PkgRadar

PyPI · pypi.org

vidura

Remote Payload: matched "cURL "

Why PkgRadar flagged 0.2.12

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · vidura-0.2.12/core/config.py
mediumRemote Payloadmatched "cURL " · vidura-0.2.12/core/validator_engine.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.2.18Low risk02026-06-12
0.2.17Low risk02026-06-12
0.2.16Low risk02026-06-12
0.2.15Low risk02026-06-11
0.2.14Low risk02026-06-01
0.2.13Low risk02026-05-29
0.2.12Review242026-05-27
0.2.11Review242026-05-27
0.2.10Review242026-05-27

Block this in CI

PkgRadar gates vidura (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi vidura==0.2.12
Start free — 25 scans / moView full evidence