>_ package check
Check the packages your AI suggested before you install them
AI coding tools sometimes suggest packages that do not exist, and attackers register those invented names to plant malware. Paste what your AI gave you and see, for each package, whether it is real and whether anything about it looks off.
Only the package names leave this page, sent from your browser straight to the public npm or PyPI registry. Nothing is sent to us and nothing is stored.
Results
Paste something above and press Check packages.
What it checks
- Whether the name exists on the npm or PyPI registry at all.
- Whether it was first published in the last 90 days.
- Whether it had fewer than 1,000 downloads last week (npm only: PyPI does not share counts with browsers).
- Whether the name is one letter or one dash away from a popular package, the trick look-alike names rely on.
- Whether npm took it down, its owner removed it, or its author deprecated it.
Look-alikes are compared with the most downloaded npm and PyPI packages, as listed on October 20, 2026.