Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | ybouane | — | 🪝 🌐 | |
|
Package purpose: LibRaw WASM bindings for the browser — a single-threaded (no -pthread) fork of libraw-wasm, built to avoid the SharedArrayBuffer/recursive-worker pattern that breaks bundlers like Turbopack.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Maxime Larrivée-Roy | — | 🪝 🌐 | |
|
Package purpose: The kiri command-line interface for Kirigami — a thin terminal wrapper around @kirigami/kirigami's programmatic API.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Molen materials: pixel grids, SVG and procedural material graphs (rungs 2-4). No three.js.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
Unverified Signal
|
— | npm | latest | Aurelio Nakamura | — | 🪝 | |
|
Package purpose: The seatbelt for coding agents — a Claude Code safety hook that blocks destructive commands (rm -rf /, curl | sudo bash, force-push, dd to disk) and credential leaks before they run. Offline, zero-config.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 10d | — | — | — |
SUSPICIOUS
|
— | npm | latest | BravoTech | — | 🪝 🌐 | |
|
Package purpose: Webphone BCVOZ embutível em qualquer página web. Renderiza uma janela flutuante arrastável com todas as funcionalidades do softphone.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: On-device NSFW image detection for JavaScript. Runs in the browser (WebAssembly + LiteRT.js) and server-side in Node (native), from one import.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Samré Team | — | 🪝 🌐 | |
|
Package purpose: CLI officiel d'injection automatique du SDK Samré dans les applications mobiles (Flutter, React Native)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
SUSPICIOUS
|
— | npm | latest | Edem Dogbe | — | 🪝 🌐 | |
|
Package purpose: Local PDF processing engine and CLI (merge, split, watermark, PDF/A, accessibility, signatures...) — no network calls, ever. Same code as vellumpdf.ch.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | DreamNum Co., Ltd. | — | 🪝 | |
|
Package purpose: Structured document tag support for Univer Pro Docs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | DreamNum Co., Ltd. | — | 🪝 | |
|
Package purpose: Structured document tag interactions for Univer Pro Docs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | DreamNum Co., Ltd. | — | 🪝 | |
|
Package purpose: Host-neutral shared pivot cache contracts for Univer Pro.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | DreamNum Co., Ltd. | — | 🪝 | |
|
Package purpose: Host-neutral pivot chart domain for Univer Pro.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | DreamNum Co., Ltd. | — | 🪝 | |
|
Package purpose: Pivot chart integration for Univer Sheets.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | DreamNum Co., Ltd. | — | 🪝 | |
|
Package purpose: Pivot chart UI integration for Univer Sheets.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Muthukumaran Navaneethakrishnan | — | 🪝 🌐 | |
|
Package purpose: Run LLMs in the browser — GPU or CPU, same API. Tool calling, embeddings, RAG, offline knowledge bundles, and metrics. Hooks-style TypeScript over Transformers.js (injectable).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | kollors | — | 🪝 🌐 | |
|
Package purpose: Generate TanStack Query clients from OpenAPI and GraphQL schemas
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: ElizaOS plugin: 10 paid tools for crypto agents, paid per call in USDC over x402 on Solana or Base (no API keys). Trading signals (ranked trade setups with entry, stop and targets across 148 coins, Ichimoku, 6-indicator confluence, price levels, a market
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Standalone DeepSeek Harness plugin: preview .drawio (mxGraph XML) diagrams in the Web Sidebar
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Desktop pet that reacts to keyboard and mouse
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | juntiantan | — | 🪝 🌐 | |
|
Package purpose: UI-level access gate + process-wide agent tool brake for DeepSeek Harness: shared session, strict 60-minute idle lock, native settings module. NOT server-side authentication.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 11d | — | — | — |
Unverified Signal
|
— | npm | latest | Chip Dong Lim | — | 🪝 🌐 | |
|
Package purpose: Share a localhost prototype with one link. Reviewers leave sticky notes on it; notes land in FEEDBACK.md for your coding agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | pbarros1979 | — | 🪝 | |
|
Package purpose: Interactive CLI for scaffolding and managing Agentic Engineering Suite in any repository
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Josh Goldberg | — | 🪝 | |
|
Package purpose: Static export of Emojipedia metadata for unicode emojis. 📙
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Josh Goldberg | — | 🪝 | |
|
Package purpose: Static export of Fluent UI ("fluemoji") metadata for unicode emojis. 🪟
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Josh Goldberg | — | 🪝 | |
|
Package purpose: Static export of Gemoji metadata for unicode emojis. 🐙
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | Josh Goldberg | — | 🪝 | |
|
Package purpose: Static export of Twemoji metadata for unicode emojis. 🐦
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 12d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: diffr's NDJSON wire contract, validators, and release binary fetcher
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Part of the [Qadam Flow](https://github.com/aiqadam/qadam-flow) monorepo. See the repository for documentation. Licensed under MIT.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Latin morphological analysis engine for WebAssembly
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 13d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Kundan | — | 🪝 🌐 | |
|
Package purpose: Simple UI — lightweight Vue 3 component library with S-prefixed components (s-input, s-button, s-dialog…) that coexist with Element Plus.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 13d | — | — | — |
SUSPICIOUS
|
— | pypi | 8.7.1 | Palakurthi Gowri Shankar | — | 🪝 | |
|
Package purpose: Run code an AI wrote without handing it everything you can reach. Each function declares what it may touch. You grant the run one folder, one host or a number of calls, and the runtime refuses anything else the moment it's tried.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 13d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 学习教练 Agent Skill：面试倒计时定计划、背八股、刷算法、读项目源码、模拟面试、错题本滚动复习、启动学习
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 14d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Wire format and crypto for the Waterlands vault: client-side encryption of catch locations, species and notes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 14d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Pure TypeScript in-memory SQLite implementation with zero WASM/native dependencies
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 14d | — | — | — |
Unverified Signal
|
— | npm | latest | Softjey | — | 🪝 | |
|
Package purpose: See where the time went in a Claude Code session: model vs tools vs approvals, per tool, per turn and per subagent, in a terminal UI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 15d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Igor Kroitor | — | 🪝 🌐 | |
|
Package purpose: A cryptocurrency trading API with more than 100 exchanges in JavaScript / TypeScript / Python / C# / PHP / Go
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 16d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.0 | — | — | 🪝 | |
|
Package purpose: Agent memory-poisoning scanner (OWASP Agentic ASI06): detect injected directives disguised as facts in what an AI agent remembers, and diff memory against a baseline to catch poison that appears over time.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Evercam - Constuction Cameras. | — | 🪝 🌐 | |
|
Package purpose: Evercam API client
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Headless agent core for Ask Buoy - the tool catalog, BYO-model providers, turn loop and effect ledger that let an LLM drive Buoy devtools
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 16d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | 1kbgz | — | 🪝 🌐 | |
|
Package purpose: Generic communication library
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 22d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: MCP server for intelligent web page fetching with LLM-optimized markdown output
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 22d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Treeship CLI binary for linux x64
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 23d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Reusable React controls for SharePoint Framework solutions
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 25d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A Pulumi package for creating and managing Google Cloud Platform resources.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 27d | — | — | — |
Unverified Signal
|
— | pypi | 0.4.1 | — | — | 🪝 | |
|
Package purpose: Infernux (熔炉) — a Python-first game engine advancing toward Neural Network-Native Engine (3N), powered by C++, Vulkan and WebGPU.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 27d | — | — | — |
Unverified Signal
|
— | pypi | 0.2.20 | — | — | 🪝 | |
|
Package purpose: HEP C++ package manager with cppyy dynamic bindings
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 29d | — | — | — |
Unverified Signal
|
— | pypi | 0.6.2 | — | — | 🪝 | |
|
Package purpose: In-process probe reporting what a Python workload imports and runs
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 30d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | ByOmakase | — | 🪝 🌐 | |
|
Package purpose: ## Omakase Player - Open source JavaScript framework for building frame accurate video experiences
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 35 | 33d | — | — | — |
Unverified Signal
|
— | pypi | 1.1.0 | — | — | 🪝 | |
|
Package purpose: MemorySync memory store for ChatDev 2.0 (DevAll): type: memorysync in workflow YAML — semantic recall with budgets, honest timestamps, fact extraction from the user's input, and idempotent writes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 35 | 34d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Kiko Beats | — | 🪝 🌐 | |
|
Package purpose: Comprehensive list of free email provider domains for signup validation and disposable filtering.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||