Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 15d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 15d | — | — | — |
Unverified Signal
|
— | npm | latest | TakımÇizgisi LSH Yazılım Geliştirme Grubu Ve Topluluğu | — | 🪝 🌐 | |
|
Package purpose: Otonom yerel AI kodlama asistanı (AJAN AI) — Amber Apricot
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 16d | — | — | — |
Unverified Signal
|
— | npm | latest | Jacek Dąbrowski | — | 🪝 🌐 | |
|
Package purpose: Synerise base-context unified LLM API and provider configuration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 16d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 16d | — | — | — |
Unverified Signal
|
— | npm | latest | Amazon Web Services | — | 🪝 | |
|
Package purpose: Version 2 of the AWS Cloud Development Kit library (with updated dependencies)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 16d | — | — | — |
Unverified Signal
|
— | npm | latest | Victor Savkin | — | 🪝 | |
|
Package purpose: The Workspace plugin contains executors and generators that are useful for any Nx workspace. It should be present in every Nx workspace and other plugins build on it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 16d | — | — | — |
Unverified Signal
|
— | npm | latest | Victor Savkin | — | 🪝 | |
|
Package purpose: The Nx Plugin for Docker to aid in containerizing projects.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Babak Abbaschian | — | 🪝 | |
|
Package purpose: Provider-agnostic LLM port interface, registry, cost gating, content blocks, validation strategies. The foundation of llm-ports.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: ## Steps to use the Keepicker.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Connectcases.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Connectcampaignsv2.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Connectcampaigns.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Connect.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Connect Contact Lens.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Config Service.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Compute Optimizer.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Compute Optimizer Automation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Comprehendmedical.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Comprehend.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Cognito Sync.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Cognito Identity Provider.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Codestar Notifications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Codestar Connections.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Codepipeline.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Codeguruprofiler.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Codeguru Security.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Codeguru Reviewer.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Codedeploy.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Codeconnections.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Codecommit.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Codebuild.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Codeartifact.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Cloudtrail.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Cloudtrail Data.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Cloudsearch.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Cloudsearch Domain.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Cloudhsm V2.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Cloudfront Keyvaluestore.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Cloudformation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Clouddirectory.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Cloudcontrol.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Cloud9.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.6.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Cleanroomsml.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.6.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Cleanrooms.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Chime.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Chime SDK Voice.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Chime SDK Messaging.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Chime SDK Meetings.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Chime SDK Media Pipelines.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Chime SDK Identity.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||