PyPI · pypi.org

tos

Py Name Typosquat: Name `tos` is one edit away from popular package `tox` — likely typosquat.

Why PkgRadar flagged 2.9.4b1

Severity	Signal	Evidence
high	Py Name Typosquat	Name `tos` is one edit away from popular package `tox` — likely typosquat.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`2.9.4b1`	High risk	20	2026-06-08
`2.9.2`	High risk	20	2026-06-03

Block this in CI

PkgRadar gates tos (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi tos==2.9.4b1