PkgRadar

PyPI · pypi.org

cybervisor

Py Runtime Dynamic Dangerous Import: Dynamic __import__('sys') — reflection bypass for static checks.

Why PkgRadar flagged 0.28.0

SeveritySignalEvidence
highPy Runtime Dynamic Dangerous ImportDynamic __import__('sys') — reflection bypass for static checks. · cybervisor-0.28.0/src/cybervisor/client/commands.py
highPy Runtime Dynamic Dangerous ImportDynamic __import__('sys') — reflection bypass for static checks. · cybervisor-0.28.0/src/cybervisor/client/streaming.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.28.0High risk602026-06-12
0.27.2High risk602026-06-02
0.27.1High risk602026-06-01
0.27.0High risk602026-06-01
0.25.2High risk602026-05-31
0.25.1High risk602026-05-31
0.25.0High risk602026-05-30
0.24.0High risk602026-05-30
0.23.1High risk602026-05-30
0.23.0High risk602026-05-30
0.22.0High risk602026-05-30

Block this in CI

PkgRadar gates cybervisor (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi cybervisor==0.28.0