PkgRadar

PyPI · pypi.org

google-colab-cli

Remote Payload: matched "curl "

Why PkgRadar flagged 0.6.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · google_colab_cli-0.6.0/integration/repro_keep_alive/test.sh
mediumRemote Payloadmatched "curl " · google_colab_cli-0.6.0/integration/repro_keep_alive_scope/test.sh
mediumRemote Payloadmatched "curl " · google_colab_cli-0.6.0/integration/repro_piped_console/test.sh
mediumRemote Payloadmatched "curl " · google_colab_cli-0.6.0/integration/repro_run_command/test.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
0.6.0High risk482026-06-16
0.5.11High risk482026-06-11
0.5.9High risk482026-06-04
0.5.8High risk482026-06-03
0.5.7High risk482026-05-30
0.5.6High risk482026-05-30
0.5.5High risk632026-05-30

Block this in CI

PkgRadar gates google-colab-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi google-colab-cli==0.6.0