Composer · packagist.org

leazycms/web

Php Base64 Eval Chain, Decode Literal Exec, Php Shell With Decode +2 more

Why PkgRadar flagged v1.70

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.70`	High risk	162	2026-07-31
`v1.71`	High risk	162	2026-07-31
`v1.68`	High risk	150	2026-07-30
`v1.69`	High risk	150	2026-07-30
`v1.67`	High risk	150	2026-07-30
`v1.65`	High risk	150	2026-07-29
`v1.66`	High risk	150	2026-07-29
`v1.61`	High risk	150	2026-07-29
`v1.60`	High risk	150	2026-07-29
`v1.41`	High risk	150	2026-07-21
`v1.39`	High risk	150	2026-07-20
`v1.37`	High risk	150	2026-07-20
`v1.35`	High risk	150	2026-07-19
`v1.31`	High risk	150	2026-07-13
`v1.30`	High risk	150	2026-07-12
`v1.29`

Block this in CI

PkgRadar gates leazycms/web (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer leazycms/[email protected]