Composer · packagist.org

nitro/framework

Php Base64 Eval Chain, Php Shell With Decode, Remote Payload +1 more

Why PkgRadar flagged v0.21.0

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.21.0`	High risk	23	2026-07-12
`v0.19.1`	High risk	17	2026-07-12
`v0.19.0`	High risk	16	2026-07-11
`v0.18.0`	High risk	14	2026-07-10
`v0.17.0`	High risk	16	2026-07-10
`v0.15.0`	High risk	13	2026-07-09
`v0.14.13`	Low risk	0	2026-07-09
`v0.14.12`	Low risk	0	2026-07-09
`v0.14.8`	Low risk	0	2026-07-08
`v0.14.7`	Low risk	0	2026-07-07
`v0.14.6`	Low risk	0	2026-07-07
`v0.14.4`	Low risk	0	2026-07-07
`v0.14.0`	Low risk	0	2026-07-07
`v0.14.2`	Low risk	0	2026-07-07
`v0.14.3`	Low risk	0	2026-07-07

Block this in CI

PkgRadar gates nitro/framework (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer nitro/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.