PkgRadar

PyPI · pypi.org

haka-playwright-engine

Remote Payload: matched "curl "

Why PkgRadar flagged 1.3.140

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · haka_playwright_engine-1.3.140/hakalab_framework/integrations/xray_integration.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.3.141Low risk02026-06-08
1.3.140Review352026-05-26
1.3.139Review352026-05-26
1.3.138Review352026-05-26
1.3.137Review352026-05-26
1.3.136Review402026-05-26
1.3.135Review352026-05-26

Block this in CI

PkgRadar gates haka-playwright-engine (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi haka-playwright-engine==1.3.140
Start free — 25 scans / moView full evidence