PyPI · pypi.org

corio

Credential file access: matched "id_rsa"

Why PkgRadar flagged 2.4.1

Severity	Signal	Evidence
high	Credential file access	matched "id_rsa" · corio-2.4.1/corio/infra/repository.py
medium	Remote Payload	matched "curl " · corio-2.4.1/corio/yml.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`2.4.1`	High risk	42	2026-06-08
`2.4.0`	High risk	42	2026-05-31
`2.4.0a0`	High risk	42	2026-05-31

Block this in CI

PkgRadar gates corio (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi corio==2.4.1