PkgRadar

PyPI · pypi.org

pipeline-check

Webhook Exfil Endpoint: matched "webhook.site"

Why PkgRadar flagged 1.14.1

SeveritySignalEvidence
highWebhook Exfil Endpointmatched "webhook.site" · pipeline_check-1.14.1/pipeline_check/core/checks/_malicious.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · pipeline_check-1.14.1/pipeline_check/core/checks/_primitives/remote_script_exec.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · pipeline_check-1.14.1/pipeline_check/core/checks/_primitives/top_actions.py
highWebhook Exfil Endpointmatched "webhook.site" · pipeline_check-1.14.1/pipeline_check/core/checks/aws/rules/cb011_malicious_buildspec.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · pipeline_check-1.14.1/pipeline_check/core/checks/azure/rules/ado016_curl_pipe.py
highWebhook Exfil Endpointmatched "webhook.site" · pipeline_check-1.14.1/pipeline_check/core/checks/azure/rules/ado026_malicious_activity.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · pipeline_check-1.14.1/pipeline_check/core/checks/bitbucket/rules/bb012_curl_pipe.py
highWebhook Exfil Endpointmatched "webhook.site" · pipeline_check-1.14.1/pipeline_check/core/checks/bitbucket/rules/bb025_malicious_activity.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · pipeline_check-1.14.1/pipeline_check/core/checks/bitbucket/rules/bb030_npm_audit_signatures.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · pipeline_check-1.14.1/pipeline_check/core/checks/circleci/rules/cc016_curl_pipe.py
highWebhook Exfil Endpointmatched "webhook.site" · pipeline_check-1.14.1/pipeline_check/core/checks/circleci/rules/cc026_malicious_activity.py
highWebhook Exfil Endpointmatched "webhook.site" · pipeline_check-1.14.1/pipeline_check/core/checks/cloudbuild/rules/gcb027_malicious_activity.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.14.1High risk2052026-06-13
1.14.0High risk2052026-06-13
1.13.0High risk2052026-06-09
1.12.0High risk1552026-06-08
1.11.0High risk1552026-06-06
1.9.0High risk1552026-06-03
1.8.0High risk1552026-06-03
1.7.1High risk1552026-06-01
1.7.0High risk1552026-05-30
1.6.0High risk1552026-05-30
1.5.0High risk1502026-05-30

Campaign attribution

Part of the Shai-Hulud (PyPI) campaign.

Block this in CI

PkgRadar gates pipeline-check (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi pipeline-check==1.14.1