| Package | Version | Risk Score | Verdict | Published ↓ | Checks Triggered |
|---|---|---|---|---|---|
| Aerosol3D | 0.9.0 |
4.0
|
suspicious | 05 Jun 2026 | Code ObfuscationShell / Subprocess ExecutionMaintainer History |
| pinky-tools | 0.1.0.dev1 |
4.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |
| agentic-mcp-gateway | 0.1.0 |
6.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsShell / Subprocess ExecutionSuspicious Page LinksMaintainer History |
| temporal-parseable | 0.1.0 |
4.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |
| qubiz-game-sdk | 0.1.0 |
5.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| opensignalbox-macro | 0.1.0 |
5.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsGit Repository HistoryMaintainer History |
| opensignalbox-interface | 0.1.0 |
4.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |
| wottys-test | 0.1.0 |
4.0
|
suspicious | 05 Jun 2026 | Shell / Subprocess ExecutionSuspicious Page LinksGit Repository HistoryMaintainer History |
| opensignalbox-common | 0.1.0 |
6.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsShell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| opensignalbox | 0.1.1 |
6.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsShell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| prbs-eos | 0.1.0 |
4.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |
| AutoSQUID | 0.1.3 |
4.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |
| trigix-node-sdk | 0.1.0 |
4.0
|
suspicious | 05 Jun 2026 | Suspicious Page LinksGit Repository HistoryMaintainer History |
| dynamic-skill-compiler | 0.1.1 |
4.0
|
suspicious | 05 Jun 2026 | Credential HarvestingMaintainer History |
| hirebase | 0.1.1 |
4.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsGit Repository HistoryMaintainer History |
| testy-pytest-adapter | 1.0.0 |
6.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsGit Repository HistoryMaintainer History |
| ghost-reader | 0.1.0 |
6.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsCredential HarvestingGit Repository HistoryMaintainer History |
| collector-phone-android-contract | 1.0.0 |
4.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |
| torch-proj-r03 | 1.0.0 |
6.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| usecix | 1.0.6 |
6.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsShell / Subprocess ExecutionCredential HarvestingMaintainer History |
| sentraguard-sdk | 0.1.0 |
5.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsGit Repository HistoryMaintainer History |
| Vortiq | 0.1.0 |
5.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| xiaoguai | 1.10.5 |
4.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |
| plivo-mirror-v5 | 0.5.0 |
4.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsGit Repository HistoryMaintainer History |
| rtl-buddy-view | 0.2.1 |
4.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| llama-index-llms-thalam | 0.1.0 |
4.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |
| silasyn-uid | 1.0.0 |
5.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsMaintainer History |
| ws-scout | 0.1.0 |
5.0
|
suspicious | 05 Jun 2026 | Shell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| agt_sandbox | 4.0.1 |
6.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionCredential Harvesting+1 |
| alab-cli | 0.1.5 |
6.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsShell / Subprocess ExecutionCredential HarvestingGit Repository History+1 |
| bg-vanish-mcp | 0.1.0 |
6.0
|
suspicious | 05 Jun 2026 | Code ObfuscationMaintainer History |
| tinytasktree | 0.1.6 |
5.0
|
suspicious | 05 Jun 2026 | Code ObfuscationShell / Subprocess ExecutionSuspicious Page LinksMaintainer History |
| gcf-proxy | 0.1.0 |
5.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |
| agentic-qa | 0.1.0 |
4.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsGit Repository HistoryMaintainer History |
| aikosh | 1.1.0 |
6.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsMaintainer History |
| stegmark | 1.0.3 |
5.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsCode ObfuscationGit Repository HistoryMaintainer History |
| aidd-kos | 0.2.1 |
6.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsShell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| playwright-smart-locators | 0.1.0 |
4.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsMaintainer History |
| aiir | 1.6.0 |
4.0
|
suspicious | 05 Jun 2026 | Code ObfuscationShell / Subprocess ExecutionCredential HarvestingMaintainer History |
| msra-codegen | 0.1.0 |
4.0
|
suspicious | 05 Jun 2026 | Shell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| cryptoshield | 0.2.2 |
5.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsGit Repository HistoryMaintainer History |
| helius-api | 1.0.0 |
4.0
|
suspicious | 05 Jun 2026 | Outbound Network CallsMaintainer History |
| devfabeco-buildcore | 0.3.0 |
6.0
|
suspicious | 05 Jun 2026 | Shell / Subprocess ExecutionCredential HarvestingGit Repository HistoryMaintainer History |
| devfabeco-graph | 0.4.0 |
6.0
|
suspicious | 05 Jun 2026 | Shell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| devfabeco-envcapsule | 0.3.0 |
4.0
|
suspicious | 05 Jun 2026 | Shell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| devfabeco-library | 0.3.0 |
4.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |
| DataComparerLibrary | 0.860 |
4.0
|
suspicious | 05 Jun 2026 | Maintainer History |
| zed-context-manipulator | 1.0.0 |
4.0
|
suspicious | 05 Jun 2026 | Shell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| ikkToolKit | 0.0.0 |
5.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |
| my-package-tanakit | 0.1.0 |
6.0
|
suspicious | 05 Jun 2026 | Git Repository HistoryMaintainer History |