🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Growing Packages Fastest-adopted since publish Top Emails Accounts most linked to flagged findings About What Sentinel does & why

Sorted by risk score. Filter with email:, domain:, keyword:, or version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d for how recently a package was published (combine both for a range, e.g. age:>1h age:<6h), or a bare word for a package-name search. Click a package to see the signals behind its score before opening its registry page.

Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
95 79d 42 63 ↑0.5/day SUSPICIOUS gemini pypi 2.0.1 — your_email@example.com example.com
Claimed homepage: https://pypi.org/project/gemini-seminar-client/
Matched naming pattern: gemini-gemini-client
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 79
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 42/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 63 lines, 3.8 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'gemini-seminar-client' matches AI hallucination template [gemini] + [gemini] + [client].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'your_email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 6 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (78 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 574d 33 164 ↑0.1/day SUSPICIOUS jupiter pypi 0.1.3 Your Name your_email@example.com example.com
Claimed homepage: https://ohmygoat.dev/
Matched naming pattern: goat-jupiter-plugin
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 574
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 33/month, 12/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 164 lines, 9.5 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'goat-sdk-plugin-jupiter' matches AI hallucination template [goat] + [jupiter] + [plugin].
  • HIGHClaims critical enterprise brand identity ('JUPITER').
  • HIGHPublisher email 'your_email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 734d 23 18 ↑0.0/day SQUATTED_STUB mistral pypi 0.0.1 AutoGen Developers your_email@example.com example.com
Claimed homepage: https://github.com/microsoft/autogen
Matched naming pattern: python-mistral-autogen
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 734
Registry downloads: 23/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 18 lines, 747 Bytes across 8 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'autogen-mistral' matches AI hallucination template [python] + [mistral] + [autogen].
  • HIGHClaims critical enterprise brand identity ('MISTRAL').
  • HIGHPublisher email 'your_email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 733 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (18 LOC, 8 file(s), 747 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 734d 71 18 ↑0.1/day SQUATTED_STUB gemini pypi 0.0.1 AutoGen Developers your_email@example.com example.com
Claimed homepage: https://github.com/microsoft/autogen
Matched naming pattern: python-gemini-autogen
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 734
Registry downloads: 71/month, 16/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 18 lines, 719 Bytes across 7 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'autogen-gemini' matches AI hallucination template [python] + [gemini] + [autogen].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'your_email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 732 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (18 LOC, 7 file(s), 719 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 734d 92 18 ↑0.1/day SQUATTED_STUB openai pypi 0.0.1 AutoGen Developers your_email@example.com example.com
Claimed homepage: https://github.com/microsoft/autogen
Matched naming pattern: python-openai-autogen
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 734
Registry downloads: 92/month, 13/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 18 lines, 696 Bytes across 6 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'autogen-openai' matches AI hallucination template [python] + [openai] + [autogen].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'your_email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 733 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (18 LOC, 6 file(s), 696 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 210d 19 1,209 ↑0.1/day BENIGN_COMMUNITY mistral pypi 1.0.3 TRPG Agent Team your_email@example.com example.com
Claimed homepage: https://github.com/yourusername/pdf2txt
Matched naming pattern: python-mistral-pdf2txt
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 210
Registry downloads: 19/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1209 lines, 49.2 kB across 13 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mistral-pdf2txt' matches AI hallucination template [python] + [mistral] + [pdf2txt].
  • HIGHClaims critical enterprise brand identity ('MISTRAL').
  • HIGHPublisher email 'your_email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 4 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 208 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (1209 LOC across 13 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 574d 0 244 ↑0.0/day BENIGN_COMMUNITY uniswap pypi 0.1.2 Your Name your_email@example.com example.com
Claimed homepage: https://ohmygoat.dev/
Matched naming pattern: goat-uniswap-plugin
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 574
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 244 lines, 11.8 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'goat-sdk-plugin-uniswap' matches AI hallucination template [goat] + [uniswap] + [plugin].
  • HIGHClaims critical enterprise brand identity ('UNISWAP').
  • HIGHPublisher email 'your_email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
5 453d 9 26 ↑0.0/day BENIGN_COMMUNITY vshare pypi 0.1.0 Vansh Sharma your_email@example.com example.com
Claimed homepage: https://github.com/yourusername/vshare
Matched naming pattern: django-vshare-auth
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 453
Registry downloads: 9/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 26 lines, 857 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
LINK COPIED TO CLIPBOARD