Composer · packagist.org

glueful/framework

Php Base64 Eval Chain, Php Backtick With Decode, Remote Payload +2 more

Why PkgRadar flagged v1.74.1

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.74.1`	High risk	67	2026-07-30
`v1.74.0`	High risk	67	2026-07-30
`v1.73.0`	High risk	67	2026-07-29
`v1.72.1`	High risk	67	2026-07-26
`v1.72.0`	High risk	67	2026-07-26
`v1.71.3`	High risk	67	2026-07-26
`v1.71.2`	High risk	67	2026-07-22
`v1.71.1`	High risk	67	2026-07-22
`v1.71.0`	High risk	67	2026-07-20
`v1.69.0`	High risk	67	2026-07-14
`v1.68.0`	High risk	67	2026-07-10
`v1.67.0`	High risk	59	2026-07-10
`v1.66.3`	High risk	59	2026-07-06
`v1.66.1`	High risk	59	2026-07-06
`v1.66.0`	High risk	59	2026-07-06

Block this in CI

PkgRadar gates glueful/framework (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer glueful/[email protected]