Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 25d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.16 | — | — | 🪝 | |
|
Package purpose: Greft V0 — Autonomous Agent Messaging Network
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 25d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.1 | — | — | 🪝 | |
|
Package purpose: MCP server to administer odoo.sh projects agentically — stagings, backups, settings, builds, logs, SSH
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 26d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | ENGIE Digital's Fluid core team | — | 🪝 | |
|
Package purpose: Fluid Design System Angular
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 26d | — | — | — |
Unverified Signal
|
— | pypi | 0.30.0 | — | — | 🪝 | |
|
Package purpose: Terp egress capability — the declared way out of the process: an allowlisted, SSRF-guarded, time-bounded HTTP client whose every attempt is observable.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 27d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Colby Gilbert | — | 🪝 🌐 | |
|
Package purpose: telegram-bot tools for FrogBot.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 27d | — | — | — |
Unverified Signal
|
— | npm | latest | Colby Gilbert | — | 🪝 | |
|
Package purpose: Redis KV store adapter for FrogBot.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 28d | — | — | — |
Unverified Signal
|
— | pypi | 0.0.86 | Thor Whalen | — | 🪝 | |
|
Package purpose: One session that watches your other Claude Code sessions: who is busy, who is waiting on you, what each one just said, and how to ask one directly
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 28d | — | — | — |
Unverified Signal
|
— | npm | latest | Rahul Arya | — | 🪝 🌐 | |
|
Package purpose: Native Cursor provider for Pi Coding Agent (OAuth + Connect/protobuf streamSimple)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 28d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.0 | — | — | 🪝 | |
|
Package purpose: Semantic memory layer for AI agents -- typed ontology, deterministic tag search, and mandatory rule injection.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 29d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Portable Astrale invocation, publication, installation, routing, and issuer protocols
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 29d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Astrale Kernel DSL - Schema authoring, inference, and IR serialization
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 29d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 29d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Ace Data Cloud | — | 🪝 | |
|
Package purpose: Agent Skills for AceDataCloud AI services — music, image, video generation, LLM chat, web search. Compatible with Claude Code, GitHub Copilot, Gemini CLI, OpenAI Codex, and 30+ AI coding agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 29d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI and library for Fast USDC product
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 29d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Anthropic (Claude) LLM client for AI-Parrot (parrot.clients.anthropic)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 29d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A themeable Svelte 5 UI component library with CSS custom property driven styling
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 30d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | AlexanderMattTurner | — | 🪝 | |
|
Package purpose: glovebox's fail-closed tool-call monitor: a second model that reviews each tool call before it runs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 30d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | KNIME AG, Zurich, Switzerland | — | 🪝 | |
|
Package purpose: Shared Scripting Editor components for KNIME
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 30d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Native Mikie relay launcher for MCP clients
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 30d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | eiei114 | — | 🪝 | |
|
Package purpose: Run and monitor TAKT projects in stacked live terminal widgets inside Pi.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 31d | — | — | — |
Unverified Signal
|
— | npm | latest | Tanner Linsley | — | 🪝 🌐 | |
|
Package purpose: xAI Grok adapter for TanStack AI chat, image generation, realtime, and structured outputs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 31d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Platform-specific CodeM binary for linux-x64-gnu.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 31d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Redis-backed adapters for the store ports of @o3co/auth-provider-core, a module for each, and ioredis wrappers for the clients they call
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 31d | — | — | — |
Unverified Signal
|
— | pypi | 0.5.1 | Olga Vine, Sergey Samsonau | — | 🪝 | |
|
Package purpose: Safeguards a codebase against the problems AI coding agents introduce: structural drift, secrets at rest, unvetted dependencies, and dangerous commands.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Inspect captured JavaScript console messages in React Native. Capture and release-build support depend on setup and plan.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Review retained events from connected Buoy tools and export timeline data for investigation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Inspect a connected Redux store, captured actions and state changes, and dispatch supported actions from Buoy tools.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 31d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Official Superblocks CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 31d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Helm chart lexicon for chant — declarative IaC in TypeScript
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 31d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Astrale Kernel Server - kernel envelope HTTP/WS server with Hono
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 32d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | SmartStack | — | 🪝 | |
|
Package purpose: SmartStack Claude Code automation toolkit - GitFlow, EF Core migrations, prompts and more
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 32d | — | — | — |
Unverified Signal
|
— | npm | latest | Iconists | — | 🪝 | |
|
Package purpose: A collection of round outlined React icons with 1px radius and 2px stroke width, designed for use in React applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 32d | — | — | — |
Unverified Signal
|
— | npm | latest | Iconists | — | 🪝 | |
|
Package purpose: A collection of round outlined React icons with 1px radius and 1.5px stroke width, designed for use in React Native / Expo applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 32d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Gurdeep Singh | — | 🪝 | |
|
Package purpose: Singleton-engine video library for React Native (one native player, many surfaces)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 32d | — | — | — |
Unverified Signal
|
— | pypi | 2026.9.9 | — | — | 🪝 | |
|
Package purpose: Multi-group agentic infrastructure for a bioconvergence centre — with the v1 registrar layer above any single lab.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 32d | — | — | — |
Unverified Signal
|
— | npm | latest | OpenClaw Team | — | 🪝 | |
|
Package purpose: Capability-style filesystem roots for Node.js apps that handle untrusted relative paths.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 32d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Cube Dev, Inc. | — | 🪝 | |
|
Package purpose: Native module for Cube (binding to Rust codebase)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Zhu Lin | — | 🪝 | |
|
Package purpose: Algorithmic VCC compaction for omp - fast lossless no-LLM
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Stencil Component Starter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | Iconists | — | 🪝 | |
|
Package purpose: A collection of round filled Vue 3 icons with 0px radius and 2px stroke width, designed for use in Vue applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | Iconists | — | 🪝 | |
|
Package purpose: A collection of round filled Vue 3 icons with 0px radius and 1.5px stroke width, designed for use in Vue applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | Iconists | — | 🪝 | |
|
Package purpose: A collection of round filled Vue 3 icons with 0px radius and 1px stroke width, designed for use in Vue applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | Iconists | — | 🪝 | |
|
Package purpose: A collection of round filled React icons with 1px radius and 1px stroke width, designed for use in React applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | Iconists | — | 🪝 | |
|
Package purpose: A collection of round filled React icons with 0px radius and 1px stroke width, designed for use in React applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | Iconists | — | 🪝 | |
|
Package purpose: A collection of round filled React icons with 0px radius and 2px stroke width, designed for use in React applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | Iconists | — | 🪝 | |
|
Package purpose: A collection of round filled React icons with 0px radius and 1.5px stroke width, designed for use in React applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | Iconists | — | 🪝 | |
|
Package purpose: A collection of round filled Vue 3 icons with 1px radius and 1px stroke width, designed for use in Vue applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33d | — | — | — |
Unverified Signal
|
— | npm | latest | Iconists | — | 🪝 | |
|
Package purpose: A collection of round filled React icons with 3px radius and 1px stroke width, designed for use in React Native / Expo applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 33d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||