Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 35 | 25h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Reusable full-stack website + CMS kit with multi-page public sites, a protected authoring dashboard, local SQLite, starter/theme import, and pluggable auth, storage, and deployment adapters.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | Acanto | — | 🪝 🌐 | |
|
Package purpose: Scaffold a new Olmo Next.js frontend from olmo-front-template, with @olmocms/front preinstalled.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 33h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Scripted models, deterministic fixtures, and adapter conformance kits for testing Effect Agent applications.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 34h | — | — | — |
SUSPICIOUS
|
— | npm | latest | Daher Alfawares | — | 🪝 🌐 | |
|
Package purpose: The uione compiler, built for the browser and run in a Web Worker: check a project, build it, and see what each line becomes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 36h | — | — | — |
Unverified Signal
|
— | pypi | 0.2.1 | Leslie Kadenge | — | 🪝 | |
|
Package purpose: An MCP server whose confirmation cannot be replayed against a different call
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 38h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript WebGL framework. Version 0.1.0.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 39h | — | — | — |
Unverified Signal
|
— | npm | latest | SukunDev | — | 🪝 | |
|
Package purpose: The sandboxed QuickJS runtime that runs Matane extensions, shared by the app and mr-ext
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 41h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Portable project memory + scaffold for AI coding tools (.ai/ memory bank, cross-tool AGENTS.md/CLAUDE.md/.cursorrules contracts, ≤1.5KB context fingerprint).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 41h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: VSCode-style command palette for MUI apps: contribution registry, fuzzy matcher, recents ranking, and an accessible RTL-aware dialog
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 44h | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0.dev1 | Global Phoenix Solutions Ltd | — | 🪝 | |
|
Package purpose: ProofPack engine: validated ingest, declarations and statistical evidence packs for AI-enabled medical devices
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 45h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Route Chatwoot conversations with TypeSafe Jev on Cloudflare Workers.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 60h | — | — | — |
Unverified Signal
|
— | npm | latest | Er. Anil Kumar Thakur | — | 🪝 | |
|
Package purpose: Mason authentication: guards, user providers, and middleware (the Illuminate\Auth equivalent).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 60h | — | — | — |
Unverified Signal
|
— | npm | latest | Piotr Franczyk | — | 🪝 🌐 | |
|
Package purpose: Relocatable SWI-Prolog 10.0.2 runtime for Kibi on Linux x64 (glibc 2.28 or newer)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 60h | — | — | — |
Unverified Signal
|
— | npm | latest | Piotr Franczyk | — | 🪝 🌐 | |
|
Package purpose: Relocatable SWI-Prolog 10.0.2 runtime for Kibi on macOS on Apple silicon (macOS 12 or newer)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 68h | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Upstash AgentKit backends for TanStack AI: chat persistence, resumable streams, distributed locks, long-term memory, tool caching, rate limiting, and Redis-Search tools — all on one Upstash Redis.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 71h | — | — | — |
Unverified Signal
|
— | npm | latest | Greycoat Research Inc. | — | 🪝 | |
|
Package purpose: Address form data (layouts, zones, zip rules, labels) derived from Shopify/worldwide
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | Sean Morris | — | 🪝 🌐 | |
|
Package purpose: Statically linked embedded PHP for Cloudflare Workers, with Vrzno, ZIP/zlib and PDO-CFD1
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | ahnafudin | — | 🪝 🌐 | |
|
Package purpose: Start a repo that AI coding agents follow, or add that tooling to one you have: one AGENTS.md, one gate, anti-slop checks.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 3d | — | — | — |
Unverified Signal
|
— | npm | latest | adamaik | — | 🪝 🌐 | |
|
Package purpose: DeepSeek Harness plugin: show Ollama Cloud remaining quota (session/weekly) as a Settings section beside Account & Balance, with an in-page API key editor. · DSH 插件：在设置页“账号与余额”下方显示 Ollama Cloud 剩余额度，并支持在页面内填写 API Key。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4d | — | — | — |
SUSPICIOUS
|
— | npm | latest | tastypear | — | 🪝 🌐 | |
|
Package purpose: Node.js fs-compatible module backed by HTTP. Drop-in replacement for require('fs') that routes all operations to a remote server via process.binding('fs') interception.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Zero-trust security sidecar, identity broker, and MCP gateway for autonomous agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: In-browser test runner for LLDLab problems: JavaScript, TypeScript, Python (Pyodide) and Go (Yaegi)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | JayYuen | — | 🪝 🌐 | |
|
Package purpose: dsh 插件：对话输入框「整理」按钮（主键直接整理/▾ 以角色视角整理，结合当前目录 + session 模型整理优化草稿）+「模板」下拉（内置精选角色集生成自插件 agents/ 角色库，可按部门分组；设置卡可增删改/一键导入内置全部/导入本地角色 .md）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Josh Stovall | — | 🪝 | |
|
Package purpose: A searchable, themeable emoji picker for React Native and web.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Share files over LAN via HTTP
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Luka Erkapic | — | 🪝 🌐 | |
|
Package purpose: Browser TypeScript wrapper around Khronos libktx for loading, creating, and transcoding KTX2 textures.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 4d | — | — | — |
Unverified Signal
|
— | npm | latest | Movelytics SAS | — | 🪝 🌐 | |
|
Package purpose: Human pose estimation SDK for React Native — fully optimized for iOS & Android (Expo Go). Bundled MoveNet Lightning, free offline keypoints, optional API-key exercise engine (reps, form score, jumps).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Spec-driven workflow CLI for AI coding agents — align on PRD/TRD before coding, resume tasks across sessions, and archive with acceptance records.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Hallvard R. Indgjerd | — | 🪝 🌐 | |
|
Package purpose: Unofficial npm packaging of the 3DHOP viewer runtime (CNR-ISTI Visual Computing Lab): upstream 4.3 + the 4.3.5 patch set, jQuery-free. Runtime assets only; use with @ikaros-arch/react-3dhop.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Matthieu Bouilloux | — | 🪝 🌐 | |
|
Package purpose: Zero-dependency browser framework: a DI module runtime with 200+ ESM modules — codecs, compression, crypto (WebCrypto + WASM tiers, post-quantum), DOM rendering and query, workers, security lockdown — usable without a bundler via import maps.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 5d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | InterSystems Iberia | — | 🪝 | |
|
Package purpose: InterSystems ObjectScript (.cls/.mac/.inc/.rtn) support for graphify (graphifyy) on PyPI, until native support ships upstream
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The shared language engine of the *42 documentation CLIs (arc42, biz42, pdt42): Markdown and AsciiDoc parser, schema-driven model with id schemes, validation engine with generic rules, Mermaid syntax check, authoring guidance, semantic diff, Git snapshots
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Contact | — | 🪝 🌐 | |
|
Package purpose: Fork of jspreadsheet-ce 4.15.0 that renders column and row headers as th with scope for accessibility.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: > A powerful, AI-assisted, drag-and-drop form builder Vue 3 component library — built on top of [SurveyJS](https://surveyjs.io/), with full **Persian (Farsi) / English** bilingual support and **AI-powered form generation**.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Guenter Richter | — | 🪝 🌐 | |
|
Package purpose: MapLibre GL + deck.gl reimplementation of the ixmaps-flat declarative mapping engine
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | David Bovill | — | 🪝 🌐 | |
|
Package purpose: Federated Wiki plugin — plays one Aether node (.aethernode) in the page, its code held in a sandboxed frame; pages side by side in the lineup play together
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | DreamNum Co., Ltd. | — | 🪝 | |
|
Package purpose: Referenced chart data sources for document hosts.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Hamed Niroomand | — | 🪝 🌐 | |
|
Package purpose: Layer boundary checks for Nuxt apps that see auto-imports
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | GenVueGraph Contributors | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Browse desktop and laptop GPU performance rankings
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Test screen for dead pixels, backlight bleed, and color issues
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Kiko Beats | — | 🪝 | |
|
Package purpose: Complete list of standard emojis.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Dave Lunny | — | 🪝 🌐 | |
|
Package purpose: ESLint rules for idiomatic and correct Bun code.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 5d | — | — | — |
Unverified Signal
|
— | npm | latest | Dario Hamidi | — | 🪝 🌐 | |
|
Package purpose: A correctness-first SCXML 1.0 interpreter (ECMAScript data model) for the browser and Node, with custom elements for interactive statechart diagrams.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Browse desktop and laptop CPU performance rankings
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 6d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Connect an Expo app to KUE screenshot-to-GitHub issue reporting.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Harindu Jayakody | — | 🪝 | |
|
Package purpose: A modern, beautifully crafted React UI and animation block library built with Tailwind CSS, Framer Motion, and Radix UI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Runtime guard for MCP clients: rug-pull pinning, least privilege, human approval, lethal-trifecta breaking, audit log
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||