PkgRadar

PyPI · pypi.org

ai302

Py Runtime Dynamic Dangerous Import: Dynamic __import__('sys') — reflection bypass for static checks.

Why PkgRadar flagged 0.1.61

SeveritySignalEvidence
highPy Runtime Dynamic Dangerous ImportDynamic __import__('sys') — reflection bypass for static checks. · ai302-0.1.61/ai302/api/file.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.61High risk302026-06-12
0.1.59High risk302026-06-10
0.1.58High risk302026-06-10
0.1.57High risk302026-06-10
0.1.56High risk302026-06-05
0.1.55High risk302026-06-05
0.1.54High risk302026-06-03
0.1.53High risk302026-06-02
0.1.52High risk302026-06-02
0.1.51High risk302026-06-02
0.1.50High risk302026-06-02
1.0.1b2High risk302026-06-01
1.0.1b1High risk302026-05-30
0.1.49High risk302026-05-30
0.1.48High risk302026-05-30
0.1.47High risk302026-05-30
0.1.46High risk302026-05-30

Block this in CI

PkgRadar gates ai302 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi ai302==0.1.61
Start free — 25 scans / moView full evidence