PkgRadar

PyPI · pypi.org

quicksilverpro

Remote Payload: matched "curl "

Why PkgRadar flagged 0.2.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · quicksilverpro-0.2.0/.github/workflows/publish.yml

Scanned versions

VersionVerdictScoreScanned (UTC)
0.2.0Review122026-05-27

Block this in CI

PkgRadar gates quicksilverpro (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi quicksilverpro==0.2.0