Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Jean-Jerome Levy | — | 🪝 | |
|
Package purpose: Evidence-gated harness for coding agents, inside Pi. The checks are frozen before the change exists; it is accepted on evidence, never on the agent's word.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Forensic audit client library for Mojaloop services
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | ALonT1 | — | 🪝 🌐 | |
|
Package purpose: QQ（OneBot v11 / NapCat）World：群聊与私聊的收发、按号认人、听得见语音、看得见图、发图、人册与群梗册，以及主动开口的节拍——上游 cortico-world-qq-better 的 fork
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | darksns | — | 🪝 🌐 | |
|
Package purpose: Drive Chrome as text from the terminal: read a page's structure, fill forms, click, navigate. Built for CLI agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: See how much of your test run is spent in hooks and what to change: slow, costly, failing and unused Cucumber, Playwright, Cypress and WebdriverIO hooks. No test code changes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Yerins Abraham | — | 🪝 | |
|
Package purpose: Watches whether an AI coding agent is still doing what you asked. Runs beside Claude Code or Codex and says when the work stops matching the request.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mcp server implementation for Zoho Analytics Plugin
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Rizwan3d | — | 🪝 | |
|
Package purpose: JavaScript and TypeScript SDK for StemCode via edge-js/.NET interop.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH Skills Manager — Load and safely manage local Agent Skills in DSH
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Simple Smooth Safe | — | 🪝 | |
|
Package purpose: Why does my solution depend on msdyn_*? Find every dependency of an unmanaged solution on a managed solution the target environment lacks, see the component that causes it, and fix it in place: convert tables to shells, remove components, strip msdyn colu
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | ludejun | — | 🪝 🌐 | |
|
Package purpose: AI-first rich-text editor SDK on Tiptap: streaming AI writing that lands as real document nodes, AI-generated formulas and diagrams, plus toolbar, bubble menus, tables, code, images, 16 languages and session replay. React UI today, framework-agnostic core
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Persistent, flat-token, project-scoped memory for coding agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: OpenCode 1.x plugin: CDO.AI provider registration, model discovery, and budget panel
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: OpenCode 1.x plugin (dev environment): CDO.AI provider registration, model discovery, and budget panel
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Route mid-run Pi prompts to steering or follow-up with TypeSafe Jev.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Durable auto-research experiment loop for DeepSeek Harness, with create / run / monitor in the official Web GUI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The public `0.1.0` CLI initializes the first 14 Capsule components. This `0.2.0` candidate initializes the complete 62-entry library. Until `0.2.0` appears on npm, use the packed CLI archive for complete-catalogue testing. After publication, run `npx @val
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Yizack Rangel | — | 🪝 | |
|
Package purpose: Build your Twitch Extension and Extension Backend Service (EBS) in a single Nuxt project.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | MetaSolutions AB | — | 🪝 🌐 | |
|
Package purpose: MCP server for the EntryScape API - enables AI agents to interact with EntryScape data following DCAT-AP standards
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Self-contained, local-first digital employee skill: collect evidence, AI-organize the employee profile, and bundle one portable harness ZIP.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Installer and launcher for the native Dynomate CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: HuaQiu About section in the DSH settings page: original DSH mark, bundled DSH version and the Powered-by-DSH claim.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Kortyx | — | 🪝 🌐 | |
|
Package purpose: OpenRouter provider integration for Kortyx.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Provider-native search CLI with optional AI cleanup
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: DSH-owned subscription login powered by Pi AI adapters: OAuth plus official Plan API keys, with an independent credential store.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Let your viewers join youe game!
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Johnny Chadda | — | 🪝 🌐 | |
|
Package purpose: Shared project rooms where existing AI agent sessions coordinate through chat, tasks, decisions, and files.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: HarmonyOS programming development AI agent
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mémoire durable locale pour agents : search hybride (lexical + vectoriel RRF), conflits, contextes attribués. Zéro réseau par défaut, provider sqlite natif.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Vue 3 AI coding rules and verifiable quality checks
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | dsh-toolkit contributors | — | 🪝 | |
|
Package purpose: Aggregate DSH plugin release evidence (lifecycle tests, regression evals, compatibility, quality budgets) into one signed, independently verifiable pack. Does not run the tests — proves which ones ran and that their reports were not altered.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Fil Heinz Re La Torre | — | 🪝 | |
|
Package purpose: Terminal haggling game vs. an AI opponent trained entirely by self-play reinforcement learning (no dataset, no LLM)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | v1nvn | — | 🪝 | |
|
Package purpose: Browse statusline variants and configure the live status line and agent panel — the statusline CLI behind the statusline plugin.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: 使用 nano-banana-pro.一键生成gif图
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Ganesh Shivlal Kute | — | 🪝 🌐 | |
|
Package purpose: Self-hostable Hivecode relay — the server that refuses a write when someone else holds the file.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: HASA shared core engine — providers, agent loop, tools, session, permissions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Transactional scheduler, SQLite task store, Gates, and command runner for piup.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: OpenAI-compatible local mux for subscription CLIs (Cursor, Claude, Antigravity), Ollama, and OpenRouter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | SnoutData | — | 🪝 🌐 | |
|
Package purpose: The JavaScript client for SnoutData Cloud: the data API, auth, storage, realtime and Snout Functions of one project, from one URL and one key. No dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | valyou.finance | valyou.finance | 🪝 🌐 | |
|
Package purpose: Company fundamentals from valyou.finance for Claude Desktop and other MCP clients
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Microsoft Corporation | — | 🪝 | |
|
Package purpose: Fork pseudoterminals in Node.JS (HarmonyOS port)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Create a ready-to-run Nuxt blog powered by Clarity Theme.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | James Prevett | — | 🪝 | |
|
Package purpose: Install and manage systemd services
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Image generation and editing tools for opencode, with inline rendering in the conversation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Andrew Louis | — | 🪝 | |
|
Package purpose: Chronicle things-todo extraction plugin
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||