PyPI · pypi.org

mythril-agent-bgm

Py Install Time Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 0.1.6

Severity	Signal	Evidence
medium	Py Install Time Subprocess	subprocess call — process spawning. · mythril_agent_bgm-0.1.6/mythril_agent_bgm/commands/setup.py
high	Python Bun Js Exec	Python file references the Bun JavaScript runtime — cross-language execution · mythril_agent_bgm-0.1.6/mythril_agent_bgm/commands/integrations/opencode.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.1.6`	High risk	90	2026-06-10
`0.1.5`	Review	50	2026-05-30

Campaign attribution

Part of the Shai-Hulud (PyPI) campaign.

Block this in CI

PkgRadar gates mythril-agent-bgm (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi mythril-agent-bgm==0.1.6