Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 35 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Read-only Claude Code setup state, settings planner and ownership checks, shared by the Rulegate CLI and its Claude Code plugin.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Blocks filesystem scans and credential reads that macOS records as TCC App Data access, and points the agent at a safe alternative.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Part of [Shard](https://github.com/aethervtt/shard), a WebGPU-first 2D/3D game engine in TypeScript. See the repository for documentation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Part of [Shard](https://github.com/aethervtt/shard), a WebGPU-first 2D/3D game engine in TypeScript. See the repository for documentation.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Josh Goldberg | — | 🪝 | |
|
Package purpose: Static export of Discord emoji picker metadata for unicode emojis. 💬
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | Josh Goldberg | — | 🪝 | |
|
Package purpose: Static export of Slack emoji picker metadata for unicode emojis. 🧵
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 6d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: VLC's playback engine (libvlc 4) compiled to WebAssembly: plays the formats browsers can't.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 6d | — | — | — |
SUSPICIOUS
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The stream-output engine for libvlc-wasm: transcode, remux and record. A larger wasm, installed only when you need it.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Small, prebuilt FFmpeg WebAssembly decoders for H.264, HEVC, VP8 and VP9 keyframes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Effect-native service worker, precache, update and install utilities that turn a TanStack Start app into a PWA
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 6d | — | — | — |
Unverified Signal
|
— | npm | latest | OMSociety | — | 🪝 🌐 | |
|
Package purpose: DeepSeek Harness plugin: 鱼排 FishPai — a WeChat Official Account typesetting workbench in the DSH right sidebar, with block-level diffs and annotations a model can read. Rendering core derived from the MIT mopai-markdown.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The complete Caisson OSCAL surface: deterministic assessment-plan, assessment-results, POA&M, catalog, XML, and ISO 27001 SoA exports plus the pinned NIST 800-53 catalog and OLIR relationship mapping.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Opinionated, progressive rich-text editor built on Squire
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Unofficial DSH desktop plugin: makes the window translucent so the desktop wallpaper shows through. Windows only. Also ships a genuinely refracting liquid-glass composer, though the app's layout keeps it barely visible.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 0.1.0 | aseity maintainers | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Panel controls for instruments
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: A traceability checker for layered documentation
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP server that audits installed MCP client configs (Cursor, Claude Desktop, Windsurf, VS Code) and agent SKILL.md files for unpinned packages, secrets, wildcard auto-approve, unauthenticated remote endpoints, typosquats, unrestricted skill tools, and cro
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Scaffold production-grade multi-agent repository intelligence and modernization systems
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | FingerprintJS, Inc | — | 🪝 | |
|
Package purpose: Sciobot browser signals: self-hosted FingerprintJS fork with obfuscated bundles
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | YGF | — | 🪝 | |
|
Package purpose: `@simplex2/framework` 是一个基于 TypeScript 的轻量级模型运行时。它使用“属性配置 + 模型树”的方式描述组件或业务模型，并提供动态属性、计算属性、父子节点关系和模型工厂等基础能力。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Accessible data grid, table and pivot as web components, driven by a portable Rust/WASM query engine — with React, Vue and Svelte components.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: [](https://www.npmjs.com/package/witness-pi) [](https://github.com/HeapSoftGmbH/witness)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | pypi | 1.1.2 | 4check | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Nicholas Cecere | — | 🪝 🌐 | |
|
Package purpose: Copy bitop-ui components (Base UI + CSS Modules + CSS variables) into your project as source you own.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Omid Zaferi | — | 🪝 | |
|
Package purpose: Deterministic design contracts, component recipes, and WCAG AA evaluation gates for AI coding agents (Cursor, Claude Code, Windsurf, Antigravity).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | Volter AI, Inc. | — | 🪝 🌐 | |
|
Package purpose: DAWproject for Volter Editor: a piece of music is a React component of DAWproject elements, shown as an arrangement, played, and edited in its own source.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Any repo. One command. It just runs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 7d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: pi-ai-backed DeepSeek adapter for the Hydra harness LLM seam (design-verification twin of hydra-llm-deepseek)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: CLI to add Adv UI components to your project (shadcn-style source installation).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TypeScript SDK for teamusers: token verification, permission caching, ABAC, and middleware
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Checks whether an AI coding agent's claimed-done work actually matches your plan, by reading the real code
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Portable PAI core: chunk, threat, table-detect, message-id. Plain TS, no deps. Hosts provide storage (sqlite-wasm + OPFS) and transport.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Kuriv Vesti | — | 🪝 🌐 | |
|
Package purpose: MySQL 是一款免费开源的关系型数据库软件。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Abdul Wasay | — | 🪝 🌐 | |
|
Package purpose: Catch AI coding agents faking "done": detects deleted tests, skipped tests and removed assertions by diffing before vs. after.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Stormworks Lua runtime, screen rasterization, Vehicle compiler and explicit host services
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Ingeniería Creativa | — | 🪝 🌐 | |
|
Package purpose: Transpilador de Tailwind a CSS3 puro bajo estándar AUM-IC
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: TurboJev WebAssembly core for browser applications
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Liiift Studio | — | 🪝 🌐 | |
|
Package purpose: Sanity Studio utilities for type foundry projects — Utilities desk, Fingerprint Reader for font forensics, and font metadata tools. Supports Sanity v3 through v6.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Quinn Keaveney | — | 🪝 🌐 | |
|
Package purpose: Flexible bulk data operations utility for Sanity Studio — search, add, and modify data across any document types with safety features
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Masai School | — | 🪝 🌐 | |
|
Package purpose: Mantine v8 UI for Schema Grid: cell editors, filter and column builders, import wizard and export dialog.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Courier for PromptKit OS: fetches a pinned release tarball and runs the canonical installer. Not a runtime dependency.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | mig | — | 🪝 🌐 | |
|
Package purpose: Hardhat task nactrace:last and the nactrace-foundry script; thin wrappers around the nactrace CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | zhouxiao | — | 🪝 🌐 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Remotion integration suite for Web React Player: in-browser TSX compiler, WebCodecs MP4/WebM exporter, dynamic audio mixer, scenario adapters and widget runtime.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Gokul Nair | — | 🪝 🌐 | |
|
Package purpose: Interactive map of Kerala for React Native — districts, local bodies, wards and Lok Sabha / State Assembly constituencies with search, drill-down and popups. Renders the react-kerala-map component inside a WebView and exposes its full imperative API over
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | Raby Whyte | — | 🪝 🌐 | |
|
Package purpose: Small, fast, dependency-free connected-components / blob detection, compiled to WebAssembly
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 9d | — | — | — |
Unverified Signal
|
— | pypi | 1.0.0 | — | — | 🪝 | |
|
Package purpose: Encode, decode, wrap, and run Python source with reversible codecs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | vjymisal0 | — | 🪝 | |
|
Package purpose: Universal AI context and rules synchronizer for Claude Code, Cursor, Copilot, Gemini, Windsurf, and custom agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Timothy Schneider | — | 🪝 | |
|
Package purpose: Interim npm home for @distilled.cloud/openbao — see docs/distilled-interim.md. Not published upstream yet; the kit aliases @distilled.cloud/openbao onto this package until it is.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||