PkgRadar

Composer · packagist.org

ledark/rbframeworks

Php Base64 Eval Chain: base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload.

Why PkgRadar flagged v0.4.4

SeveritySignalEvidence
highPhp Base64 Eval Chainbase64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · ledark-rbframework-classes-7f34f55/src/v3/TestsTrait.php
highPhp Shell With Decodeexec / system / shell_exec combined with base64/hex decode. · ledark-rbframework-classes-7f34f55/src/v3/TestsTrait.php

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.4.4Review222026-06-11

Block this in CI

PkgRadar gates ledark/rbframeworks (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer ledark/[email protected]