PkgRadar

PyPI · pypi.org

stackops

Python Bun Js Exec: Python file references the Bun JavaScript runtime — cross-language execution

Why PkgRadar flagged 26.6.4

SeveritySignalEvidence
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · stackops-26.6.4/src/stackops/cluster/sessions_managers/windows_terminal/wt_local_manager_demo.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · stackops-26.6.4/src/stackops/scripts/python/agents.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · stackops-26.6.4/src/stackops/scripts/python/helpers/helpers_agents/agents_browser_impl.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · stackops-26.6.4/src/stackops/scripts/python/helpers/helpers_agents/agents_mcp_impl.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · stackops-26.6.4/src/stackops/scripts/python/helpers/helpers_agents/agents_skill_impl.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · stackops-26.6.4/src/stackops/scripts/python/helpers/helpers_devops/interactive.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · stackops-26.6.4/src/stackops/scripts/python/helpers/helpers_preview/start_slidev.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · stackops-26.6.4/src/stackops/utils/installer_utils/install_request_logic.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · stackops-26.6.4/src/stackops/utils/installer_utils/installer_class.py
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · stackops-26.6.4/src/stackops/utils/installer_utils/installer_locator_utils.py
mediumRemote Payloadmatched "curl " · stackops-26.6.4/src/stackops/jobs/installer/linux_scripts/cloudflare_warp_cli.sh
mediumRemote Payloadmatched "curl " · stackops-26.6.4/src/stackops/jobs/installer/linux_scripts/edge.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
26.6.4High risk1522026-06-13
26.6.3High risk1622026-06-12
26.6.2High risk1652026-06-10
26.6.1High risk1652026-06-09
26.6High risk1202026-06-09
8.104High risk1202026-06-08
8.103High risk1152026-06-06
8.101High risk1072026-05-30
8.100High risk1072026-05-30
8.102Review1072026-05-30

Campaign attribution

Part of the Shai-Hulud (PyPI) campaign.

Block this in CI

PkgRadar gates stackops (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi stackops==26.6.4