PkgRadar

Composer · packagist.org

mirandaleyva/contao-architecture_references

Php Base64 Eval Chain: base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload.

Why PkgRadar flagged v1.3.3

SeveritySignalEvidence
highPhp Base64 Eval Chainbase64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · mirandaleyva-contao-architecture_references-13825b6/vendor/clue/stream-filter/src/functions.php
highPhp Base64 Eval Chainbase64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · mirandaleyva-contao-architecture_references-13825b6/vendor/league/uri/Uri.php
highPhp Assert String Execassert() called with a variable — PHP's deprecated string-exec backdoor. · mirandaleyva-contao-architecture_references-13825b6/vendor/clue/stream-filter/src/functions.php
highPhp Backtick With DecodeBacktick shell-out combined with base64/hex decode. · mirandaleyva-contao-architecture_references-13825b6/vendor/league/uri/Uri.php

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.3.3High risk1202026-06-05
v1.3.4High risk1202026-06-05
v1.3.2High risk1202026-06-03
v1.2.3High risk1202026-05-30
v1.2.4High risk1202026-05-30

Block this in CI

PkgRadar gates mirandaleyva/contao-architecture_references (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer mirandaleyva/[email protected]
Start free — 25 scans / moView full evidence
mirandaleyva/contao-architecture_references — Composer security scan | PkgRadar