| Package | Version | Risk Score | Verdict | Published ↓ | Checks Triggered |
|---|---|---|---|---|---|
| GenAIRR | 2.2.0 |
5.0
|
suspicious | 02 Jun 2026 | Code ObfuscationMaintainer History |
| DSGRN | 1.10.0 |
4.0
|
suspicious | 02 Jun 2026 | Maintainer History |
| FindMy | 0.10.1 |
6.0
|
suspicious | 01 Jun 2026 | Code ObfuscationShell / Subprocess ExecutionSuspicious Page LinksMaintainer History |
| DarkBridge | 0.1.0.dev0 |
6.0
|
suspicious | 01 Jun 2026 | Code ObfuscationGit Repository HistoryMaintainer History |
| BiomedicalAISystem | 2026.5.0 |
4.0
|
suspicious | 01 Jun 2026 | Outbound Network CallsCode ObfuscationMaintainer History |
| AsyncPayments | 1.5.1 |
4.0
|
suspicious | 01 Jun 2026 | Code ObfuscationMaintainer History |
| DataSure | 0.8.0 |
5.0
|
suspicious | 01 Jun 2026 | Outbound Network CallsCredential HarvestingGit Repository HistoryMaintainer History |
| DiscordScraper | 1.0.22 |
5.0
|
suspicious | 01 Jun 2026 | Registered Email DomainMaintainer History |
| CAPEsolo | 0.5.20 |
6.0
|
suspicious | 01 Jun 2026 | Code ObfuscationShell / Subprocess ExecutionMaintainer History |
| AtomsPlotter | 0.3.3 |
5.0
|
suspicious | 01 Jun 2026 | Maintainer History |
| CosmoTech-Acceleration-Library | 2.3.0 |
4.0
|
suspicious | 01 Jun 2026 | Maintainer History |
| DiyUI | 0.1.21 |
4.0
|
suspicious | 01 Jun 2026 | Maintainer History |
| 1bcoder | 0.1.16 |
4.0
|
suspicious | 01 Jun 2026 | Suspicious Page LinksMaintainer History |
| Flask-Turnstile | 0.2.0 |
4.0
|
suspicious | 01 Jun 2026 | Outbound Network CallsMaintainer History |
| HowdenLLM | 3.1.1 |
4.0
|
suspicious | 01 Jun 2026 | Git Repository HistoryMaintainer History |
| 3DGS | 0.0.1 |
3.0
|
suspicious | 01 Jun 2026 | Git Repository HistoryMaintainer History |
| 227checkergenerator | 1.0.1 |
4.0
|
suspicious | 01 Jun 2026 | Git Repository HistoryMaintainer History |
| BeatBoard | 0.1.3 |
5.0
|
suspicious | 31 May 2026 | Code ObfuscationShell / Subprocess ExecutionMaintainer History |
| CFEDemands | 0.9.0 |
6.0
|
suspicious | 31 May 2026 | Code ObfuscationGit Repository HistoryMaintainer History |
| ConfDex | 0.1.0 |
5.0
|
suspicious | 31 May 2026 | Outbound Network CallsCode ObfuscationMaintainer History |
| DeepMIMO | 4.0.2 |
4.0
|
suspicious | 31 May 2026 | Outbound Network CallsMaintainer History |
| AndroidTelePorter | 1.2.0 |
4.0
|
suspicious | 31 May 2026 | Code ObfuscationMaintainer History |
| AgentBlaster | 0.0.0 |
4.0
|
suspicious | 31 May 2026 | Maintainer History |
| DeepRead.Monkai | 4.1.2 |
4.0
|
suspicious | 31 May 2026 | Git Repository HistoryMaintainer History |
| ChurchSong | 0.11.4 |
5.0
|
suspicious | 31 May 2026 | Outbound Network CallsShell / Subprocess ExecutionMaintainer History |
| HubBasePE | 0.0.2.0.0.2 |
5.0
|
suspicious | 31 May 2026 | Code ObfuscationMaintainer History |
| ErisPulse-CYOA | 1.1.3 |
4.0
|
suspicious | 31 May 2026 | Outbound Network CallsRegistered Email DomainGit Repository HistoryMaintainer History |
| Azmir | 0.1 |
4.0
|
suspicious | 31 May 2026 | Maintainer History |
| HedgeTech | 0.2.5 |
4.0
|
suspicious | 31 May 2026 | Maintainer History |
| CalculusCalculator | 1.4.4 |
5.0
|
suspicious | 31 May 2026 | Code ObfuscationMaintainer History |
| BenchMatcha | 0.0.2 |
4.0
|
suspicious | 31 May 2026 | Shell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| ASHReports | 0.2.6 |
4.0
|
suspicious | 30 May 2026 | Maintainer History |
| ASHC-v3 | 5.2026.1 |
4.0
|
suspicious | 30 May 2026 | Maintainer History |
| JMOT | 0.3a1.dev3 |
6.0
|
suspicious | 30 May 2026 | Code ObfuscationShell / Subprocess ExecutionTyposquattingRegistered Email Domain+1 |
| AstrBot | 4.25.2 |
4.0
|
suspicious | 30 May 2026 | Outbound Network CallsCode ObfuscationMaintainer History |
| Beaker | 1.14.1 |
6.0
|
suspicious | 30 May 2026 | Code ObfuscationTyposquattingMaintainer HistoryKnown CVE Vulnerabilities |
| CosmoSim | 2.9.0 |
4.0
|
suspicious | 30 May 2026 | Maintainer History |
| JSONL-LOGGER | 80.80.80 |
4.0
|
suspicious | 30 May 2026 | Shell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| ENCRYPTION-SERVICE | 80.80.80 |
6.0
|
suspicious | 30 May 2026 | Code ObfuscationShell / Subprocess ExecutionGit Repository HistoryMaintainer History |
| ErisPulse-MyServer | 1.0.0 |
6.0
|
suspicious | 30 May 2026 | Registered Email DomainGit Repository HistoryMaintainer History |
| Fileseq | 3.2.0 |
5.0
|
suspicious | 30 May 2026 | Code ObfuscationShell / Subprocess ExecutionMaintainer History |
| Encryptors | 2.49 |
6.0
|
suspicious | 30 May 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionMaintainer History |
| FastWARC | 1.0.3 |
5.0
|
suspicious | 29 May 2026 | Outbound Network CallsCredential HarvestingMaintainer History |
| DashAI | 0.9.4 |
5.0
|
suspicious | 29 May 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionMaintainer History |
| ATACofthesnake | 0.13.0 |
5.0
|
suspicious | 29 May 2026 | Outbound Network CallsShell / Subprocess ExecutionMaintainer History |
| ColorTransferLib | 2.2.0 |
4.0
|
suspicious | 29 May 2026 | Code ObfuscationShell / Subprocess ExecutionSuspicious Page LinksMaintainer History |
| HyperCoast | 0.27.0 |
6.0
|
suspicious | 29 May 2026 | Outbound Network CallsCode ObfuscationShell / Subprocess ExecutionSuspicious Page Links+1 |
| CosmoDJ | 0.0.1 |
4.0
|
suspicious | 29 May 2026 | Git Repository HistoryMaintainer History |
| DeepGPR | 0.0.12 |
5.0
|
suspicious | 29 May 2026 | Maintainer History |
| BwETAF | 0.7.3 |
3.0
|
suspicious | 29 May 2026 | Maintainer History |