Cargo · crates.io
hx-cli
Rs Build Time Command: Process spawn (std::process::Command) at build time.
Why PkgRadar flagged 0.7.11
| Severity | Signal | Evidence |
|---|---|---|
| medium | Rs Build Time Command | Process spawn (std::process::Command) at build time. · hx-cli-0.7.11/src/commands/build.rs |
| medium | Remote Payload | matched "github.com/raskell-io/hx/releases/download" · hx-cli-0.7.11/src/commands/dist.rs |
| medium | Remote Payload | matched "github.com/{}/{}/releases/download" · hx-cli-0.7.11/src/commands/upgrade.rs |
| medium | Suspicious Publish Context | {"package_age_days":2,"publisher":"Raffael Schneider","burst_same_day":38,"burst_week":42,"lure":null,"version_anomaly":false,"new_account":false} |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.7.11 | Review | 64 | 2026-06-20 |
0.7.10 | Review | 64 | 2026-06-19 |
0.7.9 | Review | 64 | 2026-06-19 |
0.7.8 | Review | 64 | 2026-06-19 |
0.7.7 | Review | 64 | 2026-06-19 |
0.7.6 | Review | 64 | 2026-06-19 |
0.7.5 | Review | 64 | 2026-06-18 |
Block this in CI
pkgradar gate --ecosystem cargo [email protected]