Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Gary Gentry | — | 🪝 | |
|
Package purpose: Engine for decision-model calls: model profiles, transport, sources, fixtures, spend.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Max Smirnov | — | 🪝 | |
|
Package purpose: Разбор прогонов автотестов с сервера CI: сводка, падения, исходники теста из билда, журнал разборов и HTML-отчёт. Только чтение.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: sayren MCP 서버 — 상점 컨텍스트 조회와 스토어프론트 생성
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Stateful mock of our eRx portal agent (LifeFile/VPI browser runner): the fulfilment job endpoint with strict response rules, a job store, fault presets, and x-internal-key callbacks.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Quick Books Online | — | 🪝 🌐 | |
|
Package purpose: The official TypeScript library for the Quick Books Online API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Shipabase | — | 🪝 🌐 | |
|
Package purpose: Privacy-first product analytics for JS/TS apps. No cookies, no localStorage, GDPR-friendly.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Giuseppe Rodriguez | — | 🪝 | |
|
Package purpose: Asynchronous Pi subagents in Herdr, with optional isolated Git worktrees (fork: worktree creation aligned with wt)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local agent for the OnDemand iOS Simulator Recorder plugin — records an iOS Simulator on your Mac and returns a video link.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Qiuyi Hong | — | 🪝 | |
|
Package purpose: Pi adapter for Addy Osmani's agent-skills
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Rakib | — | 🪝 | |
|
Package purpose: Software specification and product documentation chain: MRD, BRD, PRD, Design Spec, TRD, and QA Test Plan, built on ISO/IEC/IEEE 29148, 29119-3, 25010, BABOK v3, and WCAG 2.2. Installs into Claude Code, Cursor, Copilot, or any AGENTS.md agent, and prints
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Peaje for Next.js: runtime proxy, rewrites and the head block that make your site answer 402 (MPP, x402), MCP and OpenAPI on your own domain.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Pull Request Management MCP Server for GitHub PRs, CI logs, review threads, and Linear policy validation
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Agent Skills and visible-browser Python runtime for social media
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI for the Fiber AI API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Alexey Prokhorov | — | 🪝 | |
|
Package purpose: Run npm scripts and shell commands in parallel or sequence, with glob matching, reusable pipelines, colored labels, and grouped output
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Marat K | — | 🪝 | |
|
Package purpose: Assemble multi-language documents with shared Markdown fragments, drift protection, journalled crash recovery for output writes, and structural translation-parity checks.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Edge & Node and contributors | — | 🪝 | |
|
Package purpose: React components for the Edge Design System
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter AI, Inc. | — | 🪝 🌐 | |
|
Package purpose: Blender modeling documents, inspectors, commands and presentation for Volter Editor.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Dojah DeviceGuard web SDK — device fingerprinting, device recall and fraud risk scoring.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Fixo | — | 🪝 🌐 | |
|
Package purpose: A WebSockets library for interacting with WhatsApp Web
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Multi-provider AI gateway with session memory and MCP tool execution
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Dynamic workflows for Pi: reusable multi-agent workflows with configurable model roles.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A small Jev-powered bridge to Chrome through the Chrome DevTools Protocol.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Jason Quense | — | 🪝 | |
|
Package purpose: Calendar! with events
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The tokamak CLI: build native apps from a Cloudflare Workers codebase
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Portal CLI — configura y construye variantes de tu app Expo (development / preview / production).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The TypeScript SDK for Capa's content API: REST and GraphQL reads typed from your models, Next.js caching and live preview, and codegen.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Run native coding agents from application code or a local CLI, with sessions and optional specialists.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Geodd command-line tools for people and AI agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Start a new app on canui: npm create canui@latest my-app
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Critical Labs | — | 🪝 🌐 | |
|
Package purpose: Persistent, verifiable identities for AI agents: email mailbox, MCP server, session identity pool, and setup CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | T. Rithik Krishna | — | 🪝 | |
|
Package purpose: OptiVision RAG: extreme token compression for vision-language document retrieval (npx launcher for the Python CLI)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Typed real-time database with incremental queries, live subscriptions, and persistent storage.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 12d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Scaffold a new SpaceFn project with a single command.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | zacharyweidenbach | — | 🪝 | |
|
Package purpose: The campaigns family for @goodbones/core: a refactor tracked as objectives over sectors through phases, with a ledger that only shrinks on its own and a diff-scoped nudge.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: auto-ticket 原生本機 launcher：以 npx 取得並啟動 API/worker/web，runtime 從 GitHub Release 惰性下載。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Runs lifecycle scripts for named packages while .npmrc's ignore-scripts blocks everyone else
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Pre-commit and CI security scanning — gitleaks, semgrep, lockfile-lint and a config-integrity check
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A comment contract scanner, a Claude Code edit gate and a CI check that fails only on newly added violations
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Mindfold LLC | — | 🪝 | |
|
Package purpose: Minimal memory layer for AI coding agents: spec, research, journal, and cross-session recall. Fork of Trellis 0.6.17.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | wxn0brP | — | 🪝 | |
|
Package purpose: Git-backed adapter for ValtheraDB
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: D-Mail — model-driven context folding for Pi.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Enterprise Agent Workbench: scene-card grid with dynamic parameter forms, session launch, and control room monitoring for DSH Web UI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Bootstrapper for the OKF Multi-KS system: preflights prerequisites, clones the repo, and runs install.sh.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Robert House | — | 🪝 | |
|
Package purpose: Homebridge plugin for Hayward OmniLogic — filter pumps, water temperature, and ColorLogic lights with show selection
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Aidan Bleser | — | 🪝 🌐 | |
|
Package purpose: Author skills once, sync them everywhere, install them per project.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Magicianhax | — | 🪝 | |
|
Package purpose: Turn off your display on Windows instantly, from a global hotkey, a tray icon or the command line.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Xeno | — | 🪝 | |
|
Package purpose: Official Xeno.JS CLI for scaffolding and generating explicit TypeScript application architecture.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||