PyPI · pypi.org

is-crawler

DNS / OAST exfiltration: matched "burpcollaborator.net"

Why PkgRadar flagged 1.5.24

Severity	Signal	Evidence
high	DNS / OAST exfiltration	matched "burpcollaborator.net" · is_crawler-1.5.24/is_crawler/crawlers.min.json

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.5.24`	High risk	30	2026-06-08
`1.5.23`	High risk	30	2026-06-07
`1.5.22`	High risk	30	2026-06-07
`1.5.21`	High risk	30	2026-06-07

Block this in CI

PkgRadar gates is-crawler (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi is-crawler==1.5.24