PyPI · pypi.org

embedxpl

Webhook Exfil Endpoint: matched "webhook.site"

Why PkgRadar flagged 3.8.1

Severity	Signal	Evidence
high	Webhook Exfil Endpoint	matched "webhook.site" · embedxpl-3.8.1/embedxpl/modules/exploits/printers/generic/edb_51606_hp_ssrf_cve_2021_3441.py
high	Py Runtime Dynamic Dangerous Import	Dynamic __import__('os') — reflection bypass for static checks. · embedxpl-3.8.1/embedxpl/core/rtsp/client.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`3.8.1`	High risk	75	2026-06-16
`3.4.0`	High risk	75	2026-06-02
`3.3.1`	High risk	75	2026-06-02
`3.3.0`	High risk	75	2026-06-02
`3.2.1`	High risk	75	2026-06-01
`3.2.0`	High risk	75	2026-05-30

Block this in CI

PkgRadar gates embedxpl (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi embedxpl==3.8.1