Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Node.js bindings for Lindera morphological analysis engine
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Seta Labs development standard: ESLint, Prettier and tsconfig presets, the `blueprint` CLI (wiring and structure checks, agent lint hook) and BLUEPRINT.md
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Database gates for Postgres projects: rls-verify, Atlas and Drizzle wrappers, and a per-checkout Postgres container.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Report pi session activity to Claude Session Monitor
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: postMessage bridge contract between gem-web and browser-playable games
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: xplat — dev/build/doctor for octane-xplat apps (web + iOS + Android + experimental macOS)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Unified AI dispatcher. One calling contract for OpenRouter, AWS Bedrock, direct OpenAI, and Cloudflare AI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Your year of building with AI, as Wrapped-style cards, and an optional private profile. Reads your Claude Code and Codex logs locally.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Command-line rendering for Gum.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Hydrate provider API keys into the session environment from a local cache.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A compact, read-only Files and Git sidebar for Herdr and cmux
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | JustFront | — | 🪝 🌐 | |
|
Package purpose: Установка AI-скиллов в Cursor, Codex, Claude Code, Antigravity и OpenCode
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | pypi | 1.0.0rc4 | — | — | 🪝 | |
|
Package purpose: Primary Path: self-hosted approval inbox + tamper-evident audit trail for AI agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 10d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: React 19 / Mantine 9 preview, planned layout, native PDF and typed XLSX for GK-DSL. The coordinated release is **1.7.1**. Check exact npm versions before installing:
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Nick Loui | — | 🪝 🌐 | |
|
Package purpose: Model Context Protocol (MCP) server for interacting with Paperless-NGX document management system. Enables AI assistants to manage documents, tags, correspondents, and document types through the Paperless-NGX API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Start a Pipelex method app: npm create @pipelex/method-app@latest my-app -- --method <bundle | mt_… | address>
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | vic-cio | — | 🪝 | |
|
Package purpose: wi: the CLI that owns every write into a Recursive Board vault
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Martin Lipp | — | 🪝 | |
|
Package purpose: Run automated GUI test sessions on Windows (Electron + Playwright e2e, CDP screenshot scripts, packaged-app smoke tests) on a hidden desktop: no windows on your screen, no stolen focus, and test runs that can go side by side.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Install Tech Inject components into a consumer React + TypeScript project.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Command line for a Kikimora Cloud instance: projects, credentials, repositories, tools, agents, tasks, sessions and costs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP stdio server for the Qianxing UI simulator
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Valkyrie Compiler Collect shared host runner for assembled Legion and Asgard CLIs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | Matija Mikulinec | — | 🪝 | |
|
Package purpose: AI coding agent security for Claude Code: reports risky actions in its transcripts, finds secrets left in them, and scores agent credentials.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Tzolkin | — | 🪝 🌐 | |
|
Package purpose: Omni CLI (alpha): transforma uma pasta da sua máquina em um espaço Omni e sincroniza entre máquinas.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Audit a product's UI for AI slop with Broom, from the terminal. No GitHub access needed.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 10d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Express.js loyihalari uchun professional va qatlamli (Layered/MVC) scaffolding CLI generatori
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: OpenCode TUI plugin that renders a graphical git commit graph in the sidebar
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: laya predict / laya bench command line
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Research: does letting Jev choose Claude Code's reasoning effort per step save money? A cache-safe proxy, shadow mode, and a benchmark to measure it. Unofficial.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | ReactTV | — | 🪝 | |
|
Package purpose: Takes a scripted tour of your web app and hands you back a video.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Align Software Company | — | 🪝 🌐 | |
|
Package purpose: Unofficial, self-hosted Model Context Protocol server for the OpenSolar API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | HARSHIT VADADORIYA | — | 🪝 | |
|
Package purpose: Create a Node.js project from my industrial-standard template
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Earn while Claude thinks: paid one-question surveys in the idle window. Local daemon and CLI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local MCP server for TouchDesigner with native project tools and offline skill guidance.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: AI-Native 闭环工作流 + wiki 知识层脚手架——flow-kit init 一条命令为新项目装好 .agents 工作流引擎（阶段命令/角色契约/门禁钩子/kb 检索/看板/规则面预算）+ workflow 文档闭环 + wiki 知识库，装完自包含、零运行时依赖
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | EchoCyan | — | 🪝 | |
|
Package purpose: 轻量级 AI 驱动的代码审查 CLI 工具
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Juscribe, Inc. | — | 🪝 🌐 | |
|
Package purpose: The Juscribe MCP server: lets your AI tool read and work your Juscribe board.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Read-only MCP server over the Debifi integrator API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Spec-driven development with multi-agent coordination: task claims, conflict detection and a shared decision log, so multiple AI coding agents can work the same change safely.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Eugene Greendrake | — | 🪝 | |
|
Package purpose: Vite config factory and build-env helpers for Vue 3 single-page apps: plugin set, strict dev port, alias, dedupe and source-package pre-bundling rules
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TopoRealm 1.0 web seam inside the daemon: HTTP static hosting (web-ui build) + WS endpoint reusing the IPC wire envelope and the same event fanout (blueprint §2/§5, D22).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TopoRealm 1.0 CLI (bin: toporealm): core verbs, module add/rm/list, migrate, host sync, --json envelope, exit codes 0/1/2, hint+fix errors, did-you-mean.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The dotctl command: build mini apps and run them in the simulator
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: BotConnector CLI/TUI -- a local-first AI agent for the terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: opencode gates for zft — the contract-first traceability framework. A dispatch gate that requires a contract binding before implementation work, and an L0 lint gate that fires on every .zft/ edit.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Foxxo | — | 🪝 🌐 | |
|
Package purpose: MCP server for Targetprocess: read and manage cards by name, with your team rules enforced and every write verified
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Arcapis | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK for Arcapis — the shared on-chain cache and pay-per-call gateway for AI APIs on Arc. Per-call EIP-712 auth and automatic cross-agent cache-hit detection.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: PRE-ECHO where the agent is: hold a second thought while it works, and it reaches the agent within two beats; a status line that rings when it finishes; the MCP server. Shadow mode spends nothing until someone presses.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Niadra | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK for Niadra, the omnichannel memory layer for a company's AI agents: context before the model call, history, tools and MCP.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Link System | — | 🪝 | |
|
Package purpose: Scaffold Link System back (Fastify+Prisma) and front (Next+shadcn) projects
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||