PyPI · pypi.org

capesolo

Webhook Exfil Endpoint: matched "requestbin.net"

Why PkgRadar flagged 0.5.20

Severity	Signal	Evidence
high	Webhook Exfil Endpoint	matched "requestbin.net" · capesolo-0.5.20/CAPEsolo/signatures/community/network_cnc_encrypted.py
high	Webhook Exfil Endpoint	matched "requestbin.net" · capesolo-0.5.20/CAPEsolo/signatures/community/network_dns_suspicious.py
medium	Py Custom Build Backend	Non-standard PEP 517 build-backend `uv_build` — runs custom code at install time. · pyproject.toml

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.5.20`	High risk	32	2026-06-01
`0.5.19`	High risk	32	2026-06-01

Block this in CI

PkgRadar gates capesolo (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi capesolo==0.5.20