🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Growing Packages Fastest-adopted since publish Top Emails Accounts most linked to flagged findings About What Sentinel does & why

Sorted by risk score. Filter with email:, domain:, keyword:, or version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d for how recently a package was published (combine both for a range, e.g. age:>1h age:<6h), or a bare word for a package-name search. Click a package to see the signals behind its score before opening its registry page.

Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
95 232d 12 38 ↑0.1/day SUSPICIOUS ollama pypi 1.0.0 — your-email@example.com example.com
Claimed homepage: https://pypi.org/project/ollama-call/
Matched naming pattern: python-ollama-call
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 232
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 38 lines, 1.1 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'ollama-call' matches AI hallucination template [python] + [ollama] + [call].
  • HIGHClaims critical enterprise brand identity ('OLLAMA').
  • HIGHPublisher email 'your-email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 230 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
19 233d 15 1,897 ↑0.1/day BENIGN_COMMUNITY langchain pypi 1.0.0 Hour.IT Team your-email@example.com example.com
Claimed homepage: https://github.com/SVG-campus/agent-hub
Matched naming pattern: langchain-langchain-hub
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 233
Registry downloads: 15/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1897 lines, 87.0 kB across 23 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-agent-hub' matches AI hallucination template [langchain] + [langchain] + [hub].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'your-email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 232 days ago within the 1-year AI tool proliferation window.
  • HIGHSYNTAX_ERROR_IN_langchain_agent_hub-1.0.0/app/agent_hub.py: unterminated string literal (detected at line 34) (<unknown>, line 34)
  • INFOSubstantial functional codebase (1897 LOC across 23 file(s)).
Static code signals:
  • SYNTAX_ERROR_IN_langchain_agent_hub-1.0.0/app/agent_hub.py: unterminated string literal (detected at line 34) (<unknown>, line 34)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 188d 0 774 ↑0.0/day BENIGN_COMMUNITY groq pypi 1.0.0 — your-email@example.com example.com
Claimed homepage: https://pypi.org/project/asb-groq-sub/
Matched naming pattern: asb-groq-sub
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 188
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 774 lines, 42.9 kB across 5 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'asb-groq-sub' matches AI hallucination template [asb] + [groq] + [sub].
  • HIGHClaims critical enterprise brand identity ('GROQ').
  • HIGHPublisher email 'your-email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 187 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (774 LOC across 5 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 199d 18 1,282 ↑0.1/day BENIGN_COMMUNITY gemini pypi 0.1.0 — your-email@example.com example.com
Claimed homepage: https://pypi.org/project/iflow-mcp_angrysky56-gemini-mcp-client/
Matched naming pattern: iflow-gemini-angrysky56
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 199
Registry downloads: 18/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1282 lines, 60.9 kB across 5 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'iflow-mcp-angrysky56-gemini-mcp-client' matches AI hallucination template [iflow] + [gemini] + [angrysky56].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'your-email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 197 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (1282 LOC across 5 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 371d 32 322 ↑0.1/day BENIGN_COMMUNITY azure pypi 0.1.6 — your-email@example.com example.com
Claimed homepage: https://pypi.org/project/azure-openai-limits/
Matched naming pattern: django-azure-auth
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 371
Registry downloads: 32/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 322 lines, 12.4 kB across 6 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'azure-openai-limits' matches AI hallucination template [django] + [azure] + [auth].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'Taylor Nelson <your-email@example.com>' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
13 390d 51 666 ↑0.1/day BENIGN_COMMUNITY claude pypi 1.1.0 Claude Code Community your-email@example.com example.com
Claimed homepage: https://github.com/desis123/claude-code-viewer
Matched naming pattern: claude-claude-viewer
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 390
Registry downloads: 51/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 666 lines, 33.6 kB across 5 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'claude-code-viewer' matches AI hallucination template [claude] + [claude] + [viewer].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'your-email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (666 LOC across 5 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
11 287d 207 10,334 ↑0.7/day BENIGN_COMMUNITY web3 pypi 1.0.46 SmallCat your-email@example.com example.com
Claimed homepage: https://github.com/your-org/prisma-web3
Matched naming pattern: prisma-web3-py
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 287
Registry downloads: 207/month, 4/week (MODERATE_USAGE)
Codebase size: 10334 lines, 438.3 kB across 54 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'prisma-web3-py' matches AI hallucination template [prisma] + [web3] + [py].
  • HIGHClaims critical enterprise brand identity ('WEB3').
  • HIGHPublisher email 'your-email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 285 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (10334 LOC across 54 file(s)).
  • INFOModerate community usage with 185 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
LINK COPIED TO CLIPBOARD