🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Growing Packages Fastest-adopted since publish Top Emails Accounts most linked to flagged findings About What Sentinel does & why

Sorted by risk score. Filter with email:, domain:, keyword:, or version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d for how recently a package was published (combine both for a range, e.g. age:>1h age:<6h), or a bare word for a package-name search. Click a package to see the signals behind its score before opening its registry page.

Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
95 38d 210 125 ↑5.5/day SUSPICIOUS base pypi 0.1.16 — —
Claimed homepage: https://pypi.org/project/roborean-plugins-base/
Matched naming pattern: roborean-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 38
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 210/month, 5/week (MODERATE_USAGE)
Codebase size: 125 lines, 5.0 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'roborean-plugins-base' matches AI hallucination template [roborean] + [base] + [base].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 15 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (38 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 210 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 39d 22 54 ↑0.6/day SUSPICIOUS llama pypi 0.1.0 — chandu1221@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/llama-index-postprocessor-distil/
Matched naming pattern: llama-llama-postprocessor
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 39
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 22/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 54 lines, 2.9 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-postprocessor-distil' matches AI hallucination template [llama] + [llama] + [postprocessor].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'chandu1221@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (37 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 39d 27 39 ↑0.7/day SUSPICIOUS langchain pypi 0.1.0 — chandu1221@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-distil/
Matched naming pattern: python-langchain-distil
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 39
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 27/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 39 lines, 2.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-distil' matches AI hallucination template [python] + [langchain] + [distil].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'chandu1221@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (37 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 40d 19 31 ↑0.5/day SUSPICIOUS langchain pypi 2026.7.15.1 skynetCMD —
Claimed homepage: https://pypi.org/project/m3-langchain/
Matched naming pattern: python-langchain-m3
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 40
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 19/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 31 lines, 1.7 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'm3-langchain' matches AI hallucination template [python] + [langchain] + [m3].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (39 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 41d 22 169 ↑0.5/day SUSPICIOUS llama pypi 0.1.0 — andre0zi000@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/llama-index-tools-ilovevideoeditor/
Matched naming pattern: llama-llama-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 41
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 22/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 169 lines, 7.2 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-tools-ilovevideoeditor' matches AI hallucination template [llama] + [llama] + [tools].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'andre0zi000@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (40 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 42d 0 63 ↑0.0/day SUSPICIOUS llama pypi 0.1.0 — 92919259+fenjufu@users.noreply.github.com users.noreply.github.com
Claimed homepage: https://pypi.org/project/llama-index-llms-iflytek/
Matched naming pattern: llama-llama-llms
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 42
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 63 lines, 2.3 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-llms-iflytek' matches AI hallucination template [llama] + [llama] + [llms].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email '92919259+fenjufu@users.noreply.github.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (41 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 42d 14 68 ↑0.3/day SUSPICIOUS safe pypi 0.1.0 Jonathan Corcutt —
Claimed homepage: https://pypi.org/project/onedrive-safe-xlsx/
Matched naming pattern: onedrive-safe-xlsx
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 42
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 14/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 68 lines, 3.6 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'onedrive-safe-xlsx' matches AI hallucination template [onedrive] + [safe] + [xlsx].
  • HIGHClaims critical enterprise brand identity ('SAFE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (41 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 43d 21 51 ↑0.5/day SUSPICIOUS anthropic pypi 1.0.0 — —
Claimed homepage: https://pypi.org/project/maigp-anthropic/
Matched naming pattern: python-anthropic-maigp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 43
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 21/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 51 lines, 2.6 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'maigp-anthropic' matches AI hallucination template [python] + [anthropic] + [maigp].
  • HIGHClaims critical enterprise brand identity ('ANTHROPIC').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (41 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 43d 19 40 ↑0.4/day SUSPICIOUS llamaindex pypi 1.0.0 — —
Claimed homepage: https://pypi.org/project/maigp-llamaindex/
Matched naming pattern: python-llamaindex-maigp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 43
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 19/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 40 lines, 1.9 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'maigp-llamaindex' matches AI hallucination template [python] + [llamaindex] + [maigp].
  • HIGHClaims critical enterprise brand identity ('LLAMAINDEX').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (42 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 43d 53 122 ↑1.2/day SUSPICIOUS openai pypi 1.0.1 — —
Claimed homepage: https://pypi.org/project/agenttic-openai-agents/
Matched naming pattern: agenttic-openai-agents
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 43
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 53/month, 12/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 122 lines, 6.2 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'agenttic-openai-agents' matches AI hallucination template [agenttic] + [openai] + [agents].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (41 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 43d 72 163 ↑1.7/day SUSPICIOUS deepseek pypi 1.0 — just.blaing@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/free-deepseek-api/
Matched naming pattern: free-deepseek-api
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 43
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 72/month, 28/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 163 lines, 8.9 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'free-deepseek-api' matches AI hallucination template [free] + [deepseek] + [api].
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • HIGHPublisher email 'just.blaing@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (42 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 45d 0 54 ↑0.0/day SUSPICIOUS openai pypi 1.0.0 — —
Claimed homepage: https://pypi.org/project/maigp-openai/
Matched naming pattern: python-openai-maigp
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 45
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 54 lines, 2.4 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'maigp-openai' matches AI hallucination template [python] + [openai] + [maigp].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (44 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 47d 154 61 ↑3.3/day SUSPICIOUS base pypi 2.0.20.1 — —
Claimed homepage: https://pypi.org/project/yxd-skill-tlpt-base/
Matched naming pattern: yxd-base-tlpt
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 47
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 154/month, 144/week (MODERATE_USAGE)
Codebase size: 61 lines, 2.0 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'yxd-skill-tlpt-base' matches AI hallucination template [yxd] + [base] + [tlpt].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (46 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 154 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 50d 15 46 ↑0.3/day SUSPICIOUS langgraph pypi 0.1.0 Ramprasad Gaddam —
Claimed homepage: https://pypi.org/project/vouch-langgraph/
Matched naming pattern: python-langgraph-vouch
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 50
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 15/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 46 lines, 1.9 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'vouch-langgraph' matches AI hallucination template [python] + [langgraph] + [vouch].
  • HIGHClaims critical enterprise brand identity ('LANGGRAPH').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (50 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 50d 51 44 ↑1.0/day SUSPICIOUS huggingface pypi 0.0.5 danialcala94 danielalcalavalera@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/aibusy-runtime-huggingface/
Matched naming pattern: aibusy-huggingface-huggingface
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 50
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 51/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 44 lines, 1.5 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'aibusy-runtime-huggingface' matches AI hallucination template [aibusy] + [huggingface] + [huggingface].
  • HIGHClaims critical enterprise brand identity ('HUGGINGFACE').
  • HIGHPublisher email 'danielalcalavalera@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 5 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 51d 15 161 ↑0.3/day SUSPICIOUS groq pypi 0.1.0 Waken contributors —
Claimed homepage: https://pypi.org/project/waken-groq/
Matched naming pattern: python-groq-waken
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 51
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 15/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 161 lines, 8.6 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'waken-groq' matches AI hallucination template [python] + [groq] + [waken].
  • HIGHClaims critical enterprise brand identity ('GROQ').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 51d 11 169 ↑0.2/day SUSPICIOUS cohere pypi 0.1.0 Waken contributors —
Claimed homepage: https://pypi.org/project/waken-cohere/
Matched naming pattern: python-cohere-waken
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 51
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 169 lines, 8.9 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'waken-cohere' matches AI hallucination template [python] + [cohere] + [waken].
  • HIGHClaims critical enterprise brand identity ('COHERE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 51d 11 183 ↑0.2/day SUSPICIOUS mistral pypi 0.1.0 Waken contributors —
Claimed homepage: https://pypi.org/project/waken-mistral/
Matched naming pattern: python-mistral-waken
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 51
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 11/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 183 lines, 9.7 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'waken-mistral' matches AI hallucination template [python] + [mistral] + [waken].
  • HIGHClaims critical enterprise brand identity ('MISTRAL').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 51d 18 154 ↑0.4/day SUSPICIOUS openai pypi 0.1.0 Waken contributors —
Claimed homepage: https://pypi.org/project/waken-openai/
Matched naming pattern: python-openai-waken
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 51
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 18/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 154 lines, 7.4 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'waken-openai' matches AI hallucination template [python] + [openai] + [waken].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 51d 15 104 ↑0.3/day SUSPICIOUS gemini pypi 0.1.0 Waken contributors —
Claimed homepage: https://pypi.org/project/waken-gemini/
Matched naming pattern: python-gemini-waken
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 51
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 15/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 104 lines, 5.0 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'waken-gemini' matches AI hallucination template [python] + [gemini] + [waken].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (49 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 53d 19 37 ↑0.4/day SUSPICIOUS langchain pypi 0.3.0 — ginuxtechacademy@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-comply54/
Matched naming pattern: python-langchain-comply54
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 53
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 19/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 37 lines, 1.2 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-comply54' matches AI hallucination template [python] + [langchain] + [comply54].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'ginuxtechacademy@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (52 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 53d 16 97 ↑0.3/day SUSPICIOUS llama pypi 0.1.0 Casper Kwok —
Claimed homepage: https://pypi.org/project/llama-index-readers-pdfmuse/
Matched naming pattern: llama-llama-readers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 53
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 97 lines, 4.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-readers-pdfmuse' matches AI hallucination template [llama] + [llama] + [readers].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (52 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 56d 9 18 ↑0.2/day SUSPICIOUS langgraph pypi 0.1.1 Microloop Team —
Claimed homepage: https://pypi.org/project/microloop-langgraph/
Matched naming pattern: python-langgraph-microloop
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 56
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 9/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 18 lines, 781 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'microloop-langgraph' matches AI hallucination template [python] + [langgraph] + [microloop].
  • HIGHClaims critical enterprise brand identity ('LANGGRAPH').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (55 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 58d 10 158 ↑0.2/day SUSPICIOUS safe pypi 0.1.0 Sachin Tiwari —
Claimed homepage: https://pypi.org/project/health-safe-ocr/
Matched naming pattern: health-safe-ocr
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 58
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 158 lines, 6.0 kB across 9 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'health-safe-ocr' matches AI hallucination template [health] + [safe] + [ocr].
  • HIGHClaims critical enterprise brand identity ('SAFE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (57 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 59d 20 27 ↑0.3/day SUSPICIOUS base pypi 0.0.1 Abbosjon mail@example.com example.com
Claimed homepage: https://pypi.org/project/django-custom-base-models-uz/
Matched naming pattern: django-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 59
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 20/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 27 lines, 881 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'django-custom-base-models-uz' matches AI hallucination template [django] + [base] + [base].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'mail@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (57 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 59d 16 62 ↑0.3/day SUSPICIOUS base pypi 1.0.0 — manteclaw@proton.me proton.me
Claimed homepage: https://pypi.org/project/base-l2-agent-kit/
Matched naming pattern: base-base-agent
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 59
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 62 lines, 2.9 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'base-l2-agent-kit' matches AI hallucination template [base] + [base] + [agent].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'manteclaw@proton.me' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (58 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 59d 718 155 ↑12.2/day SUSPICIOUS llama pypi 3.2.0 Trelix Contributors —
Claimed homepage: https://pypi.org/project/trelix-llama-index/
Matched naming pattern: trelix-llama-index
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 59
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 718/month, 666/week (MODERATE_USAGE)
Codebase size: 155 lines, 7.8 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'trelix-llama-index' matches AI hallucination template [trelix] + [llama] + [index].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 14 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (59 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 718 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 60d 10 6 ↑0.2/day SUSPICIOUS google pypi 1.0.0 DownloadMapImage —
Claimed homepage: https://pypi.org/project/google-maps-place-parser/
Matched naming pattern: google-google-place
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 60
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 6 lines, 160 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'google-maps-place-parser' matches AI hallucination template [google] + [google] + [place].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (59 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 61d 407 31 ↑6.7/day SUSPICIOUS grok pypi 0.4.0 MosRat —
Claimed homepage: https://pypi.org/project/grok-search-rs/
Matched naming pattern: grok-grok-rs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 61
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 407/month, 13/week (MODERATE_USAGE)
Codebase size: 31 lines, 1.1 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'grok-search-rs' matches AI hallucination template [grok] + [grok] + [rs].
  • HIGHClaims critical enterprise brand identity ('GROK').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 19 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (59 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 407 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 61d 216 126 ↑3.5/day SUSPICIOUS google pypi 0.2.1 — —
Claimed homepage: https://pypi.org/project/axemere-gateway-google/
Matched naming pattern: axemere-google-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 61
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 216/month, 14/week (MODERATE_USAGE)
Codebase size: 126 lines, 6.7 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'axemere-gateway-google' matches AI hallucination template [axemere] + [google] + [google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 6 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (60 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 216 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 61d 206 61 ↑3.4/day SUSPICIOUS openai pypi 0.2.1 — —
Claimed homepage: https://pypi.org/project/axemere-gateway-openai/
Matched naming pattern: axemere-openai-openai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 61
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 206/month, 11/week (MODERATE_USAGE)
Codebase size: 61 lines, 3.8 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'axemere-gateway-openai' matches AI hallucination template [axemere] + [openai] + [openai].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 6 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (60 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 206 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 61d 212 28 ↑3.5/day SUSPICIOUS anthropic pypi 0.2.1 — —
Claimed homepage: https://pypi.org/project/axemere-gateway-anthropic/
Matched naming pattern: axemere-anthropic-anthropic
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 61
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 212/month, 12/week (MODERATE_USAGE)
Codebase size: 28 lines, 1.8 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'axemere-gateway-anthropic' matches AI hallucination template [axemere] + [anthropic] + [anthropic].
  • HIGHClaims critical enterprise brand identity ('ANTHROPIC').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 6 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (60 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 212 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 62d 12 47 ↑0.2/day SUSPICIOUS langchain pypi 0.1.0 — sbryngelson@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/langchain-aneforge/
Matched naming pattern: python-langchain-aneforge
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 62
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 47 lines, 2.7 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-aneforge' matches AI hallucination template [python] + [langchain] + [aneforge].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'sbryngelson@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (61 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 63d 15 179 ↑0.2/day SUSPICIOUS base pypi 0.1.1 — —
Claimed homepage: https://pypi.org/project/ollama-agent-base/
Matched naming pattern: ollama-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 63
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 15/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 179 lines, 6.2 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'ollama-agent-base' matches AI hallucination template [ollama] + [base] + [base].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (62 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 65d 25 194 ↑0.4/day SUSPICIOUS openai pypi 0.2.0 — —
Claimed homepage: https://pypi.org/project/agentmetrics-openai-agents/
Matched naming pattern: agentmetrics-openai-agents
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 65
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 25/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 194 lines, 8.1 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'agentmetrics-openai-agents' matches AI hallucination template [agentmetrics] + [openai] + [agents].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (64 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 68d 15 137 ↑0.2/day SUSPICIOUS openai pypi 0.9.0 Wayforth Technologies Inc. —
Claimed homepage: https://pypi.org/project/wayforth-openai-agents/
Matched naming pattern: wayforth-openai-agents
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 68
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 15/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 137 lines, 6.7 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'wayforth-openai-agents' matches AI hallucination template [wayforth] + [openai] + [agents].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (67 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 69d 10 76 ↑0.1/day SUSPICIOUS google pypi 0.0.1 wordstotech —
Claimed homepage: https://pypi.org/project/google-flights-scraper-api/
Matched naming pattern: google-google-scraper
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 69
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 76 lines, 3.1 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'google-flights-scraper-api' matches AI hallucination template [google] + [google] + [scraper].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (67 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 69d 12 105 ↑0.2/day SUSPICIOUS llama pypi 0.1.0 FunASR —
Claimed homepage: https://pypi.org/project/llama-index-readers-funasr/
Matched naming pattern: llama-llama-readers
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 69
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 105 lines, 4.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-readers-funasr' matches AI hallucination template [llama] + [llama] + [readers].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (68 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 70d 19 20 ↑0.3/day SUSPICIOUS openai pypi 0.1.0 — mashle@geasslabs.xyz geasslabs.xyz
Claimed homepage: https://pypi.org/project/mnemosyne-openai-agents/
Matched naming pattern: mnemosyne-openai-agents
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 70
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 19/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 863 Bytes across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mnemosyne-openai-agents' matches AI hallucination template [mnemosyne] + [openai] + [agents].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'mashle@geasslabs.xyz' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (69 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 71d 0 97 ↑0.0/day SUSPICIOUS qdrant pypi 0.1.0 NeuroCore Contributors —
Claimed homepage: https://pypi.org/project/neurocore-skill-qdrant/
Matched naming pattern: neurocore-qdrant-qdrant
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 71
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 97 lines, 4.0 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'neurocore-skill-qdrant' matches AI hallucination template [neurocore] + [qdrant] + [qdrant].
  • HIGHClaims critical enterprise brand identity ('QDRANT').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (71 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 71d 7 105 ↑0.1/day SUSPICIOUS ollama pypi 0.1.0 NeuroCore Contributors —
Claimed homepage: https://pypi.org/project/neurocore-skill-ollama/
Matched naming pattern: neurocore-ollama-ollama
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 71
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 7/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 105 lines, 4.2 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'neurocore-skill-ollama' matches AI hallucination template [neurocore] + [ollama] + [ollama].
  • HIGHClaims critical enterprise brand identity ('OLLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (70 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 72d 82 47 ↑1.1/day SUSPICIOUS ollama pypi 0.1.0 Manoj Mishra —
Claimed homepage: https://pypi.org/project/ollama-web-search/
Matched naming pattern: ollama-ollama-search
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 72
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 82/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 47 lines, 1.6 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'ollama-web-search' matches AI hallucination template [ollama] + [ollama] + [search].
  • HIGHClaims critical enterprise brand identity ('OLLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (70 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 73d 11 147 ↑0.2/day SUSPICIOUS llama pypi 0.1.0 — —
Claimed homepage: https://pypi.org/project/llama-index-memory-recollect/
Matched naming pattern: llama-llama-memory
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 73
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 147 lines, 6.4 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-memory-recollect' matches AI hallucination template [llama] + [llama] + [memory].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (71 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 73d 15 130 ↑0.2/day SUSPICIOUS safe pypi 0.1.0 alien1403 hanghicelrazvanmihai@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/safe-logs/
Matched naming pattern: python-safe-logs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 73
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 15/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 130 lines, 6.4 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'safe-logs' matches AI hallucination template [python] + [safe] + [logs].
  • HIGHClaims critical enterprise brand identity ('SAFE').
  • HIGHPublisher email 'hanghicelrazvanmihai@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (72 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 74d 0 174 ↑0.0/day SUSPICIOUS llama pypi 0.1.1 foundrynet hello@foundrynet.io foundrynet.io
Claimed homepage: https://pypi.org/project/llama-index-tools-mint/
Matched naming pattern: llama-llama-tools
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 74
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 174 lines, 7.1 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-tools-mint' matches AI hallucination template [llama] + [llama] + [tools].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'hello@foundrynet.io' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (73 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 74d 0 116 ↑0.0/day SUSPICIOUS llama pypi 0.1.0 Voxell, Inc. —
Claimed homepage: https://pypi.org/project/llama-index-embeddings-voxell/
Matched naming pattern: llama-llama-embeddings
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 74
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 116 lines, 5.0 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-embeddings-voxell' matches AI hallucination template [llama] + [llama] + [embeddings].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'None' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (74 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 75d 11 31 ↑0.1/day SUSPICIOUS gcp pypi 1.0.0 Avani Vyas avvyas@cisco.com cisco.com
Claimed homepage: https://github4-chn.cisco.com/csr1000v-gcp/c8kv_gcp_ha
Matched naming pattern: c8kv-gcp-ha
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 75
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 11/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 31 lines, 1.2 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'c8kv-gcp-ha' matches AI hallucination template [c8kv] + [gcp] + [ha].
  • HIGHClaims critical enterprise brand identity ('GCP').
  • HIGHPublisher email 'avvyas@cisco.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • HIGHPackage registered recently (74 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 77d 91 28 ↑1.2/day SUSPICIOUS azure pypi 0.1.0 — aadeshbagmar@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/azure-storage-fs/
Matched naming pattern: azure-azure-fs
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 77
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 91/month, 21/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 28 lines, 1.1 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'azure-storage-fs' matches AI hallucination template [azure] + [azure] + [fs].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'aadeshbagmar@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (76 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 77d 23 28 ↑0.3/day SUSPICIOUS azure pypi 0.1.0 — aadeshbagmar@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/azure-core-opentelemetry/
Matched naming pattern: azure-azure-opentelemetry
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 77
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 23/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 28 lines, 1.2 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'azure-core-opentelemetry' matches AI hallucination template [azure] + [azure] + [opentelemetry].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'aadeshbagmar@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (76 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 77d 75 158 ↑1.0/day SUSPICIOUS claude pypi 1.1.1 — rauls.kjarners@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/claude-to-agy/
Matched naming pattern: claude-claude-agy
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 77
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 75/month, 20/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 158 lines, 6.8 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'claude-to-agy' matches AI hallucination template [claude] + [claude] + [agy].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'rauls.kjarners@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 3 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (77 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
« Prev Next »
LINK COPIED TO CLIPBOARD