Composer · packagist.org

sibidharan/zealphp

Php Base64 Eval Chain: base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload.

Why PkgRadar flagged v0.4.9

Severity	Signal	Evidence
high	Php Base64 Eval Chain	base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · sibidharan-zealphp-fecab71/src/App.php
high	Php Base64 Eval Chain	base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · sibidharan-zealphp-fecab71/src/CGI/WorkerPool.php
high	Php Base64 Eval Chain	base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · sibidharan-zealphp-fecab71/src/Middleware/BasicAuthMiddleware.php
high	Php Base64 Eval Chain	base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · sibidharan-zealphp-fecab71/src/fork_master.php
high	Php Base64 Eval Chain	base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · sibidharan-zealphp-fecab71/src/pool_worker.php
high	Php Base64 Eval Chain	base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · sibidharan-zealphp-fecab71/tests/Unit/CompressionMiddlewareTest.php
high	Php Base64 Eval Chain	base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · sibidharan-zealphp-fecab71/tests/Unit/Middleware/CompressionExtraTest.php
high	Php Remote Fetch Exec Combo	Remote fetch (file_get_contents/curl) paired with eval/exec — fetch-and-run pattern. · sibidharan-zealphp-fecab71/src/utils.php
high	Php Remote Fetch Exec Combo	Remote fetch (file_get_contents/curl) paired with eval/exec — fetch-and-run pattern. · sibidharan-zealphp-fecab71/tests/Integration/CoroutineIsolationContractTest.php
high	Php Remote Fetch Exec Combo	Remote fetch (file_get_contents/curl) paired with eval/exec — fetch-and-run pattern. · sibidharan-zealphp-fecab71/tests/Integration/CoroutineLegacyBehaviorTest.php
high	Php Remote Fetch Exec Combo	Remote fetch (file_get_contents/curl) paired with eval/exec — fetch-and-run pattern. · sibidharan-zealphp-fecab71/tests/Integration/PhpInputIsolationTest.php
high	Php Remote Fetch Exec Combo	Remote fetch (file_get_contents/curl) paired with eval/exec — fetch-and-run pattern. · sibidharan-zealphp-fecab71/tests/Integration/TrustBarIsolationTest.php

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.4.9`	High risk	186	2026-06-13
`v0.4.8`	High risk	186	2026-06-10
`v0.4.6`	High risk	186	2026-06-10
`v0.4.5`	High risk	186	2026-06-09
`v0.4.4`	High risk	186	2026-06-06
`v0.4.3`	High risk	186	2026-06-06
`v0.4.2`	High risk	186	2026-06-05
`v0.4.1`	High risk	186	2026-06-04
`v0.4.0`	High risk	186	2026-06-04
`v0.3.7`	High risk	186	2026-06-01
`v0.3.5`	High risk	186	2026-05-30

Block this in CI

PkgRadar gates sibidharan/zealphp (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer sibidharan/[email protected]

Start free — 25 scans / mo View full evidence