PkgRadar

PyPI · pypi.org

nesso-cli

Remote Payload: matched "curl "

Why PkgRadar flagged 0.24.1

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · nesso_cli-0.24.1/src/nesso_cli/models/templates/prepare.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
0.24.1Review62026-06-15
0.24.0Review62026-06-11
0.23.0Review62026-06-01
0.22.1Review82026-05-28

Block this in CI

PkgRadar gates nesso-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi nesso-cli==0.24.1