PkgRadar

PyPI · pypi.org

pulsim

Remote Payload: matched "wget "

Why PkgRadar flagged 1.4.2

SeveritySignalEvidence
mediumRemote Payloadmatched "wget " · pulsim-1.4.2/scripts/setup-linux.sh
mediumRemote Payloadmatched "curl " · pulsim-1.4.2/scripts/setup-macos.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
1.8.0Low risk02026-06-07
1.7.1Low risk02026-06-07
1.7.0Low risk02026-06-03
1.6.6Low risk02026-06-03
1.6.5Low risk02026-05-30
1.6.4Low risk02026-05-29
1.6.2Low risk02026-05-29
1.6.1Low risk02026-05-29
1.4.2Review242026-05-26

Block this in CI

PkgRadar gates pulsim (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi pulsim==1.4.2
Start free — 25 scans / moView full evidence