🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Growing Packages Fastest-adopted since publish Top Emails Accounts most linked to flagged findings About What Sentinel does & why

Sorted by risk score. Filter with email:, domain:, keyword:, or version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d for how recently a package was published (combine both for a range, e.g. age:>1h age:<6h), or a bare word for a package-name search. Click a package to see the signals behind its score before opening its registry page.

Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
160 107d 5,119 55,583 ↑47.8/day MALICIOUS llama pypi 10605.0.0 — vladlearns@gmail.com gmail.com
Claimed homepage: https://pypi.org/project/llama-cpp-bin/
Matched naming pattern: llama-llama-bin
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 107
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 5119/month, 1261/week (ACTIVE_COMMUNITY_USE)
Codebase size: 55583 lines, 3.0 MB across 219 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-cpp-bin' matches AI hallucination template [llama] + [llama] + [bin].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'vladlearns@gmail.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 187 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (106 days ago) during the active AI hallucination slopsquatting wave.
  • CRITICALPackage registered with suspiciously high major version (v10605.0.0, major 10605) despite recent registration (106 days ago, 187 release(s)), indicating potential dependency confusion attack to shadow internal organization builds.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (55583 LOC across 219 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
LINK COPIED TO CLIPBOARD