PkgRadar

PyPI · pypi.org

laboneq

Remote Payload: matched "curl "

Why PkgRadar flagged 26.7.0b3

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · laboneq/automation/web_viewer/vendor_d3.sh
mediumLarge Native Blob15416528 bytes · laboneq/_rust.abi3.so

Scanned versions

VersionVerdictScoreScanned (UTC)
26.7.0b3Review112026-06-05

Block this in CI

PkgRadar gates laboneq (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi laboneq==26.7.0b3