🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Growing Packages Fastest-adopted since publish Top Emails Accounts most linked to flagged findings About What Sentinel does & why

Sorted by risk score. Filter with email:, domain:, keyword:, or version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d for how recently a package was published (combine both for a range, e.g. age:>1h age:<6h), or a bare word for a package-name search. Click a package to see the signals behind its score before opening its registry page.

Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
95 6d 147 84 ↑24.5/day SUSPICIOUS ollama pypi 0.1.0 Khader author@example.com example.com
Claimed homepage: https://github.com/khmeeran/-ollama-json-fixer-python
Matched naming pattern: ollama-ollama-fixer
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 6
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 147/month, 147/week (MODERATE_USAGE)
Codebase size: 84 lines, 3.8 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'ollama-json-fixer' matches AI hallucination template [ollama] + [ollama] + [fixer].
  • HIGHClaims critical enterprise brand identity ('OLLAMA').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (5 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 147 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 1820d 31 2 ↑0.0/day SUSPICIOUS polygon pypi 0.0.0 Example Author author@example.com example.com
Claimed homepage: https://github.com/pypa/sampleproject
Matched naming pattern: python-polygon-io
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1820
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 31/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 45 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'polygon-io' matches AI hallucination template [python] + [polygon] + [io].
  • HIGHClaims critical enterprise brand identity ('POLYGON').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1819 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 14 0 ↑0.0/day SQUATTED_STUB stripe pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/source-stripe/
Matched naming pattern: django-stripe-auth
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 14/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'source-stripe' matches AI hallucination template [django] + [stripe] + [auth].
  • HIGHClaims critical enterprise brand identity ('STRIPE').
  • HIGHPublisher email 'Example Author <author@example.com>' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 13 0 ↑0.0/day SQUATTED_STUB okta pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/source-okta/
Matched naming pattern: python-okta-source
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 13/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'source-okta' matches AI hallucination template [python] + [okta] + [source].
  • HIGHClaims critical enterprise brand identity ('OKTA').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 11 0 ↑0.0/day SQUATTED_STUB microsoft pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/source-microsoft-teams/
Matched naming pattern: source-microsoft-teams
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 11/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'source-microsoft-teams' matches AI hallucination template [source] + [microsoft] + [teams].
  • HIGHClaims critical enterprise brand identity ('MICROSOFT').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 17 0 ↑0.0/day SQUATTED_STUB google pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/source-google-workspace-admin-reports/
Matched naming pattern: source-google-workspace
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 17/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'source-google-workspace-admin-reports' matches AI hallucination template [source] + [google] + [workspace].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 14 0 ↑0.0/day SQUATTED_STUB google pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/source-google-sheets/
Matched naming pattern: source-google-sheets
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 14/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'source-google-sheets' matches AI hallucination template [source] + [google] + [sheets].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 13 0 ↑0.0/day SQUATTED_STUB google pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/source-google-search-console/
Matched naming pattern: source-google-search
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 13/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'source-google-search-console' matches AI hallucination template [source] + [google] + [search].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 11 0 ↑0.0/day SQUATTED_STUB google pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/source-google-directory/
Matched naming pattern: source-google-directory
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 11/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'source-google-directory' matches AI hallucination template [source] + [google] + [directory].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 11 0 ↑0.0/day SQUATTED_STUB google pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/source-google-analytics-v4/
Matched naming pattern: django-google-auth
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 11/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'source-google-analytics-v4' matches AI hallucination template [django] + [google] + [auth].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'Example Author <author@example.com>' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 18 0 ↑0.0/day SQUATTED_STUB google pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/source-google-ads/
Matched naming pattern: source-google-ads
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 18/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'source-google-ads' matches AI hallucination template [source] + [google] + [ads].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 16 0 ↑0.0/day SQUATTED_STUB azure pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/source-azure-table/
Matched naming pattern: source-azure-table
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 16/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'source-azure-table' matches AI hallucination template [source] + [azure] + [table].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 12 0 ↑0.0/day SQUATTED_STUB aws pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/source-aws-cloudtrail/
Matched naming pattern: source-aws-cloudtrail
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 12/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'source-aws-cloudtrail' matches AI hallucination template [source] + [aws] + [cloudtrail].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 16 0 ↑0.0/day SQUATTED_STUB auth0 pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/source-auth0/
Matched naming pattern: python-auth0-source
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 16/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'source-auth0' matches AI hallucination template [python] + [auth0] + [source].
  • HIGHClaims critical enterprise brand identity ('AUTH0').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 0 0 ↑0.0/day SQUATTED_STUB amazon pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/source-amazon-sqs/
Matched naming pattern: source-amazon-sqs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'source-amazon-sqs' matches AI hallucination template [source] + [amazon] + [sqs].
  • HIGHClaims critical enterprise brand identity ('AMAZON').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1396 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 9 0 ↑0.0/day SQUATTED_STUB amazon pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/source-amazon-seller-partner/
Matched naming pattern: source-amazon-seller
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 9/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'source-amazon-seller-partner' matches AI hallucination template [source] + [amazon] + [seller].
  • HIGHClaims critical enterprise brand identity ('AMAZON').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 12 0 ↑0.0/day SQUATTED_STUB amazon pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/source-amazon-ads/
Matched naming pattern: source-amazon-ads
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 12/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'source-amazon-ads' matches AI hallucination template [source] + [amazon] + [ads].
  • HIGHClaims critical enterprise brand identity ('AMAZON').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 22 0 ↑0.0/day SQUATTED_STUB google pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/destination-google-sheets/
Matched naming pattern: destination-google-sheets
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 22/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'destination-google-sheets' matches AI hallucination template [destination] + [google] + [sheets].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 16 0 ↑0.0/day SQUATTED_STUB aws pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/destination-aws-datalake/
Matched naming pattern: destination-aws-datalake
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 16/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'destination-aws-datalake' matches AI hallucination template [destination] + [aws] + [datalake].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 15 0 ↑0.0/day SQUATTED_STUB amazon pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/destination-amazon-sqs/
Matched naming pattern: destination-amazon-sqs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 15/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'destination-amazon-sqs' matches AI hallucination template [destination] + [amazon] + [sqs].
  • HIGHClaims critical enterprise brand identity ('AMAZON').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1396d 16 0 ↑0.0/day SQUATTED_STUB base pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/base-normalization/
Matched naming pattern: python-base-normalization
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 16/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'base-normalization' matches AI hallucination template [python] + [base] + [normalization].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1396 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 1657d 46 0 ↑0.0/day SQUATTED_STUB google pypi 0.0.1 Example Author author@example.com example.com
Claimed homepage: https://github.com/pypa/sampleproject
Matched naming pattern: python-google-com
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1657
Registry downloads: 46/month, 17/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 12 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'google-com' matches AI hallucination template [python] + [google] + [com].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1656 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 12 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 1396d 107 0 ↑0.1/day SQUATTED_STUB google pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/source-google-analytics-data-api/
Matched naming pattern: source-google-analytics
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Registry downloads: 107/month, 38/week (MODERATE_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'source-google-analytics-data-api' matches AI hallucination template [source] + [google] + [analytics].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'Example Author <author@example.com>' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).
  • INFOModerate community usage with 107 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 641d 18 624 ↑0.0/day BENIGN_COMMUNITY azure pypi 0.2.1 — author@example.com example.com
Claimed homepage: https://pypi.org/project/azure-activation-service/
Matched naming pattern: azure-azure-service
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 641
Registry downloads: 18/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 624 lines, 29.2 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'azure-activation-service' matches AI hallucination template [azure] + [azure] + [service].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (624 LOC across 4 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 935d 56 216 ↑0.1/day BENIGN_COMMUNITY openai pypi 0.0.8 — author@example.com example.com
Claimed homepage: https://pypi.org/project/openai-requests-utils/
Matched naming pattern: openai-openai-utils
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 935
Registry downloads: 56/month, 12/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 216 lines, 13.3 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'openai-requests-utils' matches AI hallucination template [openai] + [openai] + [utils].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 8 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 934 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 1412d 41 286 ↑0.0/day BENIGN_COMMUNITY aws pypi 0.0.20 — author@example.com example.com
Claimed homepage: https://pypi.org/project/aws-excom/
Matched naming pattern: python-aws-excom
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1412
Registry downloads: 41/month, 16/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 286 lines, 11.0 kB across 8 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'aws-excom' matches AI hallucination template [python] + [aws] + [excom].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 20 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1411 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 2528d 12 1,936 ↑0.0/day BENIGN_COMMUNITY google pypi 0.0.2 Example Author author@example.com example.com
Claimed homepage: https://github.com/pypa/sampleproject
Matched naming pattern: model-google-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2528
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1936 lines, 104.2 kB across 13 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'model-pruning-google' matches AI hallucination template [model] + [google] + [google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 2527 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (1936 LOC across 13 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
11 1121d 323 379 ↑0.3/day BENIGN_COMMUNITY google pypi 1.2.2 — author@example.com example.com
Claimed homepage: https://pypi.org/project/google-image-source-search/
Matched naming pattern: google-google-source
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1121
Registry downloads: 323/month, 71/week (MODERATE_USAGE)
Codebase size: 379 lines, 20.9 kB across 14 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'google-image-source-search' matches AI hallucination template [google] + [google] + [source].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 6 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1120 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 323 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
10 1537d 18 1,386 ↑0.0/day BENIGN_COMMUNITY polygon pypi 1.1.11 A. Random Developer author@example.com example.com
Claimed homepage: https://github.com/viena-ai/polygon_python_processes/tree/main/cli-shell-sdk
Matched naming pattern: python-polygon-viena
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1537
Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1386 lines, 76.0 kB across 12 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'viena-polygon' matches AI hallucination template [python] + [polygon] + [viena].
  • HIGHClaims critical enterprise brand identity ('POLYGON').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 22 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1535 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (1386 LOC across 12 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
10 1882d 15 55 ↑0.0/day BENIGN_COMMUNITY google pypi 4.1.7 A. Random Developer author@example.com example.com
Claimed homepage: https://github.com/pypa/sampleproject
Matched naming pattern: google-google-gift
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1882
Registry downloads: 15/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 55 lines, 8.8 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'google-play-gift-card-codes-unused-generator' matches AI hallucination template [google] + [google] + [gift].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'author@example.com' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 1880 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
6 1396d 11 0 ↑0.0/day BENIGN_COMMUNITY shopify pypi 1.0.0 — author@example.com example.com
Claimed homepage: https://pypi.org/project/source-shopify/
Matched naming pattern: python-shopify-source
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1396
Code-only verdict: SQUATTED_STUB (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 11/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1395 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
6 2491d 15 20 ↑0.0/day BENIGN_COMMUNITY syncer pypi 0.0.1 Example Author author@example.com example.com
Claimed homepage: https://github.com/pypa/sampleproject
Matched naming pattern: canvas-syncer-master
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2491
Code-only verdict: SQUATTED_STUB (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 15/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 673 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 2490 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (20 LOC, 1 file(s), 673 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
5 408d 20 41 ↑0.0/day BENIGN_COMMUNITY groupbyscore pypi 0.0.6 — author@example.com example.com
Claimed homepage: https://pypi.org/project/groupbyScore/
Matched naming pattern: python-groupbyscore-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 408
Registry downloads: 20/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 41 lines, 2.8 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage published 6 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
5 1653d 31 31 ↑0.0/day BENIGN_COMMUNITY frank pypi 0.0.7 Example Author author@example.com example.com
Claimed homepage: https://github.com/pypa/sampleproject
Matched naming pattern: django-frank-auth
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1653
Registry downloads: 31/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 31 lines, 835 Bytes across 6 files (TINY_CODEBASE)
Automated signals flagged:
  • INFOPublisher email domain '@example.com' matches package identifier token 'example', verifying identifiable third-party organization ownership.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 1652 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
5 2605d 6 21 ↑0.0/day BENIGN_COMMUNITY shelbypackpack1234 pypi 0.0.1 Example Author author@example.com example.com
Claimed homepage: https://github.com/pypa/sampleproject
Matched naming pattern: python-shelbypackpack1234-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2605
Registry downloads: 6/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 673 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFOEstablished pre-AI legacy package registered 2604 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
LINK COPIED TO CLIPBOARD