PkgRadar

Composer · packagist.org

nexphant/server

Php Base64 Eval Chain: base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload.

Why PkgRadar flagged v0.0.6

SeveritySignalEvidence
highPhp Base64 Eval Chainbase64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · nexphant-server-458dd62/src/HttpServer.php
highPhp Shell With Decodeexec / system / shell_exec combined with base64/hex decode. · nexphant-server-458dd62/src/HttpServer.php

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.6High risk752026-06-20
v0.0.5Low risk02026-06-19

Block this in CI

PkgRadar gates nexphant/server (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer nexphant/[email protected]