PyPI · pypi.org

credsweeper

Remote Payload: matched "CURL "

Why PkgRadar flagged 1.15.8

Severity	Signal	Evidence
medium	Remote Payload	matched "CURL " · credsweeper-1.15.8/credsweeper/ml_model/ml_config.json
medium	Remote Payload	matched "CURL " · credsweeper-1.15.8/credsweeper/rules/config.yaml

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.16.0`	Low risk	0	2026-06-02
`1.15.8`	Review	14	2026-05-26

Block this in CI

PkgRadar gates credsweeper (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi credsweeper==1.15.8