PkgRadar

PyPI · pypi.org

modastack

Remote Payload: matched "curl "

Why PkgRadar flagged 0.7.1

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · modastack-0.7.1/deploy/auto-deploy.sh
mediumRemote Payloadmatched "curl " · modastack-0.7.1/deploy/setup-ci-runner.sh
mediumRemote Payloadmatched "curl " · modastack-0.7.1/deploy/update-webhooks.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
0.7.1High risk362026-06-05
0.7.0Review242026-06-05
0.6.1Review242026-06-05
0.6.0Review242026-06-04
0.5.0Review242026-06-04
0.2.0Review242026-06-04

Block this in CI

PkgRadar gates modastack (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi modastack==0.7.1