PkgRadar

PyPI · pypi.org

autoxkit

Py Runtime Dynamic Dangerous Import: Dynamic __import__('sys') — reflection bypass for static checks.

Why PkgRadar flagged 2.3.0

SeveritySignalEvidence
highPy Runtime Dynamic Dangerous ImportDynamic __import__('sys') — reflection bypass for static checks. · autoxkit-2.3.0/autoxkit/hook/hook_listener.py

Scanned versions

VersionVerdictScoreScanned (UTC)
2.3.0High risk212026-06-05
2.2.1High risk212026-06-03

Block this in CI

PkgRadar gates autoxkit (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi autoxkit==2.3.0
autoxkit — PyPI security scan | PkgRadar