Security warning from Mend.io: dydx-v4-client python flagged as malicious (MSC-2026-1450)

[kolxz2]

While adding the dependency to my project via pyproject.toml, I’m getting a security warning from Mend.io during dependency analysis.
Dependency declaration:
"dydx-v4-client>=1.1.5"

Reported issue:
Dependency pypi:dydx-v4-client:0.0.0-ANY is malicious
MSC-2026-1450
Severity: 9.8 (Embedded Malicious Code)
Results powered by Mend.io

Because of this, automated security checks block the dependency installation.
Could you please clarify:

• Is this a false positive?
• Has this issue already been investigated with Mend.io / PyPI?
• Is there a recommended version or workaround at the moment?
• Thanks in advance for the clarification and for maintaining the library.

[linear]

GH-188