PkgRadar

Composer · packagist.org

particle-academy/dark-slide

Php Base64 Eval Chain: base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload.

Why PkgRadar flagged v0.6.0

SeveritySignalEvidence
highPhp Base64 Eval Chainbase64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · Particle-Academy-dark-slide-821296f/tests/Unit/AgentTest.php
highPhp Backtick With DecodeBacktick shell-out combined with base64/hex decode. · Particle-Academy-dark-slide-821296f/tests/Unit/AgentTest.php

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.6.0High risk752026-06-08
v0.5.2High risk752026-05-30
v0.5.0High risk752026-05-30
v0.5.1High risk752026-05-30
v0.4.2High risk752026-05-30
v0.4.0High risk752026-05-30
v0.4.1High risk752026-05-30

Block this in CI

PkgRadar gates particle-academy/dark-slide (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer particle-academy/[email protected]
Start free — 25 scans / moView full evidence