PyPI · pypi.org
omnipkg
Py Install Time Subprocess: subprocess call — process spawning.
Why PkgRadar flagged 3.4.1
| Severity | Signal | Evidence |
|---|---|---|
| medium | Py Install Time Subprocess | subprocess call — process spawning. · omnipkg-3.4.1/setup.py |
| medium | Py Install Time Ctypes Load | ctypes.CDLL/cdll.LoadLibrary — loads native code into the process. · omnipkg-3.4.1/setup.py |
| high | Py Runtime Base64 Decode | base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · omnipkg-3.4.1/src/omnipkg/isolation/worker_daemon.py |
| medium | Py Custom Build Backend | Non-standard PEP 517 build-backend `build_hooks` — runs custom code at install time. · pyproject.toml |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
3.4.1 | High risk | 98 | 2026-06-09 |
3.4.0 | High risk | 98 | 2026-06-07 |
3.3.5 | High risk | 66 | 2026-05-30 |
Block this in CI
pkgradar gate --ecosystem pypi omnipkg==3.4.1