PkgRadar

PyPI · pypi.org

mindroom

Python Bun Js Exec: Python file references the Bun JavaScript runtime — cross-language execution

Why PkgRadar flagged 2026.6.162

SeveritySignalEvidence
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · mindroom-2026.6.162/frontend/take_screenshot.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · mindroom-2026.6.162/saas-platform/platform-backend/scripts/export_openapi.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · mindroom-2026.6.162/src/mindroom/frontend_assets.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · mindroom-2026.6.162/src/mindroom/cli/main.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · mindroom-2026.6.162/hatch_build.py
mediumRemote Payloadmatched "curl " · mindroom-2026.6.162/run-backend.sh
mediumRemote Payloadmatched "curl " · mindroom-2026.6.162/run-frontend.sh
mediumRemote Payloadmatched "curl " · mindroom-2026.6.162/cluster/k8s/kind/test-access.sh
mediumRemote Payloadmatched "raw.githubusercontent.com" · mindroom-2026.6.162/cluster/k8s/kind/up.sh
mediumRemote Payloadmatched "curl " · mindroom-2026.6.162/cluster/k8s/kind/validate.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
2026.6.162High risk1122026-06-17
2026.6.161High risk1122026-06-17
2026.6.160High risk1122026-06-16
2026.6.159High risk1122026-06-16
2026.6.158High risk1122026-06-16
2026.6.157High risk1122026-06-16
2026.6.156High risk1122026-06-16
2026.6.155High risk1122026-06-16
2026.6.154High risk1122026-06-16
2026.6.153High risk1122026-06-16
2026.6.152High risk1122026-06-16
2026.6.151High risk1122026-06-15
2026.6.150High risk1122026-06-15
2026.6.149High risk1122026-06-15
2026.6.148High risk1122026-06-15
2026.6.147High risk1122026-06-15
2026.6.146High risk1122026-06-15
2026.6.145High risk1122026-06-15
2026.6.144High risk1122026-06-15
2026.6.143High risk1122026-06-15
2026.6.142High risk1122026-06-15
2026.6.141High risk1122026-06-13
2026.6.140High risk1122026-06-12
2026.6.139High risk1122026-06-12
2026.6.138High risk1122026-06-12
2026.6.137High risk1122026-06-12
2026.6.135High risk1122026-06-12
2026.6.134High risk1122026-06-12
2026.6.136High risk1122026-06-12
2026.6.133High risk1122026-06-12
2026.6.132High risk1122026-06-12
2026.6.131High risk1122026-06-12
2026.6.130High risk1122026-06-12
2026.6.129High risk1122026-06-12
2026.6.128High risk1122026-06-12
2026.6.127High risk1122026-06-12
2026.6.126High risk1122026-06-12
2026.6.125High risk1122026-06-12
2026.6.124High risk1122026-06-12
2026.6.123High risk1122026-06-12
2026.6.122High risk1122026-06-12
2026.6.121High risk1122026-06-12
2026.6.120High risk1122026-06-12
2026.6.119High risk1122026-06-12
2026.6.118High risk1122026-06-12
2026.6.116High risk1122026-06-12
2026.6.114High risk1122026-06-12
2026.6.117High risk1122026-06-12
2026.6.115High risk1122026-06-12
2026.6.113High risk1122026-06-12
2026.6.112High risk1122026-06-12
2026.6.111High risk1122026-06-12
2026.6.110High risk1122026-06-12
2026.6.109High risk1122026-06-12
2026.6.107High risk1122026-06-12
2026.6.106High risk1122026-06-12
2026.6.105High risk1122026-06-11
2026.6.102High risk1122026-06-11
2026.6.104High risk1122026-06-11
2026.6.103High risk1122026-06-11
2026.6.101High risk1122026-06-11
2026.6.100High risk1122026-06-11
2026.6.99High risk1122026-06-11
2026.6.98High risk662026-06-11
2026.6.97High risk1122026-06-11
2026.6.96High risk1122026-06-11
2026.6.95High risk1122026-06-11
2026.6.93High risk1122026-06-11
2026.6.94High risk1122026-06-11
2026.6.92High risk1122026-06-11
2026.6.91High risk1122026-06-11
2026.6.90High risk1122026-06-11
2026.6.89High risk1122026-06-11
2026.6.88High risk1122026-06-11
2026.6.87High risk1122026-06-11
2026.6.86High risk1122026-06-11
2026.6.85High risk1122026-06-11
2026.6.84High risk1122026-06-11
2026.6.83High risk1122026-06-11
2026.6.82High risk1122026-06-11
2026.6.81High risk1122026-06-11
2026.6.80High risk1122026-06-11
2026.6.78High risk1122026-06-11
2026.6.77High risk1122026-06-10
2026.6.76High risk1122026-06-10
2026.6.75High risk1122026-06-09
2026.6.74High risk1122026-06-09
2026.6.73High risk1122026-06-09
2026.6.72High risk1122026-06-09
2026.6.71High risk1122026-06-09
2026.6.70High risk1122026-06-09
2026.6.69High risk1122026-06-09
2026.6.68High risk772026-06-09
2026.6.67High risk772026-06-08
2026.6.66High risk772026-06-08
2026.6.65High risk772026-06-08
2026.6.64High risk772026-06-08
2026.6.63High risk772026-06-07
2026.6.62High risk772026-06-07
2026.6.61High risk772026-06-07
2026.6.60High risk772026-06-06
2026.6.59High risk772026-06-06
2026.6.58High risk772026-06-06
2026.6.57High risk772026-06-06
2026.6.56High risk772026-06-06
2026.6.55High risk772026-06-06
2026.6.54High risk772026-06-06
2026.6.53High risk772026-06-05
2026.6.52High risk772026-06-05
2026.6.51High risk772026-06-05
2026.6.50High risk772026-06-05
2026.6.49High risk772026-06-05
2026.6.48High risk772026-06-05
2026.6.47High risk772026-06-05
2026.6.46High risk772026-06-04
2026.6.45High risk772026-06-04
2026.6.44High risk772026-06-04
2026.6.43High risk772026-06-04
2026.6.42High risk772026-06-04
2026.6.41High risk772026-06-04
2026.6.40High risk772026-06-04
2026.6.39High risk772026-06-04
2026.6.38High risk772026-06-03
2026.6.37High risk772026-06-03
2026.6.36High risk772026-06-03
2026.6.35High risk772026-06-03
2026.6.34High risk772026-06-03
2026.6.33High risk772026-06-03
2026.6.32High risk772026-06-03
2026.6.31High risk772026-06-03
2026.6.30High risk772026-06-03
2026.6.29High risk772026-06-03
2026.6.28High risk772026-06-03
2026.6.27High risk772026-06-03
2026.6.26High risk912026-06-03
2026.6.25High risk912026-06-03
2026.6.24High risk912026-06-03
2026.6.23High risk912026-06-02
2026.6.22High risk912026-06-02
2026.6.21High risk912026-06-02
2026.6.20High risk912026-06-02
2026.6.19High risk912026-06-02
2026.6.18High risk912026-06-02
2026.6.17High risk912026-06-02
2026.6.16High risk912026-06-02
2026.6.15High risk912026-06-02
2026.6.14High risk912026-06-02
2026.6.13High risk912026-06-02
2026.6.12High risk912026-06-02
2026.6.11High risk912026-06-02
2026.6.10High risk912026-06-02
2026.6.9High risk912026-06-02
2026.6.8High risk912026-06-02
2026.6.7High risk912026-06-02
2026.6.6High risk912026-06-02
2026.6.5High risk912026-06-02
2026.6.4High risk912026-06-02
2026.6.2High risk912026-06-02
2026.6.3High risk912026-06-02
2026.6.1High risk912026-06-02
2026.6.0High risk912026-06-02
2026.5.252High risk912026-05-30
2026.5.251High risk912026-05-30
2026.5.250High risk912026-05-30
2026.5.249High risk912026-05-30
2026.5.248High risk912026-05-30
2026.5.247High risk912026-05-30
2026.5.246High risk912026-05-30
2026.5.245High risk912026-05-30
2026.5.244High risk912026-05-30
2026.5.243High risk912026-05-30
2026.5.242High risk912026-05-30
2026.5.241High risk912026-05-30
2026.5.240High risk912026-05-30
2026.5.239High risk912026-05-30
2026.5.238High risk912026-05-30
2026.5.237High risk912026-05-30
2026.5.236High risk912026-05-30

Campaign attribution

Part of the Shai-Hulud (PyPI) campaign.

Block this in CI

PkgRadar gates mindroom (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi mindroom==2026.6.162
Start free — 25 scans / moView full evidence