🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Growing Packages Fastest-adopted since publish Top Emails Accounts most linked to flagged findings About What Sentinel does & why

Sorted by risk score. Filter with email:, domain:, keyword:, or version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d for how recently a package was published (combine both for a range, e.g. age:>1h age:<6h), or a bare word for a package-name search. Click a package to see the signals behind its score before opening its registry page.

Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
95 3d 289 193 ↑96.3/day SUSPICIOUS aws pypi 3.1.1 Your Name you@example.com example.com
Claimed homepage: https://pypi.org/project/vintasend-aws-s3-attachments/
Matched naming pattern: vintasend-aws-s3
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 3
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 289/month, 289/week (MODERATE_USAGE)
Codebase size: 193 lines, 8.8 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'vintasend-aws-s3-attachments' matches AI hallucination template [vintasend] + [aws] + [s3].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 3 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (2 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 289 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 152d 18 154 ↑0.1/day SUSPICIOUS llama pypi 0.1.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-tools-querit/
Matched naming pattern: llama-llama-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 152
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 154 lines, 6.6 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-tools-querit' matches AI hallucination template [llama] + [llama] + [tools].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • HIGHPackage claims legitimate high-profile upstream repository 'run-llama/llama_index' (llama-index) in metadata to artificially inflate trust / SourceRank.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (150 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 186d 18 123 ↑0.1/day SUSPICIOUS llama pypi 0.1.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-tools-igpt-email/
Matched naming pattern: llama-llama-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 186
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 123 lines, 5.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-tools-igpt-email' matches AI hallucination template [llama] + [llama] + [tools].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 184 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 186d 0 83 ↑0.0/day SUSPICIOUS llama pypi 0.1.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-readers-igpt-email/
Matched naming pattern: llama-llama-readers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 186
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 83 lines, 3.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-readers-igpt-email' matches AI hallucination template [llama] + [llama] + [readers].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 184 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 256d 51 165 ↑0.2/day SUSPICIOUS openai pypi 0.3.2.post1 — you@example.com example.com
Claimed homepage: https://pypi.org/project/basejump-llama-index-embeddings-azure-openai/
Matched naming pattern: basejump-openai-index
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 256
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 51/month, 16/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 165 lines, 6.8 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'basejump-llama-index-embeddings-azure-openai' matches AI hallucination template [basejump] + [openai] + [index].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 255 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
90 112d 13 30 ↑0.1/day SUSPICIOUS google pypi 0.0.5 — you@example.com example.com
Claimed homepage: https://pypi.org/project/google-search-scraper-api/
Matched naming pattern: google-google-scraper
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 112
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 13/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 30 lines, 891 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'google-search-scraper-api' matches AI hallucination template [google] + [google] + [scraper].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (110 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
90 162d 93 171 ↑0.6/day SUSPICIOUS llama pypi 0.1.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-postprocessor-google-rerank/
Matched naming pattern: llama-llama-postprocessor
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 162
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 93/month, 15/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 171 lines, 6.1 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-postprocessor-google-rerank' matches AI hallucination template [llama] + [llama] + [postprocessor].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (160 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
90 181d 16 173 ↑0.1/day SUSPICIOUS llama pypi 0.2.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-readers-screenpipe/
Matched naming pattern: llama-llama-readers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 181
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 173 lines, 6.9 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-readers-screenpipe' matches AI hallucination template [llama] + [llama] + [readers].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (179 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 186d 17 71 ↑0.1/day SUSPICIOUS llama pypi 0.2.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-llms-modelslab/
Matched naming pattern: llama-llama-llms
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 186
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 17/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 71 lines, 2.9 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-llms-modelslab' matches AI hallucination template [llama] + [llama] + [llms].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 184 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 200d 24 39 ↑0.1/day SUSPICIOUS llama pypi 0.4.0 WilliamEspegren you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-tools-seltz/
Matched naming pattern: llama-llama-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 200
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 24/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 39 lines, 1.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-tools-seltz' matches AI hallucination template [llama] + [llama] + [tools].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 199 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 252d 18 42 ↑0.1/day SUSPICIOUS llama pypi 0.2.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-llms-aibadgr/
Matched naming pattern: llama-llama-llms
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 252
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 18/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 42 lines, 1.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-llms-aibadgr' matches AI hallucination template [llama] + [llama] + [llms].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 251 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 352d 0 73 ↑0.0/day SUSPICIOUS llama pypi 0.2.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-llms-cometapi/
Matched naming pattern: llama-llama-llms
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 352
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 73 lines, 2.7 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-llms-cometapi' matches AI hallucination template [llama] + [llama] + [llms].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 351 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 380d 15 8 ↑0.0/day SUSPICIOUS langchain pypi 0.0.1 — you@example.com example.com
Claimed homepage: https://pypi.org/project/langchain-lean/
Matched naming pattern: python-langchain-lean
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 380
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 15/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 8 lines, 306 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-lean' matches AI hallucination template [python] + [langchain] + [lean].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 463d 73 38 ↑0.2/day SUSPICIOUS llama pypi 0.1.0 Your Name you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-llms-featherlessai/
Matched naming pattern: llama-llama-llms
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 463
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 73/month, 30/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 38 lines, 1.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-llms-featherlessai' matches AI hallucination template [llama] + [llama] + [llms].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 645d 14 118 ↑0.0/day SUSPICIOUS llama pypi 0.5.0 Your Name you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-callbacks-opentelemetry/
Matched naming pattern: llama-llama-callbacks
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 645
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 14/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 118 lines, 6.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-callbacks-opentelemetry' matches AI hallucination template [llama] + [llama] + [callbacks].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 1758d 33 127 ↑0.0/day SUSPICIOUS aws pypi 0.1.6 Your Name you@example.com example.com
Claimed homepage: https://pypi.org/project/octo-aws-common/
Matched naming pattern: octo-aws-common
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1758
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 33/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 127 lines, 3.8 kB across 8 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'octo-aws-common' matches AI hallucination template [octo] + [aws] + [common].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 7 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1756 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 2444d 14 73 ↑0.0/day SUSPICIOUS workspace pypi 0.1.0 Your Name you@example.com example.com
Claimed homepage: https://pypi.org/project/py37-workspace/
Matched naming pattern: python-workspace-py37
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 2444
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 14/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 73 lines, 2.3 kB across 7 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'py37-workspace' matches AI hallucination template [python] + [workspace] + [py37].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 2443 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 97d 10 11 ↑0.1/day SQUATTED_STUB base pypi 0.1.0 RiskGrid AI you@example.com example.com
Claimed homepage: https://pypi.org/project/aegis-base/
Matched naming pattern: python-base-aegis
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 97
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 11 lines, 479 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'aegis-base' matches AI hallucination template [python] + [base] + [aegis].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (96 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (11 LOC, 1 file(s), 479 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 113d 16 0 ↑0.1/day SQUATTED_STUB google pypi 0.0.6 — you@example.com example.com
Claimed homepage: https://pypi.org/project/google-serp-scraper/
Matched naming pattern: google-google-scraper
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 113
Registry downloads: 16/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'google-serp-scraper' matches AI hallucination template [google] + [google] + [scraper].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 4 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (111 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 496d 12 17 ↑0.0/day SQUATTED_STUB replicate pypi 0.0.1 Your Name you@example.com example.com
Claimed homepage: https://github.com/yourname/replicate-fern
Matched naming pattern: python-replicate-fern
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 496
Registry downloads: 12/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 17 lines, 575 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'replicate-fern' matches AI hallucination template [python] + [replicate] + [fern].
  • HIGHClaims critical enterprise brand identity ('REPLICATE').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (17 LOC, 2 file(s), 575 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
70 1875d 197 26 ↑0.1/day SUSPICIOUS copilot pypi 0.3.0 Your Name you@example.com example.com
Claimed homepage: https://pypi.org/project/github-copilot/
Matched naming pattern: python-copilot-github
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1875
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 197/month, 45/week (MODERATE_USAGE)
Codebase size: 26 lines, 662 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'github-copilot' matches AI hallucination template [python] + [copilot] + [github].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 3 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1874 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 197 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 389d 28 119 ↑0.1/day SUSPICIOUS llama pypi 0.2.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-llms-vercel-ai-gateway/
Matched naming pattern: llama-llama-llms
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 389
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 28/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 119 lines, 5.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-llms-vercel-ai-gateway' matches AI hallucination template [llama] + [llama] + [llms].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 411d 37 27 ↑0.1/day SUSPICIOUS llama pypi 0.3.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-storage-index-store-duckdb/
Matched naming pattern: llama-llama-storage
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 411
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 37/month, 15/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 27 lines, 1.0 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-storage-index-store-duckdb' matches AI hallucination template [llama] + [llama] + [storage].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 411d 70 23 ↑0.2/day SUSPICIOUS llama pypi 0.3.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-storage-docstore-duckdb/
Matched naming pattern: llama-llama-storage
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 411
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 70/month, 18/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 23 lines, 1.0 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-storage-docstore-duckdb' matches AI hallucination template [llama] + [llama] + [storage].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 480d 0 22 ↑0.0/day SUSPICIOUS llama pypi 0.3.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-storage-index-store-gel/
Matched naming pattern: llama-llama-storage
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 480
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 22 lines, 781 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-storage-index-store-gel' matches AI hallucination template [llama] + [llama] + [storage].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 480d 26 23 ↑0.1/day SUSPICIOUS llama pypi 0.3.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-storage-docstore-gel/
Matched naming pattern: llama-llama-storage
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 480
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 26/month, 11/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 23 lines, 934 Bytes across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-storage-docstore-gel' matches AI hallucination template [llama] + [llama] + [storage].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 524d 34 75 ↑0.1/day SUSPICIOUS llama pypi 0.3.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-llms-novita/
Matched naming pattern: llama-llama-llms
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 524
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 34/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 75 lines, 5.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-llms-novita' matches AI hallucination template [llama] + [llama] + [llms].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 524d 35 39 ↑0.1/day SUSPICIOUS llama pypi 0.3.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-llms-netmind/
Matched naming pattern: llama-llama-llms
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 524
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 35/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 39 lines, 1.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-llms-netmind' matches AI hallucination template [llama] + [llama] + [llms].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 524d 61 106 ↑0.1/day SUSPICIOUS llama pypi 0.3.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-embeddings-netmind/
Matched naming pattern: llama-llama-embeddings
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 524
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 61/month, 21/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 106 lines, 3.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-embeddings-netmind' matches AI hallucination template [llama] + [llama] + [embeddings].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 554d 54 77 ↑0.1/day SUSPICIOUS llama pypi 0.3.0 llama-index you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-readers-microsoft-outlook-emails/
Matched naming pattern: llama-llama-readers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 554
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 54/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 77 lines, 3.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-readers-microsoft-outlook-emails' matches AI hallucination template [llama] + [llama] + [readers].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 561d 0 136 ↑0.0/day SUSPICIOUS llama pypi 0.3.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-retrievers-kendra/
Matched naming pattern: llama-llama-retrievers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 561
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 136 lines, 6.0 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-retrievers-kendra' matches AI hallucination template [llama] + [llama] + [retrievers].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 578d 29 33 ↑0.1/day SUSPICIOUS llama pypi 0.5.0 juliette0704 you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-tools-linkup-research/
Matched naming pattern: llama-llama-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 578
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 29/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 33 lines, 1.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-tools-linkup-research' matches AI hallucination template [llama] + [llama] + [tools].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 644d 30 80 ↑0.0/day SUSPICIOUS llama pypi 0.3.0 scummins00 you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-tools-elevenlabs/
Matched naming pattern: llama-llama-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 644
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 30/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 80 lines, 3.8 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-tools-elevenlabs' matches AI hallucination template [llama] + [llama] + [tools].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 676d 45 196 ↑0.1/day SUSPICIOUS llama pypi 0.4.1 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-multi-modal-llms-openvino/
Matched naming pattern: llama-llama-multi
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 676
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 45/month, 21/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 196 lines, 9.1 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-multi-modal-llms-openvino' matches AI hallucination template [llama] + [llama] + [multi].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 685d 23 66 ↑0.0/day SUSPICIOUS llama pypi 0.4.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-readers-zyte-serp/
Matched naming pattern: llama-llama-readers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 685
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 23/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 66 lines, 2.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-readers-zyte-serp' matches AI hallucination template [llama] + [llama] + [readers].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 693d 26 135 ↑0.0/day SUSPICIOUS llama pypi 0.4.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-utils-oracleai/
Matched naming pattern: llama-llama-utils
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 693
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 26/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 135 lines, 5.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-utils-oracleai' matches AI hallucination template [llama] + [llama] + [utils].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 693d 49 158 ↑0.1/day SUSPICIOUS llama pypi 0.4.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-embeddings-oracleai/
Matched naming pattern: llama-llama-embeddings
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 693
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 49/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 158 lines, 6.6 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-embeddings-oracleai' matches AI hallucination template [llama] + [llama] + [embeddings].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 695d 47 110 ↑0.1/day SUSPICIOUS mistralai pypi 0.5.1 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-multi-modal-llms-mistralai/
Matched naming pattern: llama-mistralai-multi
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 695
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 47/month, 14/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 110 lines, 4.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-multi-modal-llms-mistralai' matches AI hallucination template [llama] + [mistralai] + [multi].
  • HIGHClaims critical enterprise brand identity ('MISTRALAI').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 710d 23 84 ↑0.0/day SUSPICIOUS llama pypi 0.4.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-readers-quip/
Matched naming pattern: llama-llama-readers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 710
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 23/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 84 lines, 3.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-readers-quip' matches AI hallucination template [llama] + [llama] + [readers].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 750d 14 116 ↑0.0/day SUSPICIOUS llama pypi 0.1.0 Your Name you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-retrievers-relik/
Matched naming pattern: llama-llama-retrievers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 750
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 116 lines, 4.9 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-retrievers-relik' matches AI hallucination template [llama] + [llama] + [retrievers].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 749 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 882d 0 90 ↑0.0/day SUSPICIOUS llama pypi 0.5.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-postprocessor-voyageai-rerank/
Matched naming pattern: llama-llama-postprocessor
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 882
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 90 lines, 3.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-postprocessor-voyageai-rerank' matches AI hallucination template [llama] + [llama] + [postprocessor].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 10 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 881 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 916d 55 143 ↑0.1/day SUSPICIOUS llama pypi 0.5.0 — you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-embeddings-huggingface-optimum-intel/
Matched naming pattern: llama-llama-embeddings
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 916
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 55/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 143 lines, 6.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-embeddings-huggingface-optimum-intel' matches AI hallucination template [llama] + [llama] + [embeddings].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 12 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 914 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 928d 39 57 ↑0.0/day SUSPICIOUS llama pypi 0.5.0 stewartjarod you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-tools-ionic-shopping/
Matched naming pattern: llama-llama-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 928
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 39/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 57 lines, 2.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-tools-ionic-shopping' matches AI hallucination template [llama] + [llama] + [tools].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 11 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 927 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 928d 32 100 ↑0.0/day SUSPICIOUS llama pypi 0.4.0 Your Name you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-packs-rag-cli-local/
Matched naming pattern: llama-llama-packs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 928
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 32/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 100 lines, 4.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-packs-rag-cli-local' matches AI hallucination template [llama] + [llama] + [packs].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 8 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 927 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 929d 24 92 ↑0.0/day SUSPICIOUS llama pypi 0.3.0 Your Name you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-packs-vanna/
Matched naming pattern: llama-llama-packs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 929
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 24/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 92 lines, 3.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-packs-vanna' matches AI hallucination template [llama] + [llama] + [packs].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 9 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 928 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 933d 12 79 ↑0.0/day SUSPICIOUS llama pypi 0.0.1 Your Name you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-readers-redis/
Matched naming pattern: llama-llama-readers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 933
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 79 lines, 3.4 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-readers-redis' matches AI hallucination template [llama] + [llama] + [readers].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 931 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 934d 8 49 ↑0.0/day SUSPICIOUS llama pypi 0.0.1 Your Name you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-prompts-lmformatenforcer/
Matched naming pattern: llama-llama-prompts
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 934
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 8/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 49 lines, 2.1 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-prompts-lmformatenforcer' matches AI hallucination template [llama] + [llama] + [prompts].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 933 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 934d 12 124 ↑0.0/day SUSPICIOUS llama pypi 0.0.1 Your Name you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-prompts-guidance/
Matched naming pattern: llama-llama-prompts
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 934
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 124 lines, 5.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-prompts-guidance' matches AI hallucination template [llama] + [llama] + [prompts].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 932 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 934d 12 49 ↑0.0/day SUSPICIOUS llama pypi 0.0.1 Your Name you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-prompt-utils-lmformatenforcer/
Matched naming pattern: llama-llama-prompt
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 934
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 49 lines, 2.1 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-prompt-utils-lmformatenforcer' matches AI hallucination template [llama] + [llama] + [prompt].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 932 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 934d 12 124 ↑0.0/day SUSPICIOUS llama pypi 0.0.1 Your Name you@example.com example.com
Claimed homepage: https://pypi.org/project/llama-index-prompt-utils-guidance/
Matched naming pattern: llama-llama-prompt
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 934
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 124 lines, 5.6 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-prompt-utils-guidance' matches AI hallucination template [llama] + [llama] + [prompt].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'you@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 932 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
Next »
LINK COPIED TO CLIPBOARD