PkgRadar

PyPI · pypi.org

agentweave-sdk

Remote Payload: matched "curl "

Why PkgRadar flagged 0.3.1

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · agentweave_sdk-0.3.1/agentweave/hooks/claude-code/stop.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
0.3.1Review122026-05-28

Block this in CI

PkgRadar gates agentweave-sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi agentweave-sdk==0.3.1
agentweave-sdk — PyPI security scan | PkgRadar