Composer · packagist.org
igkdev/balafon
Php Base64 Eval Chain: base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload.
Why PkgRadar flagged v2026.0.0.0618
| Severity | Signal | Evidence |
|---|---|---|
| high | Php Base64 Eval Chain | base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · goukenn-igkdev-balafon-309d2ed/src/Lib/igk/Lib/Classes/System/Configuration/Controllers/ControllerAndArticlesController.php |
| high | Php Base64 Eval Chain | base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · goukenn-igkdev-balafon-309d2ed/src/Lib/igk/igk_functions.php |
| high | Php Shell With Decode | exec / system / shell_exec combined with base64/hex decode. · goukenn-igkdev-balafon-309d2ed/src/Lib/igk/Lib/Classes/System/Configuration/Controllers/ControllerAndArticlesController.php |
| high | Php Shell With Decode | exec / system / shell_exec combined with base64/hex decode. · goukenn-igkdev-balafon-309d2ed/src/Lib/igk/igk_functions.php |
| high | Php Backtick With Decode | Backtick shell-out combined with base64/hex decode. · goukenn-igkdev-balafon-309d2ed/src/Lib/igk/igk_functions.php |
| medium | Remote Payload | matched "curl " · goukenn-igkdev-balafon-309d2ed/src/Lib/igk/Lib/Classes/System/Console/Commands/CoreUpdateLibCommand.php |
| medium | Remote Payload | matched "curl " · goukenn-igkdev-balafon-309d2ed/src/Lib/igk/Lib/Classes/System/Console/Commands/Sync/SyncModuleCommand.php |
| medium | Remote Payload | matched "curl " · goukenn-igkdev-balafon-309d2ed/src/Lib/igk/Lib/Classes/System/Console/Commands/Sync/SyncProjectCommand.php |
| medium | Remote Payload | matched "curl " · goukenn-igkdev-balafon-309d2ed/src/Lib/igk/Lib/Classes/System/Console/Commands/Sync/SyncUpdateCoreLibCommand.php |
| medium | Remote Payload | matched "curl " · goukenn-igkdev-balafon-309d2ed/src/Lib/igk/Lib/Classes/System/Requirement.php |
| medium | Remote Payload | matched "curl " · goukenn-igkdev-balafon-309d2ed/src/Lib/igk/Lib/Classes/System/Runtime/Compiler/Traits/CompilerTokenTrait.php |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v2026.0.0.0618 | High risk | 111 | 2026-06-20 |
Block this in CI
pkgradar gate --ecosystem composer igkdev/[email protected]