| Package | Version | Risk Score | Verdict | Published ↓ | Checks Triggered |
|---|---|---|---|---|---|
| agile | 0.1.20 |
4.0
|
suspicious | 05 Jun 2026 | Shell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| shahama-door-design-test-2026 | 0.0.1 |
5.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| tcl-ls | 0.2.1 |
7.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsShell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| nltfile | 1.0.30 |
4.0
|
suspicious | 05 Jun 2026 | Registered Email DomainGit Repository HistoryMaintainer History |
| astrum | 0.1.0 |
4.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |
| tealtiger-haystack | 0.1.0 |
4.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| Algomancy | 0.8.2 |
4.0
|
suspicious | 05 Jun 2026 | Suspicious Page LinksGit Repository HistoryMaintainer History |
| nova-2d | 0.1.0 |
6.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| findesk-ffd-mcp | 0.6.9 |
6.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsShell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| agenticli | 0.2.5 |
6.0
|
suspicious | 05 Jun 2026 | Code ObfuscationShell / Subprocess ExecutionMaintainer History |
| bertforquestionanswering | 0.1.0 |
6.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| okxweb3-app-paymentrouter | 0.1.0 |
6.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| okxweb3-app-mpp | 0.1.0 |
6.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsCredential HarvestingMaintainer History |
| nova2d-danywka | 0.1.0 |
5.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| tlabel | 0.1.0a1 |
6.0
|
suspicious | 05 Jun 2026 | TyposquattingGit Repository HistoryMaintainer History |
| OSBModelValidation | 0.4.0 |
5.0
|
suspicious | 05 Jun 2026 | Shell / Subprocess ExecutionSuspicious Page LinksMaintainer History |
| pylhb4qrcode | 1.0.0 |
4.0
|
suspicious | 05 Jun 2026 | Registered Email DomainGit Repository HistoryMaintainer History |
| vega-lite | 0.1.0 |
6.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| coding-with-git | 0.0.1 |
4.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| okxweb3-app-x402 | 0.1.0 |
6.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsCode ObfuscationMaintainer History |
| mbltml | 0.0.0 |
4.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| rubam | 0.3.12 |
5.0
|
suspicious | 05 Jun 2026 | Shell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| tzla | 0.1.0 |
4.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsGit Repository HistoryMaintainer History |
| CheeseAPI | 2.0.6 |
5.0
|
suspicious | 05 Jun 2026 | Code ObfuscationMaintainer History |
| Tracelit-SDK | 0.1.4 |
5.0
|
suspicious | 05 Jun 2026 | Code ObfuscationMaintainer History |
| aws-cloudwatch | 0.1.0 |
6.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| nopaddle | 0.1.0 |
5.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsSuspicious Page LinksGit Repository HistoryMaintainer History |
| natilah-smre | 0.1.0 |
7.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsCode ObfuscationGit Repository HistoryMaintainer History |
| captureoutput | 0.1.0 |
5.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| skill-weave | 0.3.0 |
4.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |
| riftbound-scraper | 1.0.0 |
4.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsMaintainer History |
| olw-protocol | 1.0.0 |
6.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsGit Repository HistoryMaintainer History |
| tianjian-api | 0.1.0 |
4.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsSuspicious Page LinksMaintainer History |
| cwg | 0.1.0 |
6.0
|
suspicious | 05 Jun 2026 | Code ObfuscationTyposquattingMaintainer History |
| ai4pa_opencode_sdk | 0.17.0 |
4.0
|
suspicious | 05 Jun 2026 | Suspicious Page LinksMaintainer History |
| llama-index-llms-duel | 0.1.0 |
4.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| langchain-duel | 0.1.0 |
4.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| parseet | 0.2.0 |
6.0
|
suspicious | 05 Jun 2026 | Code ObfuscationMaintainer History |
| dialectica | 0.3.1 |
4.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| luanti_cli | 2.0.4 |
5.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| pylhb-qrcode | 1.0.0 |
5.0
|
suspicious | 05 Jun 2026 | Registered Email DomainGit Repository HistoryMaintainer History |
| ai302 | 1.0.0 |
5.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionMaintainer History |
| pydalec | 0.1.0 |
6.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |
| taiwan-payroll | 1.0.0 |
4.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |
| PyGeoFetch | 0.1.4 |
6.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsCode ObfuscationCredential HarvestingGit Repository History+1 |
| ripple-impact-mcp | 1.1.0 |
5.0
|
suspicious | 05 Jun 2026 | Shell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| nyra | 0.1.0 |
4.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsMaintainer History |
| clitag | 1.0.0 |
4.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |
| goldenmatch-embed | 0.1.0 |
5.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |
| AOT-biomaps | 2.9.731 |
5.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionGit Repository History+1 |