Composer · packagist.org

ephenyxdigital/quantumcore

Php Base64 Eval Chain: base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload.

Why PkgRadar flagged 2.4.1

Severity	Signal	Evidence
high	Php Base64 Eval Chain	base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · ephenyxdigital-quantumcore-c8b8fed/src/classes/License/License.php
high	Php Base64 Eval Chain	base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · ephenyxdigital-quantumcore-c8b8fed/src/classes/PhenyxTool.php
high	Php Base64 Eval Chain	base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · ephenyxdigital-quantumcore-c8b8fed/src/classes/PhenyxTools.php
high	Php Base64 Eval Chain	base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · ephenyxdigital-quantumcore-c8b8fed/src/classes/Tools.php
high	Php Base64 Eval Chain	base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · ephenyxdigital-quantumcore-c8b8fed/src/classes/composer/ComposerShortCodeUniversalAdmin.php
high	Php Base64 Eval Chain	base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · ephenyxdigital-quantumcore-c8b8fed/src/classes/revslider/PclZip.php
high	Php Base64 Eval Chain	base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · ephenyxdigital-quantumcore-c8b8fed/src/classes/revslider/RevLoader.php
high	Php Remote Fetch Exec Combo	Remote fetch (file_get_contents/curl) paired with eval/exec — fetch-and-run pattern. · ephenyxdigital-quantumcore-c8b8fed/src/classes/GsiteMap.php
high	Php Remote Fetch Exec Combo	Remote fetch (file_get_contents/curl) paired with eval/exec — fetch-and-run pattern. · ephenyxdigital-quantumcore-c8b8fed/src/classes/PhenyxTool.php
high	Php Backtick With Decode	Backtick shell-out combined with base64/hex decode. · ephenyxdigital-quantumcore-c8b8fed/src/classes/License/License.php
high	Php Shell With Decode	exec / system / shell_exec combined with base64/hex decode. · ephenyxdigital-quantumcore-c8b8fed/src/classes/PhenyxTool.php
high	Php Backtick With Decode	Backtick shell-out combined with base64/hex decode. · ephenyxdigital-quantumcore-c8b8fed/src/classes/PhenyxTool.php

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`2.4.1`	High risk	182	2026-06-13
`2.3.9`	High risk	182	2026-06-12
`2.3.7`	High risk	182	2026-05-30

Related campaigns

Jeff Hunger — 3 releases, max score 182

Block this in CI

PkgRadar gates ephenyxdigital/quantumcore (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer ephenyxdigital/[email protected]

Start free — 25 scans / mo View full evidence