Browse Scanned Packages
Real-time feed of parsed packages with malware warnings and risk evaluations.
| Package | Version | Risk Score | Verdict | Published ↓ | Checks Triggered |
|---|---|---|---|---|---|
| aws-resource-validator-account | 2.0.3 |
4.0
|
suspicious | 07 May 2026 | Maintainer History |
| aws-resource-validator-accessanalyzer | 2.0.3 |
4.0
|
suspicious | 07 May 2026 | Maintainer History |
| apppack-stats | 0.6.0 |
5.0
|
suspicious | 07 May 2026 | Shell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| arcanna-mcp-server | 0.1.36 |
3.0
|
suspicious | 07 May 2026 | Outbound Network CallsMaintainer History |
| adjeff | 0.6.0 |
7.0
|
suspicious | 07 May 2026 | Code ObfuscationGit Repository HistoryMaintainer History |
| article-learning | 0.3.0 |
6.0
|
suspicious | 07 May 2026 | Git Repository HistoryMaintainer History |
| Flask-Admin | 2.2.0 |
4.0
|
suspicious | 07 May 2026 | Code ObfuscationMaintainer History |
| awx-zipline-ai | 0.4.9 |
6.0
|
suspicious | 07 May 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionCredential Harvesting+1 |
| alibabacloud-gateway-oss | 0.0.27 |
4.0
|
suspicious | 07 May 2026 | Code ObfuscationMaintainer History |
| alibabacloud-gateway-oss-util | 0.0.13 |
4.0
|
suspicious | 07 May 2026 | Code ObfuscationMaintainer History |
| aicode-verify | 0.2.0 |
6.0
|
suspicious | 07 May 2026 | Code ObfuscationShell / Subprocess ExecutionMaintainer History |
| LFPy | 2.3.7 |
4.0
|
suspicious | 07 May 2026 | Code ObfuscationShell / Subprocess ExecutionTyposquattingSuspicious Page Links+1 |
| autoclaude-cli | 2.8.5 |
6.0
|
suspicious | 07 May 2026 | Outbound Network CallsShell / Subprocess ExecutionCredential HarvestingMaintainer History |
| agentid-protocol | 0.3.0 |
5.0
|
suspicious | 07 May 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionMaintainer History |
| astrapeum | 0.1.0 |
4.0
|
suspicious | 07 May 2026 | Maintainer History |
| RUOXIANZHI | 1.0.0 |
5.0
|
suspicious | 07 May 2026 | Git Repository HistoryMaintainer History |
| XINGZIER | 1.0.0 |
4.0
|
suspicious | 07 May 2026 | Git Repository HistoryMaintainer History |
| XINGYAN | 1.0.0 |
4.0
|
suspicious | 07 May 2026 | Git Repository HistoryMaintainer History |
| autocom | 1.2.2 |
6.0
|
suspicious | 07 May 2026 | Outbound Network CallsCode ObfuscationMaintainer History |
| aurexcode2 | 0.1.1 |
4.0
|
suspicious | 07 May 2026 | Outbound Network CallsShell / Subprocess ExecutionMaintainer History |
| adtext | 1.0.0 |
6.0
|
suspicious | 07 May 2026 | Outbound Network CallsCode ObfuscationGit Repository HistoryMaintainer History |
| anibridge-anilist-provider | 0.2.2 |
4.0
|
suspicious | 07 May 2026 | Outbound Network CallsMaintainer History |
| anibridge-jellyfin-provider | 0.2.3 |
4.0
|
suspicious | 07 May 2026 | Maintainer History |
| arkiv-sdk | 1.0.0b3.dev0 |
4.0
|
suspicious | 07 May 2026 | Outbound Network CallsCredential HarvestingMaintainer History |
| axion-hdl | 1.5.1 |
7.0
|
suspicious | 07 May 2026 | Outbound Network CallsShell / Subprocess ExecutionMaintainer History |
| aio-sensorthings | 0.1.0 |
4.0
|
suspicious | 07 May 2026 | Outbound Network CallsCode ObfuscationRegistered Email DomainMaintainer History |
| aeroengine-fatigue-life | 1.0.0 |
4.0
|
suspicious | 07 May 2026 | Code ObfuscationGit Repository HistoryMaintainer History |
| SIMPApy | 1.1.3 |
4.0
|
suspicious | 07 May 2026 | Maintainer History |
| arabic-web-transpiler | 0.2.0 |
4.0
|
suspicious | 07 May 2026 | Shell / Subprocess ExecutionMaintainer History |
| asset-allocation-runtime-common | 3.7.4 |
5.0
|
suspicious | 07 May 2026 | Outbound Network CallsMaintainer History |
| ansys-workbench-core | 0.14.0 |
5.0
|
suspicious | 07 May 2026 | Outbound Network CallsShell / Subprocess ExecutionMaintainer History |
| aspice-eval | 0.2.4 |
5.0
|
suspicious | 07 May 2026 | Credential HarvestingMaintainer History |
| agent-foundry-local | 0.1.10 |
6.0
|
suspicious | 07 May 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionGit Repository History+1 |
| agentmemory-openai | 0.1.0 |
4.0
|
suspicious | 07 May 2026 | Outbound Network CallsGit Repository HistoryMaintainer History |
| NEExT | 0.2.13 |
4.0
|
suspicious | 07 May 2026 | Code ObfuscationMaintainer History |
| ansible-know-mcp | 0.1.0 |
6.0
|
suspicious | 07 May 2026 | Outbound Network CallsShell / Subprocess ExecutionCredential HarvestingGit Repository History+1 |
| autestoy | 0.1.5 |
6.0
|
suspicious | 07 May 2026 | Shell / Subprocess ExecutionMaintainer History |
| agent-cli-dispatcher | 0.1.0 |
4.0
|
suspicious | 07 May 2026 | Shell / Subprocess ExecutionMaintainer History |
| a-a-chat-cli | 0.1.1 |
6.0
|
suspicious | 07 May 2026 | Outbound Network CallsCode ObfuscationSuspicious Page LinksGit Repository History+1 |
| MacroSignage | 0.2.5 |
4.0
|
suspicious | 07 May 2026 | Shell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| alibabacloud-cams20200606 | 5.1.1 |
4.0
|
suspicious | 07 May 2026 | Code ObfuscationSuspicious Page LinksMaintainer History |
| WuttaWeb | 0.30.3 |
5.0
|
suspicious | 07 May 2026 | Shell / Subprocess ExecutionMaintainer History |
| azure-mgmt-confidentialledger | 1.0.1 |
4.0
|
suspicious | 07 May 2026 | Code ObfuscationMaintainer History |
| aria-openai-agents | 1.9.5.15 |
4.0
|
suspicious | 07 May 2026 | Git Repository HistoryMaintainer History |
| aria-cx-mcp | 1.9.5.post3 |
6.0
|
suspicious | 07 May 2026 | Outbound Network CallsCredential HarvestingGit Repository HistoryMaintainer History |
| autodial | 0.7.2 |
5.0
|
suspicious | 07 May 2026 | Outbound Network CallsCode ObfuscationGit Repository HistoryMaintainer History |
| aegis-ledger-sdk | 0.4.1 |
5.0
|
suspicious | 07 May 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionMaintainer History |
| Mathics3-Scanner | 10.0.1 |
4.0
|
suspicious | 07 May 2026 | Shell / Subprocess ExecutionCredential HarvestingMaintainer History |
| Python-3xui | 0.0.13.post2 |
4.0
|
suspicious | 07 May 2026 | Outbound Network CallsGit Repository HistoryMaintainer History |
| ai-lls-lib | 3.13.1 |
6.0
|
suspicious | 07 May 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionCredential Harvesting+1 |