PyPI · pypi.org

pulumi-django-azure

Remote Payload: matched "curl "

Why PkgRadar flagged 1.0.74

Severity	Signal	Evidence
medium	Remote Payload	matched "curl " · pulumi_django_azure-1.0.74/src/pulumi_django_azure/django_deployment.py
medium	Credential file access	matched ".azure" · pulumi_django_azure-1.0.74/src/pulumi_django_azure/azure_helper.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.0.75`	Low risk	0	2026-06-09
`1.0.74`	Review	23	2026-05-27
`1.0.73`	Review	23	2026-05-27
`1.0.72`	Review	23	2026-05-27

Block this in CI

PkgRadar gates pulumi-django-azure (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi pulumi-django-azure==1.0.74