| Package | Version | Risk Score | Verdict | Published ↓ | Checks Triggered |
|---|---|---|---|---|---|
| SAMBA-ilum-mag | 1.0.0.126 |
5.0
|
suspicious | 04 Jun 2026 | Outbound Network CallsShell / Subprocess ExecutionMaintainer History |
| ai-track | 0.6.1 |
4.0
|
suspicious | 04 Jun 2026 | Code ObfuscationShell / Subprocess ExecutionMaintainer History |
| agent-webui | 0.36.0 |
5.0
|
suspicious | 04 Jun 2026 | Maintainer History |
| accrete | 0.1.11 |
4.0
|
suspicious | 04 Jun 2026 | Registered Email DomainMaintainer History |
| agent-terminal-ui | 0.12.0 |
7.0
|
suspicious | 04 Jun 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionCredential Harvesting+1 |
| ai-code-review | 4.1.0 |
4.0
|
suspicious | 04 Jun 2026 | Outbound Network CallsCredential HarvestingMaintainer History |
| ai-cr | 4.1.0 |
4.0
|
suspicious | 04 Jun 2026 | Outbound Network CallsCredential HarvestingMaintainer History |
| apidepth | 0.4.1 |
8.0
|
suspicious | 04 Jun 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionCredential Harvesting+2 |
| AynOps | 1.1.0 |
5.0
|
suspicious | 04 Jun 2026 | Maintainer History |
| ai-microcore | 6.2.1 |
5.0
|
suspicious | 04 Jun 2026 | Code ObfuscationShell / Subprocess ExecutionMaintainer History |
| TgCryptoRust | 1.1.2 |
5.0
|
suspicious | 04 Jun 2026 | Git Repository HistoryMaintainer History |
| agentverse-sdk | 0.1.0 |
6.0
|
suspicious | 04 Jun 2026 | Outbound Network CallsCode ObfuscationMaintainer History |
| agentroom | 0.2.5 |
6.0
|
suspicious | 04 Jun 2026 | Outbound Network CallsShell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| ai-agent-framework-proteccion | 1.1.14 |
5.0
|
suspicious | 04 Jun 2026 | Maintainer History |
| WebAppDIRAC | 6.0.4 |
5.0
|
suspicious | 04 Jun 2026 | Code ObfuscationMaintainer History |
| aider-ce | 0.100.4 |
4.0
|
suspicious | 04 Jun 2026 | Code ObfuscationShell / Subprocess ExecutionMaintainer History |
| antchain-saas-security | 1.0.28 |
5.0
|
suspicious | 04 Jun 2026 | Code ObfuscationSuspicious Page LinksMaintainer History |
| agentvuln | 0.2.2 |
7.0
|
suspicious | 04 Jun 2026 | Shell / Subprocess ExecutionCredential HarvestingGit Repository HistoryMaintainer History |
| NEMO-sensors | 1.2.1 |
4.0
|
suspicious | 04 Jun 2026 | Maintainer History |
| SPPPPGNet | 0.1.2 |
4.0
|
suspicious | 04 Jun 2026 | Maintainer History |
| aniworld | 4.4.2 |
6.0
|
suspicious | 04 Jun 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionMaintainer History |
| ant-ai | 1.4.0 |
4.0
|
suspicious | 04 Jun 2026 | Shell / Subprocess ExecutionCredential HarvestingMaintainer History |
| TextColorDisplay | 1.0.6 |
5.0
|
suspicious | 04 Jun 2026 | Maintainer History |
| agentcage | 0.22.21 |
6.0
|
suspicious | 04 Jun 2026 | Outbound Network CallsShell / Subprocess ExecutionCredential HarvestingMaintainer History |
| GNServer | 0.0.217 |
5.0
|
suspicious | 04 Jun 2026 | Git Repository HistoryMaintainer History |
| LDTk | 1.8.6 |
5.0
|
suspicious | 04 Jun 2026 | TyposquattingMaintainer History |
| LabQuizBundle | 1.1.1 |
4.0
|
suspicious | 04 Jun 2026 | Maintainer History |
| Micron2HTML | 1.0.8 |
4.0
|
suspicious | 04 Jun 2026 | Suspicious Page LinksGit Repository HistoryMaintainer History |
| PyFLASH-analysis | 0.1.4 |
5.0
|
suspicious | 04 Jun 2026 | Shell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| HInt-ppi | 0.6.7 |
5.0
|
suspicious | 04 Jun 2026 | Outbound Network CallsShell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| adscan | 9.1.0 |
5.0
|
suspicious | 04 Jun 2026 | Outbound Network CallsShell / Subprocess ExecutionMaintainer History |
| agent-dispatch | 0.6.0 |
7.0
|
suspicious | 04 Jun 2026 | Shell / Subprocess ExecutionCredential HarvestingMaintainer History |
| SQaLe | 0.1.5 |
4.0
|
suspicious | 04 Jun 2026 | Shell / Subprocess ExecutionMaintainer History |
| airfoilgmesher | 0.10.2 |
4.0
|
suspicious | 04 Jun 2026 | Git Repository HistoryMaintainer History |
| airflow-provider-google-sheets | 0.9.1 |
4.0
|
suspicious | 04 Jun 2026 | Git Repository HistoryMaintainer History |
| ansys-optislang-core | 1.5.0 |
4.0
|
suspicious | 04 Jun 2026 | Shell / Subprocess ExecutionMaintainer History |
| alibabacloud.mcp-proxy | 0.2.6 |
5.0
|
suspicious | 04 Jun 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionMaintainer History |
| Sample-test-lib | 0.1.0 |
4.0
|
suspicious | 04 Jun 2026 | Maintainer History |
| FamacasePytest | 0.1.4 |
6.0
|
suspicious | 04 Jun 2026 | Outbound Network CallsCode ObfuscationGit Repository HistoryMaintainer History |
| aiohomematic-test-support | 2026.6.0 |
4.0
|
suspicious | 04 Jun 2026 | Maintainer History |
| agloom | 0.1.93 |
6.0
|
suspicious | 04 Jun 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionGit Repository History+1 |
| aa-corptools-dashboard | 0.0.2 |
4.0
|
suspicious | 04 Jun 2026 | Git Repository HistoryMaintainer History |
| FourCIPP | 1.113.0 |
4.0
|
suspicious | 04 Jun 2026 | Shell / Subprocess ExecutionMaintainer History |
| DynamicAdaptor | 0.6.0 |
4.0
|
suspicious | 04 Jun 2026 | Maintainer History |
| aether-robotics | 3.4.3 |
6.0
|
suspicious | 04 Jun 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionCredential Harvesting+2 |
| akosha | 0.8.2 |
4.0
|
suspicious | 04 Jun 2026 | Outbound Network CallsMaintainer History |
| alobj2shp | 0.2.0 |
4.0
|
suspicious | 04 Jun 2026 | Maintainer History |
| anthropic-haystack | 5.10.0 |
4.0
|
suspicious | 04 Jun 2026 | Maintainer History |
| ai-toolkit-cli | 1.1.2 |
4.0
|
suspicious | 04 Jun 2026 | Shell / Subprocess ExecutionMaintainer History |
| GeneVue | 0.0.9 |
4.0
|
suspicious | 04 Jun 2026 | Outbound Network CallsShell / Subprocess ExecutionMaintainer History |