PkgRadar

PyPI · pypi.org

ommlds

Remote Payload: matched "curl "

Why PkgRadar flagged 0.0.21

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · ommlds-0.0.21/ommlds/minichain/backends/anthropic/names.py
mediumRemote Payloadmatched "curl " · ommlds-0.0.21/ommlds/minichain/backends/google/names.py
mediumRemote Payloadmatched "curl " · ommlds-0.0.21/ommlds/minichain/backends/groq/names.py
mediumRemote Payloadmatched "curl " · ommlds-0.0.21/ommlds/minichain/backends/openai/names.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.22Low risk02026-06-04
0.0.21Review332026-05-28
0.0.20Review332026-05-27

Block this in CI

PkgRadar gates ommlds (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi ommlds==0.0.21
Start free — 25 scans / moView full evidence