Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Apigatewaymanagementapi.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS API Gateway.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Amplifyuibuilder.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Amplifybackend.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Amplify.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.6.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Amp.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Aiops.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS ACM.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS ACM Pca.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.6.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Account.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Accessanalyzer.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
SUSPICIOUS
|
— | pypi | 7.71.0 | — | — | 🪝 | |
|
Package purpose: Local multi-provider LLM proxy, model router and control plane for Claude Code, Codex, OpenCode, Gemini CLI and other AI coding agents: 57 providers, fallback routing, credential health, a native web-search tool proxy, and analytics with cost provenance
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 19d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Databricks workspace, filesystem, cloud, and network utilities
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 19d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Niels Martignène | — | 🪝 | |
|
Package purpose: Fast and easy-to-use dynamic C FFI (foreign function interface) for Node.js
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 20d | — | — | — |
Unverified Signal
|
— | pypi | 1.4.2 | Cytario | — | 🪝 | |
|
Package purpose: CLI for working with Cytario storage connections as the signed-in user (browser OIDC sign-in, AWS CLI profile setup, token refresh)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 20d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.49 | TokenSaver | — | 🪝 | |
|
Package purpose: TokenSaver egress capture proxy — MITM / explicit / transparent HTTPS capture for AI agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 20d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.4 | — | — | 🪝 | |
|
Package purpose: Local-first, sovereign memory for AI agents — your memory, across any model.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 21d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Compatibility installer for MothX. Use the mothx-installer package for future updates.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 21d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Prisma 8 for MongoDB: the one package a MongoDB application installs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 21d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: EGA V9 TypeScript SDK for replay, provenance, containment, and SCORP LOCK governance.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 21d | — | — | — |
Unverified Signal
|
— | pypi | 0.6.1 | Prem Kumar Akula | — | 🪝 | |
|
Package purpose: AI coding security co-pilot — blocks insecure code at generation time
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 22d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 22d | — | — | — |
Unverified Signal
|
— | npm | latest | Auth0 | — | 🪝 🌐 | |
|
Package purpose: Auth0 SDK for Single Page Applications using Authorization Code Grant Flow with PKCE
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 22d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Loki Agent — a self-improving AI agent by WunderCorp, Inc.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 22d | — | — | — |
Unverified Signal
|
— | npm | latest | zacbemis | — | 🪝 | |
|
Package purpose: First-class Cursor ACP provider for Pi
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 22d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: THE app that allows you to download torrents and stream video files from the safety of your browser!
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 23d | — | — | — |
Unverified Signal
|
— | npm | latest | Dmytro Harazdovskyi | — | 🪝 | |
|
Package purpose: Run Postgres locally
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 23d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Setapp Framework Node.js wrapper
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 23d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Ismo Vuorinen | — | 🪝 | |
|
Package purpose: ivuorinen's shareable configuration for markdownlint.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 23d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Ismo Vuorinen | — | 🪝 | |
|
Package purpose: ivuorinen's shareable configuration for Browserslist.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 23d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: DCL UI Component Kit — reusable Decentraland SDK7 UI components, layers, zones, and themes
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 23d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: AI-powered testing for web and mobile apps
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 24d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mesh-owned Bitcoin (bip122) namespace module for Universal Wallet Connector — network-specific logic (PSBT, address/network handling, mempool broadcast) with pluggable transport adapters (Wallet Standard bitcoin:* and WalletConnect bip122), consumed by th
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 24d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TUI for managing isolated OpenCode workspaces.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 24d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Generate typed bindings from Solidity ABI artifacts — pre-built binary
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 24d | — | — | — |
Unverified Signal
|
— | npm | latest | deezzir@gmail.com deezzir@gmail.com | gmail.com | 🪝 🌐 | |
|
Package purpose: Solana bot
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 24d | — | — | — |
Unverified Signal
|
— | npm | latest | Reveal Team | — | 🪝 | |
|
Package purpose: https://help.revealbi.io/web/getting-started-javascript
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 24d | — | — | — |
SUSPICIOUS
|
— | pypi | 1.2.0 | apanoia | — | 🪝 | |
|
Package purpose: Jaato Server - LLM tool orchestration runtime and daemon
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 25d | — | — | — |
Unverified Signal
|
— | pypi | 6.7.5 | Santiago Peñate Vera et. Al. | — | 🪝 | |
|
Package purpose: VeraGrid is a Power Systems simulation program intended for professional use and research
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 25d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Platform-specific CodeM binary for darwin-x64.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: World of Warcraft memory reading tool: read live process memory and versioned section files read-only, with streaming section dumps, profiles, build relocation and a machine-level recipe library
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25d | — | — | — |
Unverified Signal
|
— | pypi | 1.57.3 | lsaint | — | 🪝 | |
|
Package purpose: Durable workspace for governing context across AI agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 25d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Prebuilt HomeGraph OHOS API database for SDK 5.0.7
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Prebuilt HomeGraph OHOS API database for SDK 5.0.5
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Prebuilt HomeGraph OHOS API database for SDK 5.0.3
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: tunnelbox 的 Claude Code 集成（官方 Agent SDK 桥 + 官方插件 official-plugin）：手机远程驱动 Claude Code（会话/流式/审批/中止）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Native CLI binary for @anthropic-ai/claude-agent-sdk on win32-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Native CLI binary for @anthropic-ai/claude-agent-sdk on win32-x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Native binary for Claude Code on win32-arm64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 25d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Native binary for Claude Code on win32-x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||