PyPI · pypi.org
hypercube-esn
Py Import Time Pickle Loads: pickle/marshal.loads — deserializes arbitrary objects, RCE if attacker-controlled.
Why PkgRadar flagged 1.0.0
| Severity | Signal | Evidence |
|---|---|---|
| medium | Py Import Time Pickle Loads | pickle/marshal.loads — deserializes arbitrary objects, RCE if attacker-controlled. · hypercube_esn-1.0.0/hypercube_esn/__init__.py |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.0.0 | Review | 24 | 2026-06-05 |
0.3.1 | Review | 24 | 2026-06-05 |
0.3.0 | Review | 24 | 2026-06-05 |
Block this in CI
pkgradar gate --ecosystem pypi hypercube-esn==1.0.0