PyPI · pypi.org

scitex-hub

Remote Payload: matched "wget "

Why PkgRadar flagged 0.18.1

Severity	Signal	Evidence
medium	Remote Payload	matched "wget " · scitex_hub-0.18.1/src/scitex_hub/_cli/_gitea_utils.py
medium	Remote Payload	matched "wget " · scitex_hub-0.18.1/src/scitex_hub/_mcp_tools/gitea.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.18.1`	Review	24	2026-05-31

Block this in CI

PkgRadar gates scitex-hub (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi scitex-hub==0.18.1