PkgRadar

PyPI · pypi.org

ccsilo

Python Bun Js Exec: Python file references the Bun JavaScript runtime — cross-language execution

Why PkgRadar flagged 0.7.0

SeveritySignalEvidence
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · ccsilo-0.7.0/ccsilo/binary_patcher/bun_compat.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · ccsilo-0.7.0/ccsilo/binary_patcher/elf_resize.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · ccsilo-0.7.0/ccsilo/binary_patcher/index.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · ccsilo-0.7.0/ccsilo/binary_patcher/macho_resize.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · ccsilo-0.7.0/ccsilo/binary_patcher/pe_resize.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · ccsilo-0.7.0/ccsilo/binary_patcher/replace_entry.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · ccsilo-0.7.0/ccsilo/binary_patcher/strip_bun_wrapper.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · ccsilo-0.7.0/ccsilo/binary_patcher/unpack_and_patch.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · ccsilo-0.7.0/ccsilo/bun_extract/__init__.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · ccsilo-0.7.0/ccsilo/bun_extract/checked.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · ccsilo-0.7.0/ccsilo/bun_extract/constants.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · ccsilo-0.7.0/ccsilo/bun_extract/extract.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.7.0High risk552026-06-18
0.6.6High risk552026-06-13
0.6.5High risk552026-06-13
0.6.4High risk552026-06-12
0.6.3High risk552026-06-12
0.6.2High risk552026-06-11
0.6.1Review52026-06-06
0.5.1Review52026-06-04
0.5.0Review52026-06-02
0.4.8Review52026-05-30
0.4.7Review52026-05-30

Campaign attribution

Part of the Shai-Hulud (PyPI) campaign.

Block this in CI

PkgRadar gates ccsilo (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi ccsilo==0.7.0