🛡️ FlagThis : Sentinel Review

Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.

Threat Feed Flagged packages, sorted by risk score Growing Packages Fastest-adopted since publish Top Emails Accounts most linked to flagged findings About What Sentinel does & why

Sorted by risk score. Filter with email:, domain:, keyword:, or version: (comma = OR within a field, space = AND across fields), age:<6h / age:>90d for how recently a package was published (combine both for a range, e.g. age:>1h age:<6h), or a bare word for a package-name search. Click a package to see the signals behind its score before opening its registry page.

Package Score ▼ Age Users Lines Growth Verdict Targeted Ecosystem Version Author Email domain Signals
95 29d 156 61 ↑5.4/day SUSPICIOUS vllm pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/vllm-cleaner/
Matched naming pattern: python-vllm-cleaner
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 29
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 156/month, 5/week (MODERATE_USAGE)
Codebase size: 61 lines, 2.8 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'vllm-cleaner' matches AI hallucination template [python] + [vllm] + [cleaner].
  • HIGHClaims critical enterprise brand identity ('VLLM').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (28 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 156 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 195d 12 72 ↑0.1/day SUSPICIOUS aws pypi 0.1.1 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/iflow-mcp_minorun365-mcp-aws-level-checker/
Matched naming pattern: iflow-aws-minorun365
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 195
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 12/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 72 lines, 3.1 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'iflow-mcp-minorun365-mcp-aws-level-checker' matches AI hallucination template [iflow] + [aws] + [minorun365].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 193 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 255d 0 113 ↑0.0/day SUSPICIOUS google pypi 0.1.1 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/mcp-server-google-scholar/
Matched naming pattern: mcp-google-google
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 255
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 113 lines, 4.6 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mcp-server-google-scholar' matches AI hallucination template [mcp] + [google] + [google].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 254 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 297d 16 161 ↑0.1/day SUSPICIOUS azure pypi 0.1.0 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/azure-keyvault-helper
Matched naming pattern: azure-azure-helper
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 297
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 16/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 161 lines, 7.2 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'azure-keyvault-helper' matches AI hallucination template [azure] + [azure] + [helper].
  • HIGHClaims critical enterprise brand identity ('AZURE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 296 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 313d 0 41 ↑0.0/day SUSPICIOUS aws pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/awslabs.aws-knowledge-mcp-server/
Matched naming pattern: awslabs-aws-knowledge
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 313
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 41 lines, 1.8 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'awslabs-aws-knowledge-mcp-server' matches AI hallucination template [awslabs] + [aws] + [knowledge].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 312 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 316d 22 80 ↑0.1/day SUSPICIOUS aws pypi 0.1.1 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/aws-dataprocessing-mcp-server
Matched naming pattern: aws-aws-dataprocessing
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 316
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 22/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 80 lines, 3.1 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'aws-aws-dataprocessing-mcp-server' matches AI hallucination template [aws] + [aws] + [dataprocessing].
  • HIGHClaims critical enterprise brand identity ('AWS').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 315 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 330d 17 138 ↑0.1/day SUSPICIOUS google pypi 0.2.0 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/Google-Analytic-Process
Matched naming pattern: google-google-process
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 330
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 138 lines, 5.3 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'google-analytic-process' matches AI hallucination template [google] + [google] + [process].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 4 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 328 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 338d 62 75 ↑0.2/day SUSPICIOUS ollama pypi 0.1.1 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/streamlit-ollama
Matched naming pattern: python-ollama-streamlit
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 338
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 62/month, 10/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 75 lines, 2.6 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'streamlit-ollama' matches AI hallucination template [python] + [ollama] + [streamlit].
  • HIGHClaims critical enterprise brand identity ('OLLAMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 337 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 470d 18 125 ↑0.0/day SUSPICIOUS eth pypi 1.1 your_name your.email@example.com example.com
Claimed homepage: https://pypi.org/project/mac-address-eth/
Matched naming pattern: mac-eth-eth
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 470
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 18/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 125 lines, 4.4 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mac-address-eth' matches AI hallucination template [mac] + [eth] + [eth].
  • HIGHClaims critical enterprise brand identity ('ETH').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 5 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
95 517d 14 154 ↑0.0/day SUSPICIOUS amazon pypi 1.0.0 Your Name your.email@example.com example.com
Claimed homepage: https://pypi.org/project/mcp-amazon-listing-optimizer/
Matched naming pattern: mcp-amazon-listing
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 517
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 14/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 154 lines, 4.7 kB across 2 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mcp-amazon-listing-optimizer' matches AI hallucination template [mcp] + [amazon] + [listing].
  • HIGHClaims critical enterprise brand identity ('AMAZON').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 388d 21 193 ↑0.1/day SUSPICIOUS claude pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/claude-code-goodies/
Matched naming pattern: claude-claude-goodies
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 388
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 21/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 193 lines, 9.1 kB across 1 file (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'claude-code-goodies' matches AI hallucination template [claude] + [claude] + [goodies].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 426d 26 98 ↑0.1/day SUSPICIOUS workspace pypi 1.1.2 Your Name your.email@example.com example.com
Claimed homepage: https://pypi.org/project/vscode-workspace-config-generator/
Matched naming pattern: vscode-workspace-config
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 426
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 26/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 98 lines, 3.7 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'vscode-workspace-config-generator' matches AI hallucination template [vscode] + [workspace] + [config].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 426d 14 96 ↑0.0/day SUSPICIOUS workspace pypi 1.0.1 Your Name your.email@example.com example.com
Claimed homepage: https://pypi.org/project/workspace-generator/
Matched naming pattern: python-workspace-generator
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 426
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 14/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 96 lines, 3.4 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'workspace-generator' matches AI hallucination template [python] + [workspace] + [generator].
  • HIGHClaims critical enterprise brand identity ('WORKSPACE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 478d 20 90 ↑0.0/day SUSPICIOUS gcp pypi 0.1.3 Raghava Chellu your.email@example.com example.com
Claimed homepage: https://github.com/yourgithub/gcp-mft-ai
Matched naming pattern: gcp-gcp-ai
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 478
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 20/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 90 lines, 3.5 kB across 5 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'gcp-mft-ai' matches AI hallucination template [gcp] + [gcp] + [ai].
  • HIGHClaims critical enterprise brand identity ('GCP').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 4 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 566d 25 48 ↑0.0/day SUSPICIOUS circle pypi 0.1.0 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/circle_area
Matched naming pattern: circle-circle-ffwc
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 566
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 25/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 48 lines, 2.2 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'circle-area-ffwc' matches AI hallucination template [circle] + [circle] + [ffwc].
  • HIGHClaims critical enterprise brand identity ('CIRCLE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 576d 50 63 ↑0.1/day SUSPICIOUS deepseek pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/deepseek-reason-extractor/
Matched naming pattern: deepseek-deepseek-extractor
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 576
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 50/month, 24/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 63 lines, 2.8 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'deepseek-reason-extractor' matches AI hallucination template [deepseek] + [deepseek] + [extractor].
  • HIGHClaims critical enterprise brand identity ('DEEPSEEK').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 650d 27 97 ↑0.0/day SUSPICIOUS gemini pypi 0.1.7 Your Name your.email@example.com example.com
Claimed homepage: https://pypi.org/project/gemini-terminal/
Matched naming pattern: python-gemini-terminal
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 650
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 27/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 97 lines, 3.9 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'gemini-terminal' matches AI hallucination template [python] + [gemini] + [terminal].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 8 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 663d 25 27 ↑0.0/day SUSPICIOUS openai pypi 0.4 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/pythongardenerpersonalpkg
Matched naming pattern: pythongardenerpersonalpkg-openai-api
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 663
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 25/month, 9/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 27 lines, 1.7 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'pythongardenerpersonalpkg-openai-api-key-chatgpt-api-key' matches AI hallucination template [pythongardenerpersonalpkg] + [openai] + [api].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
80 664d 17 23 ↑0.0/day SUSPICIOUS okta pypi 0.4 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/pythongardenerpersonalpkg
Matched naming pattern: pythongardenerpersonalpkg-okta-api
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 664
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 17/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 23 lines, 906 Bytes across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'pythongardenerpersonalpkg-okta-api-key' matches AI hallucination template [pythongardenerpersonalpkg] + [okta] + [api].
  • HIGHClaims critical enterprise brand identity ('OKTA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 144d 0 21 ↑0.0/day SQUATTED_STUB langgraph pypi 0.0.1 Your Name your.email@example.com example.com
Claimed homepage: https://code.byted.org/infra/byted_bytesec_langgraph
Matched naming pattern: byted-langgraph-langgraph
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 144
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 827 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'byted-bytesec-langgraph' matches AI hallucination template [byted] + [langgraph] + [langgraph].
  • HIGHClaims critical enterprise brand identity ('LANGGRAPH').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (143 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 1 file(s), 827 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 144d 0 21 ↑0.0/day SQUATTED_STUB base pypi 0.0.1 Your Name your.email@example.com example.com
Claimed homepage: https://code.byted.org/infra/byted_lumen_video_base
Matched naming pattern: byted-base-video
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 144
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 825 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'byted-lumen-video-base' matches AI hallucination template [byted] + [base] + [video].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (143 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 1 file(s), 825 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 149d 11 0 ↑0.1/day SQUATTED_STUB copilot pypi 0.0.1 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/graph-copilot/
Matched naming pattern: python-copilot-graph
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 149
Registry downloads: 11/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 0 lines, 0 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'graph-copilot' matches AI hallucination template [python] + [copilot] + [graph].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (148 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (0 LOC, 1 file(s), 0 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 168d 17 21 ↑0.1/day SQUATTED_STUB langgraph pypi 0.0.1 Your Name your.email@example.com example.com
Claimed homepage: https://code.byted.org/infra/bytedance_sumy_core_langgraph
Matched naming pattern: bytedance-langgraph-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 168
Registry downloads: 17/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 839 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'bytedance-sumy-core-langgraph' matches AI hallucination template [bytedance] + [langgraph] + [core].
  • HIGHClaims critical enterprise brand identity ('LANGGRAPH').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (167 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 1 file(s), 839 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 170d 17 21 ↑0.1/day SQUATTED_STUB copilot pypi 0.0.1 Your Name your.email@example.com example.com
Claimed homepage: https://code.byted.org/infra/byted_ds_copilot_service
Matched naming pattern: byted-copilot-copilot
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 170
Registry downloads: 17/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 829 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'byted-ds-copilot-service' matches AI hallucination template [byted] + [copilot] + [copilot].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (169 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 1 file(s), 829 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 213d 14 2 ↑0.1/day SQUATTED_STUB claude pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/jupyter-ai-claude-code-experience/
Matched naming pattern: jupyter-claude-claude
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 213
Registry downloads: 14/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2 lines, 76 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'jupyter-ai-claude-code-experience' matches AI hallucination template [jupyter] + [claude] + [claude].
  • HIGHClaims critical enterprise brand identity ('CLAUDE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 212 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (2 LOC, 1 file(s), 76 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 278d 19 21 ↑0.1/day SQUATTED_STUB base pypi 0.0.1 Your Name your.email@example.com example.com
Claimed homepage: https://code.byted.org/infra/bytedance_evals_base
Matched naming pattern: bytedance-base-base
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 278
Registry downloads: 19/month, 8/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 821 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'bytedance-evals-base' matches AI hallucination template [bytedance] + [base] + [base].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 277 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 1 file(s), 821 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 311d 17 21 ↑0.1/day SQUATTED_STUB langgraph pypi 0.0.1 Your Name your.email@example.com example.com
Claimed homepage: https://code.byted.org/infra/bytedance_bytedai_langgraph_adapter
Matched naming pattern: bytedance-langgraph-langgraph
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 311
Registry downloads: 17/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 21 lines, 851 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'bytedance-bytedai-langgraph-adapter' matches AI hallucination template [bytedance] + [langgraph] + [langgraph].
  • HIGHClaims critical enterprise brand identity ('LANGGRAPH').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 310 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (21 LOC, 1 file(s), 851 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 351d 9 4 ↑0.0/day SQUATTED_STUB openai pypi 0.1.0 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/text2memory-openai
Matched naming pattern: python-openai-text2memory
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 351
Registry downloads: 9/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 4 lines, 87 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'text2memory-openai' matches AI hallucination template [python] + [openai] + [text2memory].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage registered 351 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (4 LOC, 1 file(s), 87 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 351d 14 23 ↑0.0/day SQUATTED_STUB openai pypi 0.1.0 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/text2mem-openai
Matched naming pattern: python-openai-text2mem
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 351
Registry downloads: 14/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 23 lines, 744 Bytes across 2 files (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'text2mem-openai' matches AI hallucination template [python] + [openai] + [text2mem].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 350 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (23 LOC, 2 file(s), 744 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
75 567d 12 20 ↑0.0/day SQUATTED_STUB circle pypi 0.1.0 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/circle_area
Matched naming pattern: circle-circle-opamv1
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 567
Registry downloads: 12/month, 3/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 983 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'circle-area-opamv1-8' matches AI hallucination template [circle] + [circle] + [opamv1].
  • HIGHClaims critical enterprise brand identity ('CIRCLE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (20 LOC, 1 file(s), 983 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 490d 0 30 ↑0.0/day SUSPICIOUS cursor pypi 0.7.7 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/cursor-boilerplate/
Matched naming pattern: python-cursor-boilerplate
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 490
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 30 lines, 1.5 kB across 2 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'cursor-boilerplate' matches AI hallucination template [python] + [cursor] + [boilerplate].
  • HIGHClaims critical enterprise brand identity ('CURSOR').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 525d 20 116 ↑0.0/day SUSPICIOUS openai pypi 0.1.0 Serge your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/openai-streamer
Matched naming pattern: python-openai-streamer
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 525
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 20/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 116 lines, 5.1 kB across 4 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'openai-streamer' matches AI hallucination template [python] + [openai] + [streamer].
  • HIGHClaims critical enterprise brand identity ('OPENAI').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 610d 10 154 ↑0.0/day SUSPICIOUS mistral pypi 0.1.0 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/mistral-image-gen
Matched naming pattern: mistral-mistral-gen
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 610
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 10/month, 1/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 154 lines, 7.6 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'mistral-image-gen' matches AI hallucination template [mistral] + [mistral] + [gen].
  • HIGHClaims critical enterprise brand identity ('MISTRAL').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 826d 24 20 ↑0.0/day SQUATTED_STUB llama pypi 0.1.3 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/llama-index-llms-unionllm
Matched naming pattern: llama-llama-llms
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 826
Registry downloads: 24/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 20 lines, 683 Bytes across 1 file (EMPTY_STUB)
Automated signals flagged:
  • MEDIUMPackage name 'llama-index-llms-unionllm' matches AI hallucination template [llama] + [llama] + [llms].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • INFOEstablished pre-AI legacy package registered 824 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • MEDIUMPackage is an empty placeholder (20 LOC, 1 file(s), 683 bytes).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
65 1039d 22 53 ↑0.0/day SUSPICIOUS amazon pypi 1.1.0 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/amazon-scraper-api
Matched naming pattern: amazon-amazon-products
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 1039
Code-only verdict: BENIGN_COMMUNITY (the score above also weighs naming and publisher-domain signals, not just the code itself)
Registry downloads: 22/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 53 lines, 2.2 kB across 1 file (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'amazon-scraper-products-extractor' matches AI hallucination template [amazon] + [amazon] + [products].
  • HIGHClaims critical enterprise brand identity ('AMAZON').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 2 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • INFOEstablished pre-AI legacy package registered 1037 days ago (predates modern AI hallucination waves).
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
21 55d 10 332 ↑0.2/day BENIGN_COMMUNITY sol pypi 1.0.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/sol-interpreter/
Matched naming pattern: python-sol-interpreter
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 55
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 332 lines, 14.9 kB across 1 file (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'sol-interpreter' matches AI hallucination template [python] + [sol] + [interpreter].
  • HIGHClaims critical enterprise brand identity ('SOL').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (53 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
21 106d 11 203 ↑0.1/day BENIGN_COMMUNITY sol pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/sol-ai-core/
Matched naming pattern: sol-sol-core
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 106
Registry downloads: 11/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 203 lines, 9.9 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'sol-ai-core' matches AI hallucination template [sol] + [sol] + [core].
  • HIGHClaims critical enterprise brand identity ('SOL').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (105 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
21 161d 18 95 ↑0.1/day BENIGN_COMMUNITY langchain pypi 1.0.9 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/apexgate-langchain
Matched naming pattern: python-langchain-apexgate
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 161
Registry downloads: 18/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 95 lines, 4.0 kB across 3 files (TINY_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'apexgate-langchain' matches AI hallucination template [python] + [langchain] + [apexgate].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHPackage registered recently (160 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
19 208d 15 209 ↑0.1/day BENIGN_COMMUNITY langchain pypi 0.1.0 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/runpod-langchain
Matched naming pattern: python-langchain-runpod
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 208
Registry downloads: 15/month, 6/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 209 lines, 9.4 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'runpod-langchain' matches AI hallucination template [python] + [langchain] + [runpod].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 208 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
19 239d 14 228 ↑0.1/day BENIGN_COMMUNITY base pypi 0.1.0 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/yourusername/auto-base
Matched naming pattern: python-base-auto
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 239
Registry downloads: 14/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 228 lines, 7.9 kB across 3 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'auto-base' matches AI hallucination template [python] + [base] + [auto].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 237 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
19 239d 10 425 ↑0.0/day BENIGN_COMMUNITY base pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/drf-base/
Matched naming pattern: python-base-drf
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 239
Registry downloads: 10/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 425 lines, 17.5 kB across 9 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'drf-base' matches AI hallucination template [python] + [base] + [drf].
  • HIGHClaims critical enterprise brand identity ('BASE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 237 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
19 253d 0 379 ↑0.0/day BENIGN_COMMUNITY xai pypi 0.1.3.2.6 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/xai-text-classifier/
Matched naming pattern: xai-xai-classifier
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 253
Registry downloads: 0/month, 0/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 379 lines, 19.2 kB across 4 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'xai-text-classifier' matches AI hallucination template [xai] + [xai] + [classifier].
  • HIGHClaims critical enterprise brand identity ('XAI').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 12 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 251 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
19 274d 72 640 ↑0.3/day BENIGN_COMMUNITY copilot pypi 0.2.11 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/adhd-copilot/
Matched naming pattern: python-copilot-adhd
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 274
Registry downloads: 72/month, 30/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 640 lines, 27.8 kB across 6 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'adhd-copilot' matches AI hallucination template [python] + [copilot] + [adhd].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage has empty or near-zero description (potential reservation stub).
  • MEDIUMPackage published 22 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 273 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (640 LOC across 6 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
19 302d 17 379 ↑0.1/day BENIGN_COMMUNITY gemini pypi 0.1.0 Your Name your.email@example.com example.com
Claimed homepage: https://github.com/your-username/gemini-skills-lib
Matched naming pattern: gemini-gemini-lib
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 302
Registry downloads: 17/month, 7/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 379 lines, 17.1 kB across 10 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'gemini-skills-lib' matches AI hallucination template [gemini] + [gemini] + [lib].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 301 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
19 503d 18 1,131 ↑0.0/day BENIGN_COMMUNITY llama pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/llama-proxy/
Matched naming pattern: python-llama-proxy
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 503
Registry downloads: 18/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 1131 lines, 44.6 kB across 8 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-proxy' matches AI hallucination template [python] + [llama] + [proxy].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHSYNTAX_ERROR_IN_llama_proxy-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)
  • HIGHSYNTAX_ERROR_IN_llama_proxy-0.1.0/src/llama_proxy/main.py: invalid syntax (<unknown>, line 52)
  • INFOSubstantial functional codebase (1131 LOC across 8 file(s)).
Static code signals:
  • SYNTAX_ERROR_IN_llama_proxy-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)
  • SYNTAX_ERROR_IN_llama_proxy-0.1.0/src/llama_proxy/main.py: invalid syntax (<unknown>, line 52)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
19 503d 12 2,790 ↑0.0/day BENIGN_COMMUNITY llama pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/llama-metasearch/
Matched naming pattern: python-llama-metasearch
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 503
Registry downloads: 12/month, 2/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2790 lines, 135.3 kB across 8 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'llama-metasearch' matches AI hallucination template [python] + [llama] + [metasearch].
  • HIGHClaims critical enterprise brand identity ('LLAMA').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • HIGHSYNTAX_ERROR_IN_llama_metasearch-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)
  • HIGHSYNTAX_ERROR_IN_llama_metasearch-0.1.0/src/llama_metasearch/metasearch.py: unterminated triple-quoted string literal (detected at line 3635) (<unknown>, line 3629)
  • INFOSubstantial functional codebase (2790 LOC across 8 file(s)).
Static code signals:
  • SYNTAX_ERROR_IN_llama_metasearch-0.1.0/setup.py: unterminated string literal (detected at line 11) (<unknown>, line 11)
  • SYNTAX_ERROR_IN_llama_metasearch-0.1.0/src/llama_metasearch/metasearch.py: unterminated triple-quoted string literal (detected at line 3635) (<unknown>, line 3629)

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
18 180d 17 485 ↑0.1/day BENIGN_COMMUNITY gemini pypi 1.0.0 Jatin your.email@example.com example.com
Claimed homepage: https://github.com/23f2001706/insta
Matched naming pattern: insta-gemini-gemini
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 180
Registry downloads: 17/month, 5/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 485 lines, 22.1 kB across 8 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'insta-bot-gemini' matches AI hallucination template [insta] + [gemini] + [gemini].
  • HIGHClaims critical enterprise brand identity ('GEMINI').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • HIGHPackage registered recently (178 days ago) during the active AI hallucination slopsquatting wave.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
17 292d 981 390 ↑3.4/day BENIGN_COMMUNITY langchain pypi 0.1.1 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/langchain-agent/
Matched naming pattern: python-langchain-agent
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 292
Registry downloads: 981/month, 267/week (MODERATE_USAGE)
Codebase size: 390 lines, 14.9 kB across 11 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'langchain-agent' matches AI hallucination template [python] + [langchain] + [agent].
  • HIGHClaims critical enterprise brand identity ('LANGCHAIN').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 291 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOModerate community usage with 981 monthly downloads.

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 185d 11 628 ↑0.1/day BENIGN_COMMUNITY google pypi 0.1.0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/google-map-leadgen/
Matched naming pattern: google-google-leadgen
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 185
Registry downloads: 11/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 628 lines, 23.7 kB across 9 files (MODERATE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'google-map-leadgen' matches AI hallucination template [google] + [google] + [leadgen].
  • HIGHClaims critical enterprise brand identity ('GOOGLE').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 1 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 183 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (628 LOC across 9 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
16 187d 24 2,597 ↑0.1/day BENIGN_COMMUNITY copilot pypi 0.1.2a0 — your.email@example.com example.com
Claimed homepage: https://pypi.org/project/compliance-copilot/
Matched naming pattern: python-copilot-compliance
Official vendor account: No — publisher domain doesn't match the brand it names
Days since publish: 187
Registry downloads: 24/month, 4/week (NEGLIGIBLE_OR_ZERO_USAGE)
Codebase size: 2597 lines, 109.9 kB across 39 files (LARGE_CODEBASE)
Automated signals flagged:
  • MEDIUMPackage name 'compliance-copilot' matches AI hallucination template [python] + [copilot] + [compliance].
  • HIGHClaims critical enterprise brand identity ('COPILOT').
  • HIGHPublisher email 'your.email@example.com' is not affiliated with official vendor domain.
  • MEDIUMPackage published 3 versions in rapid succession (< 24h) to mimic mature open source maintenance.
  • MEDIUMPackage registered 186 days ago within the 1-year AI tool proliferation window.
  • INFONo malicious install-time hooks or shell cradles detected in package AST.
  • INFOSubstantial functional codebase (2597 LOC across 39 file(s)).

Signals reflect what our detector observed, not a confirmed determination of wrongdoing.

View package on PyPI →
Next »
LINK COPIED TO CLIPBOARD