Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 30 | 20h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Ritesh Sangani | — | 🪝 | |
|
Package purpose: Convert shadcn/ui globals.css themes into Apache Superset dashboard YAML & JSON assets.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 20h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Optional browser Web Push registration and engagement for Sagepilot
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 20h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Zevian for AI coding agents: audit your site, check a page on localhost before you deploy, and fix SEO issues from your editor.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 20h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Cunyu | — | 🪝 | |
|
Package purpose: A Codex skill for delegating independent work to CatUI, improving first-pass quality and reducing supervisor token usage.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 21h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 名字为 `base` 的 Mount。类型从 `@hnss/psi-compose` 导入，运行时不依赖 `@hnss/psi-core`。配置是 `{ cwd: string }`。本包不提供会话存储。
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 21h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP server for AgentGram: let an AI agent store end-to-end-encrypted conversations with other agents on-chain, find agents to work with, and recall past context. All crypto stays on the agent's machine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 22h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Forumulate | — | 🪝 | |
|
Package purpose: Command-line interface for Forumulate — manage orgs, spaces, docs, and search from your terminal.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 22h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: todo_write tool with priority tags, markdown checklist rendering and a floating task panel — drop-in enhanced fork of @deepseek-ai/dsh-tool-todo
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 22h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | ahmed.fouad.aly@gmail.com ahmed.fouad.aly@gmail.com | gmail.com | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 22h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Tauroid's build toolchain: bundling, lowering, the sim-math rewrite, assets, typecheck and glTF import.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 24h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Automatic browser login through an explicitly trusted Tailscale Serve hostname
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 26h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 26h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Connect MCP desktop agents to URLPivot links, QR codes, Pages and campaign analytics using a scoped workspace token.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 26h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: `M:\Zero_ChatGPT` is the standalone ChatGPT runtime and the only default owner of ChatGPT state.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 27h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: TypeScript client for the Qoren control plane.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 27h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Your Name | — | 🪝 | |
|
Package purpose: CGI-bin Node.js scripts for VPN simulation
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 27h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Completion and permission notifications for Pi coding agent
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 28h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Smoothly compress long stretches of video into short, watchable time warps.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 29h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Open Knowledge Format (OKF v0.2) universal SDK and Node.js adapter
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 30h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Production-ready Tiptap editor presets and a static React viewer for UnknownAI.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 31h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: MCP server for Agentegram: let an AI agent store end-to-end-encrypted conversations with other agents on-chain, find agents to work with, and recall past context. All crypto stays on the agent's machine.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 32h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Your own Awesomate data from Node and the browser: query contacts and app data with generated types, and sign your app's own users in
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 32h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Voluntary agent-driven context compaction suite for Pi harness
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 33h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | dzyhaxz | — | 🪝 | |
|
Package purpose: Silent, high-performance libsignal protocol for Node.js (MIT Licensed)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 33h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Lead Strategist | — | 🪝 | |
|
Package purpose: Read-only CLI for Danish company data (CVR) and annual-report financials from Lead Strategist: look up companies, search by industry/size/revenue, fetch financials.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 34h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Bookarest Digital SRL | — | 🪝 | |
|
Package purpose: What meets a nervur faculty's needs of its terrain: the npm installer, which installs each binary a faculty needs from a package pinned in its entry, into a folder of its own on the ground.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 34h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | ProspectAPIs | — | 🪝 | |
|
Package purpose: MCP server for ProspectAPIs: search funding rounds, run paid prospect research briefs, manage funding watchlists, read your balance and the live price list.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 34h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Longzai Intelligence 漏洞情报转换 CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 34h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Extensible agent discovery and native runtime bridges for Causign
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 34h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Rule-driven OpenTelemetry for Node, configured from SpanSlice
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 35h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Read-only agent access to HA7CH interview records
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 35h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | On Lucra, Inc. | — | 🪝 | |
|
Package purpose: Lucra's server client and embeddable components.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 36h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Google Antigravity (agy) local agent adapter for Paperclip
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 36h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Local AgentRGB lifecycle integration for Pi
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 37h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Search, inspect, and export the active Pi session branch
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 37h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Restarts your Node.js app when files change, with optional browser live reload
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 38h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: XiotBox E2E Secure Channel — generic end-to-end encrypted relay protocol (TypeScript/Node implementation). Zero runtime dependencies (node:crypto only).
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 38h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Compound Labs | — | 🪝 | |
|
Package purpose: Open-source social posting agent. An account registry, a slot engine that retries until a post lands, official API transports, cards, video cuts, an optional reply module that is off by default, and a review command that reads what was actually posted.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 38h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Clickmax platform integration for Rsbuild: React, Tailwind CSS and TanStack Start with static prerendering, packaged into a publishable site artifact.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 38h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Model Context Protocol server that teaches an AI coding tool how to implement Entivo — hooks, components, and the integration recipe, straight from the live docs.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 38h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Account-free network reachability and public IP location checks
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 39h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: 通用 Chat 引擎：AI SDK 模型層、金鑰輪替、主備援、提示詞組裝與閘門
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 39h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Terminal administration UI for Kaizten repositories.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 39h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Longzai Intelligence Open Router Markdown core - 导出目录只读源/渲染/转换与体检用例
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 39h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Prompt AI (OpenAI-compatible) models from your terminal, with profiles.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 40h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Prompt OpenAI (and OpenAI-compatible APIs) straight from your terminal, with profiles, JSON pretty-printing and clipboard copy.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 40h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A renderer for firestartr features
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 40h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 41h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 30 | 41h | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A focused CLI for AI agents to fund human-executed fiat payments with USDC on Base
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||