PyPI · pypi.org

copyparty

Py Runtime Compile Exec: Python exec(compile(...)) — typical obfuscated loader pattern.

Why PkgRadar flagged 1.20.16

Severity	Signal	Evidence
high	Py Runtime Compile Exec	Python exec(compile(...)) — typical obfuscated loader pattern. · copyparty-1.20.16/copyparty/tftpd.py
high	Py Runtime Os System	Direct shell invocation via os.system / os.popen / os.exec*. · copyparty-1.20.16/copyparty/__main__.py
high	Py Runtime Os System	Direct shell invocation via os.system / os.popen / os.exec*. · copyparty-1.20.16/copyparty/svchub.py
high	Py Runtime Os System	Direct shell invocation via os.system / os.popen / os.exec*. · copyparty-1.20.16/copyparty/web/a/partyfuse.py
high	Py Runtime Os System	Direct shell invocation via os.system / os.popen / os.exec*. · copyparty-1.20.16/copyparty/web/a/u2c.py
medium	Py Runtime Ctypes Load	ctypes.CDLL/cdll.LoadLibrary — loads native code into the process. · copyparty-1.20.16/copyparty/stolen/ifaddr/_posix.py
medium	Py Runtime Ctypes Load	ctypes.CDLL/cdll.LoadLibrary — loads native code into the process. · copyparty-1.20.16/copyparty/util.py
medium	Py Runtime Ctypes Load	ctypes.CDLL/cdll.LoadLibrary — loads native code into the process. · copyparty-1.20.16/copyparty/web/deps/mfusepy.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.20.16`	Review	45	2026-05-26
`1.20.15`	Review	45	2026-05-26

Block this in CI

PkgRadar gates copyparty (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi copyparty==1.20.16