PkgRadar

PyPI · pypi.org

code-aide

Remote Payload: matched "curl "

Why PkgRadar flagged 1.15.2

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · code_aide-1.15.2/script-archive/claude-install.sh
mediumRemote Payloadmatched "curl " · code_aide-1.15.2/script-archive/cursor-install.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
1.15.2Review242026-06-09

Block this in CI

PkgRadar gates code-aide (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi code-aide==1.15.2