PkgRadar

PyPI · pypi.org

malcolm-test

Remote Payload: matched "curl "

Why PkgRadar flagged 0.14.7

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · malcolm_test-0.14.7/src/maltest/virter/debian-13/init/01-apt-init.toml
mediumRemote Payloadmatched "curl " · malcolm_test-0.14.7/src/maltest/virter/debian-13/init/02-docker.toml
mediumRemote Payloadmatched "curl " · malcolm_test-0.14.7/src/maltest/virter/debian-13/init/03-podman.toml
mediumRemote Payloadmatched "curl " · malcolm_test-0.14.7/src/maltest/virter/malcolm-init/01-clone-install.toml

Scanned versions

VersionVerdictScoreScanned (UTC)
0.14.7Review242026-05-27
0.14.6Review242026-05-26

Block this in CI

PkgRadar gates malcolm-test (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi malcolm-test==0.14.7
Start free — 25 scans / moView full evidence
malcolm-test — PyPI security scan | PkgRadar