PkgRadar

PyPI · pypi.org

lograder

Remote Payload: matched "wget "

Why PkgRadar flagged 0.3.4

SeveritySignalEvidence
mediumRemote Payloadmatched "wget " · lograder-0.3.4/src/lograder/data/install_scripts/install_cmake.sh
mediumRemote Payloadmatched "curl " · lograder-0.3.4/src/lograder/data/install_scripts/install_curl.sh
mediumRemote Payloadmatched "wget " · lograder-0.3.4/src/lograder/data/install_scripts/install_gprofng.sh
mediumRemote Payloadmatched "wget " · lograder-0.3.4/src/lograder/data/install_scripts/install_valgrind.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
0.3.4High risk332026-06-06
0.3.3High risk332026-06-06
0.3.2High risk332026-06-05
0.3.1High risk332026-06-05
0.3.0High risk332026-06-05
0.2.7High risk332026-06-05
0.2.6High risk332026-06-05
0.2.4High risk332026-06-05
0.2.3High risk332026-06-05
0.2.2High risk332026-06-05
0.2.1High risk332026-06-05
0.2.0Low risk02026-06-05

Block this in CI

PkgRadar gates lograder (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi lograder==0.3.4
Start free — 25 scans / moView full evidence