Composer · packagist.org
lansd/ldlib
Php Base64 Eval Chain: base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload.
Why PkgRadar flagged 0.23.0
| Severity | Signal | Evidence |
|---|---|---|
| high | Php Base64 Eval Chain | base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · Lans-D-99-LDLib-ae0489f/src/Swoole/WSServer.php |
| high | Php Shell With Decode | exec / system / shell_exec combined with base64/hex decode. · Lans-D-99-LDLib-ae0489f/src/Swoole/WSServer.php |
| medium | Remote Payload | matched "CURL " · Lans-D-99-LDLib-ae0489f/src/AWS.php |
| medium | Remote Payload | matched "api.github.com/graphql" · Lans-D-99-LDLib-ae0489f/src/Git/Github.php |
| medium | Remote Payload | matched "CURL " · Lans-D-99-LDLib-ae0489f/src/PostHog.php |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.23.0 | High risk | 58 | 2026-06-13 |
Block this in CI
pkgradar gate --ecosystem composer lansd/[email protected]