PkgRadar

PyPI · pypi.org

liquid-api

Remote Payload: matched "curl "

Why PkgRadar flagged 0.39.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · liquid_api-0.39.0/.github/workflows/publish-mcp.yml

Scanned versions

VersionVerdictScoreScanned (UTC)
0.67.0Low risk02026-06-04
0.66.1Low risk02026-06-01
0.66.0Low risk02026-06-01
0.65.0Low risk02026-06-01
0.64.0Low risk02026-06-01
0.63.0Low risk02026-05-31
0.59.1Low risk02026-05-29
0.59.0Low risk02026-05-29
0.54.0Low risk02026-05-29
0.53.0Low risk02026-05-29
0.52.0Low risk02026-05-29
0.51.2Low risk02026-05-29
0.51.1Low risk02026-05-29
0.51.0Low risk02026-05-28
0.50.0Low risk02026-05-28
0.49.2Low risk02026-05-28
0.49.1Low risk02026-05-28
0.49.0Low risk02026-05-28
0.48.0Low risk02026-05-28
0.47.0Low risk02026-05-28
0.46.0Low risk02026-05-28
0.45.0Low risk02026-05-28
0.44.0Low risk02026-05-28
0.43.0Low risk02026-05-28
0.42.0Low risk02026-05-28
0.41.0Low risk02026-05-28
0.40.0Low risk02026-05-28
0.39.0Review122026-05-28
0.38.2Review122026-05-28
0.38.1Review122026-05-28
0.38.0Review122026-05-27
0.37.1Review122026-05-27
0.37.0Review122026-05-27
0.36.1Low risk02026-05-27
0.36.0Low risk02026-05-27
0.35.0Low risk02026-05-27

Block this in CI

PkgRadar gates liquid-api (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi liquid-api==0.39.0
Start free — 25 scans / moView full evidence