Slopsquatting candidates — names attackers will target next
Package names multiple LLMs repeatedly hallucinate are exact targeting information for attackers — "register this and someone will install it". We see those names before attackers do.
How we detect
We regularly run a matrix of hundreds of programming prompts through major LLMs (Claude, GPT, Gemini, Llama) and harvest the package names they recommend. Cross-model agreement raises the target score. The registry status is checked live against npm/PyPI/crates.io for (1) non-existence, (2) recent registration with suspicious patterns, and (3) empty wrappers around famous names.
Bulk package check
Paste package names suggested by an LLM, one per line. Flagged candidates appear below.
| id | purl | risk | summary |
|---|---|---|---|
| VDB-SLOP-pypi-e4149eab27 | pkg:pypi/tartiflette-graphql | high | Slopsquatting candidate: tartiflette-graphql (PyPI) |
| VDB-SLOP-pypi-1b230b46b9 | pkg:pypi/icalparsed | high | Slopsquatting candidate: icalparsed (PyPI) |
| VDB-SLOP-pypi-cbef7e55a5 | pkg:pypi/cyclonedx-java | high | Slopsquatting candidate: cyclonedx-java (PyPI) |
| VDB-SLOP-pypi-3200c6728a | pkg:pypi/cyclonedx-pythonlib | high | Slopsquatting candidate: cyclonedx-pythonlib (PyPI) |
| VDB-SLOP-pypi-f9a1b1b579 | pkg:pypi/cyclonedx-python-github | high | Slopsquatting candidate: cyclonedx-python-github (PyPI) |
| VDB-SLOP-pypi-39ea305eaf | pkg:pypi/opentelemetry-logger | high | Slopsquatting candidate: opentelemetry-logger (PyPI) |
| VDB-SLOP-pypi-739dc89011 | pkg:pypi/cyclonedx-python-parser | high | Slopsquatting candidate: cyclonedx-python-parser (PyPI) |
| VDB-SLOP-pypi-1905e70acc | pkg:pypi/text-generation-webui | high | Slopsquatting candidate: text-generation-webui (PyPI) |
| VDB-SLOP-pypi-faa1dbe8ed | pkg:pypi/icalendar-parser | high | Slopsquatting candidate: icalendar-parser (PyPI) |
| VDB-SLOP-pypi-34b58ec908 | pkg:pypi/safe_yaml | high | Slopsquatting candidate: safe_yaml (PyPI) |
| VDB-SLOP-pypi-40ff05d49c | pkg:pypi/ical_feats | high | Slopsquatting candidate: ical_feats (PyPI) |
| VDB-SLOP-pypi-a9a51f4eb1 | pkg:pypi/official | high | Slopsquatting candidate: official (PyPI) |
| VDB-SLOP-pypi-bed775e188 | pkg:pypi/pyahocoras | high | Slopsquatting candidate: pyahocoras (PyPI) |
| VDB-SLOP-pypi-ef1bd20dd8 | pkg:pypi/cyclonedx-python-golang | high | Slopsquatting candidate: cyclonedx-python-golang (PyPI) |
| VDB-SLOP-pypi-3474b5d2ac | pkg:pypi/cyclonedx-cfactory | high | Slopsquatting candidate: cyclonedx-cfactory (PyPI) |
| VDB-SLOP-pypi-1bd1d27e8e | pkg:pypi/cyclonedx-python-rcf | high | Slopsquatting candidate: cyclonedx-python-rcf (PyPI) |
| VDB-SLOP-pypi-61e6ced377 | pkg:pypi/cyclonedx-validator | high | Slopsquatting candidate: cyclonedx-validator (PyPI) |
| VDB-SLOP-pypi-5ce6592120 | pkg:pypi/sbom-checker | high | Slopsquatting candidate: sbom-checker (PyPI) |
| VDB-SLOP-pypi-fa3d6d14af | pkg:pypi/cyclonedx-python-output | high | Slopsquatting candidate: cyclonedx-python-output (PyPI) |
| VDB-SLOP-pypi-eab1a577e5 | pkg:pypi/vigil-llm | high | Slopsquatting candidate: vigil-llm (PyPI) |
| VDB-SLOP-pypi-6170c4db82 | pkg:pypi/purl-js | high | Slopsquatting candidate: purl-js (PyPI) |
| VDB-SLOP-pypi-adfd374a79 | pkg:pypi/boomerang-cyclonedx | high | Slopsquatting candidate: boomerang-cyclonedx (PyPI) |
| VDB-SLOP-pypi-265173aa21 | pkg:pypi/cyclonedx-python3 | high | Slopsquatting candidate: cyclonedx-python3 (PyPI) |
| VDB-SLOP-pypi-41ef6e5c92 | pkg:pypi/cycledx-sbom-parser | high | Slopsquatting candidate: cycledx-sbom-parser (PyPI) |
| VDB-SLOP-pypi-2b76728dc3 | pkg:pypi/trio-http | high | Slopsquatting candidate: trio-http (PyPI) |
| VDB-SLOP-pypi-a7a587ab1a | pkg:pypi/python-front | high | Slopsquatting candidate: python-front (PyPI) |
| VDB-SLOP-pypi-c0717903e8 | pkg:pypi/yamlfriendly | high | Slopsquatting candidate: yamlfriendly (PyPI) |
| VDB-SLOP-pypi-d494ebfb70 | pkg:pypi/parseics | high | Slopsquatting candidate: parseics (PyPI) |
| VDB-SLOP-pypi-b23662e3b8 | pkg:pypi/cyclonedx-gen-python | high | Slopsquatting candidate: cyclonedx-gen-python (PyPI) |
| VDB-SLOP-pypi-054e09b7f0 | pkg:pypi/cyclonedx-xml-python | high | Slopsquatting candidate: cyclonedx-xml-python (PyPI) |
| VDB-SLOP-pypi-5e1762b023 | pkg:pypi/rueml_parser | high | Slopsquatting candidate: rueml_parser (PyPI) |
| VDB-SLOP-pypi-90c166e455 | pkg:pypi/cyclonedx-golang-lib | high | Slopsquatting candidate: cyclonedx-golang-lib (PyPI) |
| VDB-SLOP-pypi-bc11e52288 | pkg:pypi/yamlkid | high | Slopsquatting candidate: yamlkid (PyPI) |
| VDB-SLOP-pypi-18635a38de | pkg:pypi/googlepurl | high | Slopsquatting candidate: googlepurl (PyPI) |
| VDB-SLOP-pypi-0e6df8fb09 | pkg:pypi/yamldom | high | Slopsquatting candidate: yamldom (PyPI) |
| VDB-SLOP-pypi-a85d69fda5 | pkg:pypi/icalalchemy | high | Slopsquatting candidate: icalalchemy (PyPI) |
| VDB-SLOP-pypi-3bfd03b7f3 | pkg:pypi/libyaml | high | Slopsquatting candidate: libyaml (PyPI) |
| VDB-SLOP-pypi-3fea97e503 | pkg:pypi/opentelemetry-context | high | Slopsquatting candidate: opentelemetry-context (PyPI) |
| VDB-SLOP-pypi-97c6afb025 | pkg:pypi/purl-generator | high | Slopsquatting candidate: purl-generator (PyPI) |
| VDB-SLOP-pypi-a821a483a6 | pkg:pypi/waste_yaml | high | Slopsquatting candidate: waste_yaml (PyPI) |
| VDB-SLOP-pypi-9026beb49e | pkg:pypi/django-purl | high | Slopsquatting candidate: django-purl (PyPI) |
| VDB-SLOP-pypi-49b6a35df2 | pkg:pypi/cyclonedx-model-python | high | Slopsquatting candidate: cyclonedx-model-python (PyPI) |
| VDB-SLOP-pypi-255b9202b9 | pkg:pypi/cyclonedx-python-retrofit | high | Slopsquatting candidate: cyclonedx-python-retrofit (PyPI) |
| VDB-SLOP-pypi-06d23b49dd | pkg:pypi/cyclonedx | high | Slopsquatting candidate: cyclonedx (PyPI) |
| VDB-SLOP-pypi-a80ad66b7e | pkg:pypi/ask-request | high | Slopsquatting candidate: ask-request (PyPI) |
| VDB-SLOP-pypi-650ebde435 | pkg:pypi/sentence | high | Slopsquatting candidate: sentence (PyPI) |
| VDB-SLOP-pypi-140cfc57e8 | pkg:pypi/cyclonedx-gem | high | Slopsquatting candidate: cyclonedx-gem (PyPI) |
| VDB-SLOP-pypi-7ec4556b20 | pkg:pypi/purl4j | high | Slopsquatting candidate: purl4j (PyPI) |
| VDB-SLOP-pypi-ea99460744 | pkg:pypi/friendly-purl | high | Slopsquatting candidate: friendly-purl (PyPI) |
| VDB-SLOP-pypi-296f349d46 | pkg:pypi/purl_utils | high | Slopsquatting candidate: purl_utils (PyPI) |
| VDB-SLOP-pypi-2beb25f1a0 | pkg:pypi/opentelemetry-instrumentation-logger | high | Slopsquatting candidate: opentelemetry-instrumentation-logger (PyPI) |
| VDB-SLOP-pypi-a0f2227c20 | pkg:pypi/purl-encoder | high | Slopsquatting candidate: purl-encoder (PyPI) |
| VDB-SLOP-pypi-40a26db968 | pkg:pypi/cyclonedx-generator | high | Slopsquatting candidate: cyclonedx-generator (PyPI) |
| VDB-SLOP-pypi-c513afcec2 | pkg:pypi/cyclonedx-python-maker | high | Slopsquatting candidate: cyclonedx-python-maker (PyPI) |
| VDB-SLOP-pypi-e5e7d3a8e7 | pkg:pypi/csv-fast | high | Slopsquatting candidate: csv-fast (PyPI) |
| VDB-SLOP-pypi-e85484902a | pkg:pypi/http.client_async | high | Slopsquatting candidate: http.client_async (PyPI) |
| VDB-SLOP-pypi-aa059e2910 | pkg:pypi/cyclonedx-extractor | high | Slopsquatting candidate: cyclonedx-extractor (PyPI) |
| VDB-SLOP-pypi-3faaef6fed | pkg:pypi/aws-otel-collector | high | Slopsquatting candidate: aws-otel-collector (PyPI) |
| VDB-SLOP-pypi-8549dc501e | pkg:pypi/ical_parser | high | Slopsquatting candidate: ical_parser (PyPI) |
| VDB-SLOP-pypi-5fa8070d6e | pkg:pypi/based | high | Slopsquatting candidate: based (PyPI) |
| VDB-SLOP-pypi-4dd18903c6 | pkg:pypi/cyclonedx-python-tools | high | Slopsquatting candidate: cyclonedx-python-tools (PyPI) |
| VDB-SLOP-pypi-4f3b1e243a | pkg:pypi/rfc3 | high | Slopsquatting candidate: rfc3 (PyPI) |
| VDB-SLOP-pypi-31ac653af5 | pkg:pypi/cyclonedx-to-sbom | high | Slopsquatting candidate: cyclonedx-to-sbom (PyPI) |
| VDB-SLOP-pypi-ecfe83adf0 | pkg:pypi/cyclonedx-py-schema | high | Slopsquatting candidate: cyclonedx-py-schema (PyPI) |
| VDB-SLOP-pypi-5908fe2ed2 | pkg:pypi/py_calendar | high | Slopsquatting candidate: py_calendar (PyPI) |
| VDB-SLOP-pypi-2acc376619 | pkg:pypi/purl-creator | high | Slopsquatting candidate: purl-creator (PyPI) |
| VDB-SLOP-pypi-4c027087a9 | pkg:pypi/cyclonedx-jsonschema-validator | high | Slopsquatting candidate: cyclonedx-jsonschema-validator (PyPI) |
| VDB-SLOP-pypi-7e288cff73 | pkg:pypi/vdb-commons | high | Slopsquatting candidate: vdb-commons (PyPI) |
| VDB-SLOP-pypi-cbb37224cb | pkg:pypi/purlutils | high | Slopsquatting candidate: purlutils (PyPI) |
| VDB-SLOP-pypi-836cb01c55 | pkg:pypi/lakechain | high | Slopsquatting candidate: lakechain (PyPI) |
| VDB-SLOP-pypi-e11ad31f7e | pkg:pypi/purl-legacy | high | Slopsquatting candidate: purl-legacy (PyPI) |
| VDB-SLOP-pypi-af439c914b | pkg:pypi/stric | high | Slopsquatting candidate: stric (PyPI) |
| VDB-SLOP-pypi-c0266de9c4 | pkg:pypi/pyvcalendar | high | Slopsquatting candidate: pyvcalendar (PyPI) |
| VDB-SLOP-pypi-3c72ce2860 | pkg:pypi/cyclonedx-python-gen | high | Slopsquatting candidate: cyclonedx-python-gen (PyPI) |
| VDB-SLOP-pypi-cef85629b7 | pkg:pypi/purli | high | Slopsquatting candidate: purli (PyPI) |
| VDB-SLOP-pypi-df97832738 | pkg:pypi/opentelemetry-exporter-otlp-proto | high | Slopsquatting candidate: opentelemetry-exporter-otlp-proto (PyPI) |
| VDB-SLOP-pypi-3c2fe6d270 | pkg:pypi/dask-csv | high | Slopsquatting candidate: dask-csv (PyPI) |
| VDB-SLOP-pypi-dca0e761dc | pkg:pypi/semanticscholar-purl | high | Slopsquatting candidate: semanticscholar-purl (PyPI) |
| VDB-SLOP-pypi-dabe7e89a5 | pkg:pypi/additio | high | Slopsquatting candidate: additio (PyPI) |
| VDB-SLOP-pypi-ff931f80a0 | pkg:pypi/cyclonedx-python-xml | high | Slopsquatting candidate: cyclonedx-python-xml (PyPI) |
| VDB-SLOP-pypi-bb7df8b326 | pkg:pypi/anthropic-api | high | Slopsquatting candidate: anthropic-api (PyPI) |
| VDB-SLOP-pypi-2b560bae8a | pkg:pypi/cyclonedx-python-flask | high | Slopsquatting candidate: cyclonedx-python-flask (PyPI) |
| VDB-SLOP-pypi-79b96e7023 | pkg:pypi/cyclonedx-python-stack-analysis | high | Slopsquatting candidate: cyclonedx-python-stack-analysis (PyPI) |
| VDB-SLOP-pypi-1789fb3651 | pkg:pypi/cyclonedx-pythonapi | high | Slopsquatting candidate: cyclonedx-pythonapi (PyPI) |
| VDB-SLOP-pypi-1d0f90d60b | pkg:pypi/purl-canonizer | high | Slopsquatting candidate: purl-canonizer (PyPI) |
| VDB-SLOP-pypi-d2e6b06e87 | pkg:pypi/psqlextra | high | Slopsquatting candidate: psqlextra (PyPI) |
| VDB-SLOP-pypi-6e2513d64a | pkg:pypi/parse_hour | high | Slopsquatting candidate: parse_hour (PyPI) |
| VDB-SLOP-pypi-6eebe7591a | pkg:pypi/llm-extract | high | Slopsquatting candidate: llm-extract (PyPI) |
| VDB-SLOP-pypi-99be19c974 | pkg:pypi/dylibyaml | high | Slopsquatting candidate: dylibyaml (PyPI) |
| VDB-SLOP-pypi-311e6b8603 | pkg:pypi/xml.etree.elementtree | high | Slopsquatting candidate: xml.etree.elementtree (PyPI) |
| VDB-SLOP-pypi-fba3ae268d | pkg:pypi/pertol | high | Slopsquatting candidate: pertol (PyPI) |
| VDB-SLOP-pypi-74b49b534b | pkg:pypi/cyclonedx-lib | high | Slopsquatting candidate: cyclonedx-lib (PyPI) |
| VDB-SLOP-pypi-e5085222e1 | pkg:pypi/rasax-sdk | high | Slopsquatting candidate: rasax-sdk (PyPI) |
| VDB-SLOP-pypi-b568a0cd52 | pkg:pypi/cyclonedx-generic-lib | high | Slopsquatting candidate: cyclonedx-generic-lib (PyPI) |
| VDB-SLOP-pypi-d712796dda | pkg:pypi/parse-icalendar | high | Slopsquatting candidate: parse-icalendar (PyPI) |
| VDB-SLOP-pypi-0816389637 | pkg:pypi/pyicsv | high | Slopsquatting candidate: pyicsv (PyPI) |
| VDB-SLOP-pypi-3959203694 | pkg:pypi/purlpy | high | Slopsquatting candidate: purlpy (PyPI) |
| VDB-SLOP-pypi-7b3f2710cc | pkg:pypi/cyclonedx-py-cli | high | Slopsquatting candidate: cyclonedx-py-cli (PyPI) |
| VDB-SLOP-pypi-f2671c594a | pkg:pypi/opentelemetry-exporter-logs | high | Slopsquatting candidate: opentelemetry-exporter-logs (PyPI) |
| VDB-SLOP-pypi-cc324ac2ba | pkg:pypi/cyclonedx-python-go-xml | high | Slopsquatting candidate: cyclonedx-python-go-xml (PyPI) |