Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 116d | — | — | — |
Unverified Signal
|
— | npm | latest | KyLoc20 | — | 🪝 🌐 | |
|
Package purpose: Supabase client initializer and data access APIs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 119d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Barnabás Tóth | — | 🪝 🌐 | |
|
Package purpose: Self-contained Nuxt 4 module providing a reusable admin/backoffice toolkit (list/edit/view scaffolds, schema-driven forms, foreign-key combobox, m2m junctions, statistics, role gates, audit log, i18n). Consume via modules:['nuxt-supabase-backoffice'].
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 121d | — | — | — |
Unverified Signal
|
— | npm | latest | J Liew | — | 🪝 🌐 | |
|
Package purpose: Grok Build provider, OAuth, multi-account rotation, quota tracking and Imagine image generation for OpenCode v2.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 123d | — | — | — |
Unverified Signal
|
— | npm | latest | Javi | — | 🪝 | |
|
Package purpose: MCP server that lets Claude Code delegate heavy-token tasks to DeepSeek, Kimi, GLM, Qwen, Grok, or any OpenAI-compatible model. Claude orchestrates; the delegate does the heavy lifting. Zero dependencies.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 124d | — | — | — |
Unverified Signal
|
— | npm | latest | J Liew | — | 🪝 🌐 | |
|
Package purpose: Use your X Premium or SuperGrok subscription in pi.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 124d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 124d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 128d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose:  
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 128d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Google OAuth SDK for React
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 128d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Track Claude Code sessions in Weave for observability and debugging
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 135d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI for Solana Mobile development.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 136d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local MCP server for Google Workspace (Gmail, Drive, Calendar, Sheets, Docs, Contacts, Tasks, Meet, Search Console, +Forms/Chat/Admin) across multiple accounts — OAuth-only, encrypted token storage, deny-by-default writes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 142d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mastra xAI Grok Voice Agent API integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 148d | — | — | — |
Unverified Signal
|
— | pypi | 2.4.3 | heng1234 | — | 🪝 | |
|
Package purpose: Web UI for Claude Code CLI — token streaming, tool visualization, checkpoint rollback, multi-session management
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 152d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: WakaTime heartbeats for Cursor Agent hooks.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 160d | — | — | — |
Unverified Signal
|
— | npm | latest | Stanislav Kozachenko | — | 🪝 | |
|
Package purpose: TypeScript middleware framework for Claude Code command hooks
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 162d | — | — | — |
Unverified Signal
|
— | npm | latest | Khalil Gharbaoui | — | 🪝 | |
|
Package purpose: Claude Code CLI provider plugin for opencode
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 171d | — | — | — |
Unverified Signal
|
— | npm | latest | Dayan Decamp | — | 🪝 🌐 | |
|
Package purpose: Mistral MCP server for invoice and document extraction. Turn text, Markdown or OCR into typed JSON; chat, vision and audio included.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 171d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Bridge Claude Code MCP server configs into pi — auto-discovers tools from stdio/sse/http MCP servers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 172d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 182d | — | — | — |
Unverified Signal
|
— | npm | latest | Abhishek Chauhan | — | 🪝 | |
|
Package purpose: Scaffold a new LangGraph multi-agent project in seconds
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 186d | 20 | 16 | ↑0.1/day |
Possible Squatted Stub
|
base | pypi | 18.0.1.0.0.3 | Therp BV, Odoo Community Association (OCA) support@odoo-community.org | odoo-community.org | ||
|
Package purpose: Glue module for base views
Claimed homepage: https://github.com/OCA/bank-payment
Matched naming pattern: odoo-base-account
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 186
Registry downloads: 20/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 16 lines, 581 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 186d | — | — | — |
Unverified Signal
|
— | pypi | 4.1.0 | Slim | — | 🪝 | |
|
Package purpose: PactKit adapter for GitHub Copilot
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 189d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Base React app template — a React UI Bundle with Vite, TypeScript, Tailwind/shadcn, and Salesforce UI Bundle SDK. Used as the foundation for feature apps (e.g. propertymanagementapp, reactexternalapp) when applying patches.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 193d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Mastra Okta Auth and RBAC integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 194d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Workspace adapter that materializes workspaces from a remote Host Agent via Gateway
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 199d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Optional NCP runtime adapter backed by Anthropic Claude Agent SDK.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 207d | — | — | — |
Unverified Signal
|
— | npm | latest | Tanner Linsley | — | 🪝 🌐 | |
|
Package purpose: ElevenLabs adapter for TanStack AI realtime voice, text-to-speech, transcription, music, and sound effects.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 221d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 222d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Shashi Kanth | — | 🪝 | |
|
Package purpose: A2A (Agent-to-Agent) protocol wrapper for the GitHub Copilot SDK. Drop a JSON config file in, get a fully-spec-compliant A2A server out. Supports any agent persona, MCP tool servers, streaming, context building, and multi-turn conversations.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 225d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Local proxy that preserves Gemini thought_signature across OpenAI-protocol clients (Open Design, VS Code Copilot BYOK) and Google's OpenAI-compatible endpoint
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 226d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: OpenCode plugin for Claude-Mem persistent memory system
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 227d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Route/action layer for AI agents: one call (unbrowse "task" --url) reuses first-party site routes instead of browser loops. In-process CLI + Agent Skill + SDK. Bee aliases: @unbrowse/pollen-cli.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 235d | — | — | — |
Unverified Signal
|
— | npm | latest | open-claude contributors | — | 🪝 | |
|
Package purpose: Open-source alternative to Claude Agent SDK - readable source, debuggable, uses local CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 245d | — | — | — |
Unverified Signal
|
— | pypi | 1.0.0 | Xaeian | — | 🪝 | |
|
Package purpose: Simple Python utilities: files, time, serial, binary structs, databases, network, media, electronics, plotting and signals
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 246d | — | — | — |
Unverified Signal
|
— | pypi | 3.0.0 | — | — | 🪝 | |
|
Package purpose: Persistent Project Context for Google Gemini. IANA-registered .faf format, MCP server + Cloud Run REST API, unifies CLAUDE.md, GEMINI.md, AGENTS.md.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 248d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Theia - GitHub Copilot Integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 257d | — | — | — |
Unverified Signal
|
— | npm | latest | Yujun Liu | — | 🪝 🌐 | |
|
Package purpose: Self-hosted GitHub Copilot bridge for Claude Code and Codex CLI with OpenAI Responses, Anthropic Messages, streaming resilience, and context management.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 261d | — | — | — |
Unverified Signal
|
— | npm | latest | code-sensei | — | 🪝 🌐 | |
|
Package purpose: OpenAI and Azure OpenAI adapter for ArtemisKit LLM evaluation toolkit
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 266d | — | — | — |
Unverified Signal
|
— | npm | latest | LiveKit | — | 🪝 🌐 | |
|
Package purpose: xAI plugin for LiveKit Node Agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 271d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 292d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Airline Digitalization | — | 🪝 | |
|
Package purpose: A package that adapts requests between Azure Functions and React Router
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 292d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Edifice | — | 🪝 | |
|
Package purpose: Abstract base for Edifice client SDKs (no application-specific logic)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 303d | — | — | — |
Unverified Signal
|
— | npm | latest | Tanner Linsley | — | 🪝 🌐 | |
|
Package purpose: OpenAI adapter for TanStack AI chat, tools, images, video, speech, transcription, realtime, and structured outputs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 303d | — | — | — |
Unverified Signal
|
— | npm | latest | Tanner Linsley | — | 🪝 🌐 | |
|
Package purpose: Google Gemini adapter for TanStack AI chat, images, speech, audio generation, and structured outputs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 317d | — | — | — |
Unverified Signal
|
— | npm | latest | Eugene Chybisov | — | 🪝 🌐 | |
|
Package purpose: LI.FI Ethereum SDK Provider for Any-to-Any Cross-Chain-Swap
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 327d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Circle Wallets blockchain adapter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 329d | — | — | — |
Unverified Signal
|
— | npm | latest | Zakharii Melnyk | — | 🪝 | |
|
Package purpose: AI-powered git commit message generator using Claude AI (API or Claude Code CLI)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 373d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Theia - Claude Code Integration
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 404d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: EVM blockchain adapter powered by Ethers v6
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||