Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 17d | — | — | — |
Unverified Signal
|
— | pypi | 1.5.0 | OpenAPI Generator community | — | 🪝 | |
|
Package purpose: Boat Public API v1
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Braket.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.6.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Billingconductor.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Billing.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS BCM Recommended Actions.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS BCM Pricing Calculator.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.6.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS BCM Data Exports.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS BCM Dashboards.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Batch.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Backup.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Backup Gateway.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS B2Bi.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Auto Scaling.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Auto Scaling Plans.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Auditmanager.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Athena.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.6.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Artifact.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Arc Zonal Shift.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.6.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Arc Region Switch.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Appsync.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Appstream.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Apprunner.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Applicationcostprofiler.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Dynamic Labs, Inc. | — | 🪝 🌐 | |
|
Package purpose: A React SDK for implementing wallet web3 authentication and authorization to your website.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 18d | — | — | — |
SUSPICIOUS
|
— | pypi | 0.2.3 | bsawang | — | 🪝 | |
|
Package purpose: Local-first token usage collector for AI coding agents (Claude Code): passive transcript scan, per-project stats, optional cloud sync
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.2 | Ando S.r.l. | s.r.l | 🪝 | |
|
Package purpose: Official Python client SDK and CLI for the Ando Platform API. Requires an active Ando account and API key.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 18d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Named profiles for Pi: reference skills, extensions, MCP servers, and tools per workflow, switched without restarting. Install: npm install -g pi-profile-switch (not pi install).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | npm | latest | Iconists | — | 🪝 | |
|
Package purpose: A collection of square filled React icons with 0px radius and 1px stroke width, designed for use in React Native / Expo applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | npm | latest | Iconists | — | 🪝 | |
|
Package purpose: A collection of round outlined React icons with 0px radius and 2px stroke width, designed for use in React Native / Expo applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | npm | latest | Iconists | — | 🪝 | |
|
Package purpose: A collection of round filled React icons with 2px radius and 1.5px stroke width, designed for use in React Native / Expo applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | npm | latest | Iconists | — | 🪝 | |
|
Package purpose: A collection of round filled React icons with 1px radius and 1.5px stroke width, designed for use in React applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | npm | latest | Iconists | — | 🪝 | |
|
Package purpose: A collection of round filled React icons with 3px radius and 1.5px stroke width, designed for use in React applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 18d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | judahwon | — | 🪝 | |
|
Package purpose: Koast를 위한 React UI 라이브러리
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 18d | — | — | — |
Unverified Signal
|
— | npm | latest | Anthropic | — | 🪝 🌐 | |
|
Package purpose: The official TypeScript library for the Anthropic API (with updated dependencies)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 18d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Framework-agnostic core for dsh-context-milvus and codex-context-milvus
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.9 | lupca | — | 🪝 | |
|
Package purpose: Run AgentMatrix work on your own machine, under your own coding-agent subscription.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: The dispat release orchestrator CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Docker container sandbox provider for Mastra workspaces
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Rljson mongo-agent description
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.6.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Application Signals.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Application Insights.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Application Discovery Service.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Application Auto Scaling.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Appintegrations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Appflow.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Appfabric.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Appconfigdata.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Appconfig.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS App Mesh.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Apigatewayv2.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||