PkgRadar

PyPI · pypi.org

secator

DNS / OAST exfiltration: matched "oast.pro"

Why PkgRadar flagged 0.36.4

SeveritySignalEvidence
highDNS / OAST exfiltrationmatched "oast.pro" · secator-0.36.4/secator/tasks/nuclei.py
mediumPy Import Time Eval ExecPython eval()/exec() called on a string. · secator-0.36.4/secator/tasks/__init__.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.36.4High risk272026-06-16
0.36.3High risk272026-06-15
0.36.2High risk272026-06-15
0.36.1High risk272026-06-15
0.36.0High risk272026-06-12
0.35.0High risk272026-06-10
0.34.0High risk272026-06-06
0.33.0High risk272026-06-02

Block this in CI

PkgRadar gates secator (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi secator==0.36.4
Start free — 25 scans / moView full evidence