, and draft replies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server exposing Redmine REST API as tools (stdio)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | juncaifeng | — | 🪝 | |
|
Package purpose: Git hooks that turn OpenSpec workflow conventions into enforced constraints — with a task-completion evidence chain (check ratio / evidence rate / archive gate)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for OpenProject API v3
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Bosithon | — | 🪝 🌐 | |
|
Package purpose: Rooms for chats, calls and multiplayer games: peers join with a code and talk through one API. Connects at once over an end-to-end encrypted relay and upgrades to direct WebRTC. Self-hostable, browser + Node.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Self-serve CLI + agent skill for x402 integration-risk gate. Frozen POST /v1/decide/integration-risk @ $0.10.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | AgentQuay | — | 🪝 | |
|
Package purpose: AgentQuay TypeScript SDK — 让 AI Agent 通过标准 MCP 协议发现并调用你的桌面应用方法
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | backendexpert | — | 🪝 | |
|
Package purpose: Create production-ready NestJS applications with the BlackAlphaLabs architecture.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | Rudratosh Shastri | — | 🪝 | |
|
Package purpose: A policy gate for AI agent tool calls, with provenance tracking. Blocks what prompt-injection classifiers miss.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Doman Digital | — | 🪝 | |
|
Package purpose: The first thing that runs on a new Doman Digital client site: installs the house packages and writes the per-site files they read (the facts file, route policy, backlink register, redirects, JSON-LD, the designer credit, house docs and the SEO checks), so
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Septe-l | — | 🪝 | |
|
Package purpose: Homebridge plugin to control TCL Android TV (e.g. 65X10) over network ADB: power, HDMI/app/broadcast input switching, channel selection and volume.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | naldomadeira | — | 🪝 | |
|
Package purpose: A Dashboard server API built on top of bull or bullmq.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Wangshu Zhu | — | 🪝 | |
|
Package purpose: Install and start AgentHarness with its bundled DeepSeek Harness runtime
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Copy Beast UI source components into a Beast + Octane project
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The CLI manages one tunnel identity and multiple subdomain routes per profile. The default profile is named `default`.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | 极时通网络 | — | 🪝 🌐 | |
|
Package purpose: 云销管家 MCP 连接器：在 WorkBuddy 中用自然语言查询商品、库存、客户欠款与单据，并开具销售单。数据全程在你自己的服务器与电脑之间流转。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | melkimahdali | — | 🪝 | |
|
Package purpose: Buat proyek Zentara baru: npm create zentara@latest
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | alexlikevibe | — | 🪝 | |
|
Package purpose: Background tasks extension for pi. Claude Code parity — auto-background capped at 30s (min(timeout, 30)), run_in_background flag, Ctrl+Shift+B manual background with live hint, mid-turn <task-notification> completion messages, streaming jobs attach, file-
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A tiny, provider-agnostic rate-limit status tool for coding agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The review before you launch: accessibility, security, privacy, legal and surprise-bill risks of a website, from your terminal or your AI editor (MCP).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 让 DSH 通过 CDP 驱动本机已开启调试的 Chromium 内核浏览器：常驻连接只授权一次，零新增工具 schema，零运行时依赖。Drive any already-running Chromium browser over CDP from DSH — one approval per connection, no extra tool schemas, no dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DeepSeek Harness Cordis plugin for the private SkillHub registry: search, view, install, and manage agent skills with an API token
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A terminal AI coding assistant powered by Dinoiki and OpenAI-compatible providers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Patrik Henningsson | — | 🪝 | |
|
Package purpose: Create graphs from module dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Pi extension that attaches running Pi sessions to Pi Remote Control (prc).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Mæxim | — | 🪝 | |
|
Package purpose: Local SQLite knowledge base for your GitHub stars and X bookmarks, with full-text search, a CLI, an MCP server, and a pi search palette.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Embeddable LeverAcc account and lending widget
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Thin npm launcher for the Open Forge native CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | dako | — | 🪝 🌐 | |
|
Package purpose: dako 的命令列工具：讓你（或你的 AI agent）讀取 dako 各工具的資料
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Work with Transformation OS from a repository - match a change to its task, keep the deliverables tree honest, and reach every MCP tool the server has, without carrying their schemas in a prompt
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for a self-hosted AgentSearch API: web search, page extract, and JavaScript page rendering
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: avlsdk-lite-mcp 的 win32-x64 平台二进制与病毒库。不要直接安装，请装 @antiylabs/avlsdk-lite-mcp。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: SDK for the camelAI hosted agent runtime: define tools in your app, and the runtime runs the model loop, history and sandbox.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Command-line tool for building and managing shops on the Bolder platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Comprueba los tipos dentro de las plantillas de Ascua: props de componentes, manejadores y refs, con los errores en tu archivo.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | GodDoesNotPlayDice | — | 🪝 | |
|
Package purpose: Discord Rich Presence for Google Antigravity CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Multi-tenant per-user cron scheduler — Postgres-backed, LISTEN/NOTIFY + polling, HTTP callback dispatch
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Thin-shell fork of @deepseek-ai/dsh-subagent: takes over the official `subagent` row for two wording changes — the continuable child's return guidance in Chinese wording and the child's Chinese delegation-scope runtime context (`subagent:delegation`) — pl
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Hyze Cloud | — | 🪝 | |
|
Package purpose: Command-line interface for Hyze Cloud — deploy projects, follow builds and read logs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | NowEat | — | 🪝 🌐 | |
|
Package purpose: Conector MCP de nowEat: consulta tu restaurante (ventas, reservas, carta, sala, equipo, clientes) desde Claude, ChatGPT, Cursor y otros asistentes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: PrjLab command-line client: push, pull and clone your projects with their context.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CoAgents Connector: connect Claude Code or Codex to a self-hosted CoAgents team service over MCP (tasks, leases, handoffs, artifacts, search).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Open Markdown Graph Base — CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Smoke Signals AI | — | 🪝 🌐 | |
|
Package purpose: Command-line interface for SocialOS: LinkedIn listening, campaigns, inbox and content from your terminal, scripts and AI agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||