PkgRadar

PyPI · pypi.org

featrixsphere

Remote Payload: matched "wget "

Why PkgRadar flagged 0.2.10624

SeveritySignalEvidence
mediumRemote Payloadmatched "wget " · featrixsphere-0.2.10624/nv-install.sh
mediumRemote Payloadmatched "wget " · featrixsphere-0.2.10624/src/lib/featrix/download-data/install-data.sh
mediumRemote Payloadmatched "curl " · featrixsphere-0.2.10624/src/node-install.sh
mediumRemote Payloadmatched "curl " · featrixsphere-0.2.10624/src/production_server/gateway_watchdog.sh
mediumRemote Payloadmatched "curl " · featrixsphere-0.2.10624/src/production_server/install.sh
mediumRemote Payloadmatched "curl " · featrixsphere-0.2.10624/src/quick_test_deployment.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
0.2.10624High risk642026-06-09

Block this in CI

PkgRadar gates featrixsphere (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi featrixsphere==0.2.10624
Start free — 25 scans / moView full evidence