| Package | Version | Risk Score | Verdict | Published ↓ | Checks Triggered |
|---|---|---|---|---|---|
| ChurchSong | 0.11.4 |
5.0
|
suspicious | 31 May 2026 | Outbound Network CallsShell / Subprocess ExecutionMaintainer History |
| HubBasePE | 0.0.2.0.0.2 |
5.0
|
suspicious | 31 May 2026 | Code ObfuscationMaintainer History |
| ErisPulse-CYOA | 1.1.3 |
4.0
|
suspicious | 31 May 2026 | Outbound Network CallsRegistered Email DomainGit Repository HistoryMaintainer History |
| Azmir | 0.1 |
4.0
|
suspicious | 31 May 2026 | Maintainer History |
| HedgeTech | 0.2.5 |
4.0
|
suspicious | 31 May 2026 | Maintainer History |
| MDOFModel | 0.8.1 |
4.0
|
suspicious | 31 May 2026 | Maintainer History |
| CalculusCalculator | 1.4.4 |
5.0
|
suspicious | 31 May 2026 | Code ObfuscationMaintainer History |
| BenchMatcha | 0.0.2 |
4.0
|
suspicious | 31 May 2026 | Shell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| ASHReports | 0.2.6 |
4.0
|
suspicious | 30 May 2026 | Maintainer History |
| ASHC-v3 | 5.2026.1 |
4.0
|
suspicious | 30 May 2026 | Maintainer History |
| JMOT | 0.3a1.dev3 |
6.0
|
suspicious | 30 May 2026 | Code ObfuscationShell / Subprocess ExecutionTyposquattingRegistered Email Domain+1 |
| AstrBot | 4.25.2 |
4.0
|
suspicious | 30 May 2026 | Outbound Network CallsCode ObfuscationMaintainer History |
| Beaker | 1.14.1 |
6.0
|
suspicious | 30 May 2026 | Code ObfuscationTyposquattingMaintainer HistoryKnown CVE Vulnerabilities |
| CosmoSim | 2.9.0 |
4.0
|
suspicious | 30 May 2026 | Maintainer History |
| MARKET-TRADING-HOURS | 80.80.80 |
6.0
|
suspicious | 30 May 2026 | Shell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| JSONL-LOGGER | 80.80.80 |
4.0
|
suspicious | 30 May 2026 | Shell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| ENCRYPTION-SERVICE | 80.80.80 |
6.0
|
suspicious | 30 May 2026 | Code ObfuscationShell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| ErisPulse-MyServer | 1.0.0 |
6.0
|
suspicious | 30 May 2026 | Registered Email DomainGit Repository HistoryMaintainer History |
| MLRadar | 1.0.1 |
6.0
|
suspicious | 30 May 2026 | Git Repository HistoryMaintainer History |
| Fileseq | 3.2.0 |
5.0
|
suspicious | 30 May 2026 | Code ObfuscationShell / Subprocess ExecutionMaintainer History |
| Encryptors | 2.49 |
6.0
|
suspicious | 30 May 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionMaintainer History |
| FastWARC | 1.0.3 |
5.0
|
suspicious | 29 May 2026 | Outbound Network CallsCredential HarvestingMaintainer History |
| DashAI | 0.9.4 |
5.0
|
suspicious | 29 May 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionMaintainer History |
| ATACofthesnake | 0.13.0 |
5.0
|
suspicious | 29 May 2026 | Outbound Network CallsShell / Subprocess ExecutionMaintainer History |
| ColorTransferLib | 2.2.0 |
4.0
|
suspicious | 29 May 2026 | Code ObfuscationShell / Subprocess ExecutionSuspicious Page LinksMaintainer History |
| HyperCoast | 0.27.0 |
6.0
|
suspicious | 29 May 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionSuspicious Page Links+1 |
| LoadsKernel | 2026.5 |
6.0
|
suspicious | 29 May 2026 | Code ObfuscationShell / Subprocess ExecutionMaintainer History |
| LbNightlyTools | 4.0.22 |
6.0
|
suspicious | 29 May 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionMaintainer History |
| Microns-Combiner | 0.3.1 |
4.0
|
suspicious | 29 May 2026 | Outbound Network CallsSuspicious Page LinksMaintainer History |
| Microns-DataCleaner | 0.2.2 |
4.0
|
suspicious | 29 May 2026 | Maintainer History |
| CosmoDJ | 0.0.1 |
4.0
|
suspicious | 29 May 2026 | Git Repository HistoryMaintainer History |
| KunQuant-MLIR | 0.1.11.20260529 |
4.0
|
suspicious | 29 May 2026 | Maintainer History |
| DeepGPR | 0.0.12 |
5.0
|
suspicious | 29 May 2026 | Maintainer History |
| BwETAF | 0.7.3 |
3.0
|
suspicious | 29 May 2026 | Maintainer History |
| KohakuTerrarium | 2.0.0 |
5.0
|
suspicious | 29 May 2026 | Code ObfuscationMaintainer History |
| AIUT-RLToolbox | 0.0.0.1 |
5.0
|
suspicious | 29 May 2026 | Git Repository HistoryMaintainer History |
| HexBug-data | 2.10.0 |
4.0
|
suspicious | 29 May 2026 | Maintainer History |
| Dojical | 1.0.0 |
7.0
|
suspicious | 29 May 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionMaintainer History |
| LLM-Bridge | 2.0.7 |
4.0
|
suspicious | 29 May 2026 | Outbound Network CallsMaintainer History |
| Geode-Explicit-Geosciences | 1.0.5 |
5.0
|
suspicious | 29 May 2026 | Maintainer History |
| DQRbuild | 0.3.0 |
4.0
|
suspicious | 28 May 2026 | Shell / Subprocess ExecutionMaintainer History |
| CreateCloudMap | 0.99.2 |
5.0
|
suspicious | 28 May 2026 | Outbound Network CallsShell / Subprocess ExecutionMaintainer History |
| GridPath | 2026.3.0 |
6.0
|
suspicious | 28 May 2026 | Outbound Network CallsShell / Subprocess ExecutionMaintainer History |
| Flask-Celery-Tools | 1.6.2 |
4.0
|
suspicious | 28 May 2026 | Suspicious Page LinksMaintainer History |
| DQRAlert | 0.5.0 |
4.0
|
suspicious | 28 May 2026 | Maintainer History |
| AIUT-Environments | 0.0.0.1 |
5.0
|
suspicious | 28 May 2026 | Git Repository HistoryMaintainer History |
| DocAut-Padronizado | 0.1.3 |
6.0
|
suspicious | 28 May 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionGit Repository History+1 |
| DemonzJwt | 1.1.0 |
4.0
|
suspicious | 28 May 2026 | Outbound Network CallsMaintainer History |
| KratosSystemIdentificationApplication | 10.4.2 |
4.0
|
suspicious | 28 May 2026 | Maintainer History |
| KratosShapeOptimizationApplication | 10.4.2 |
4.0
|
suspicious | 28 May 2026 | Maintainer History |