Composer · packagist.org
volumnet/raas.cms.shop
Php Base64 Eval Chain: base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload.
Why PkgRadar flagged 4.6.3
| Severity | Signal | Evidence |
|---|---|---|
| high | Php Base64 Eval Chain | base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · volumnet-raas.cms.shop-5227388/classes/interfaces/tochkainterface.class.php |
| high | Php Shell With Decode | exec / system / shell_exec combined with base64/hex decode. · volumnet-raas.cms.shop-5227388/classes/interfaces/tochkainterface.class.php |
| medium | Remote Payload | matched "cURL " · volumnet-raas.cms.shop-5227388/classes/forms-n-tables/editblockymlform.class.php |
| medium | Remote Payload | matched "cURL " · volumnet-raas.cms.shop-5227388/classes/forms-n-tables/editymltypeform.class.php |
| medium | Remote Payload | matched "cURL " · volumnet-raas.cms.shop-5227388/classes/interfaces/ubrrinterface.class.php |
| medium | Remote Payload | matched "cURL " · volumnet-raas.cms.shop-5227388/classes/views/view_web.class.php |
| medium | Remote Payload | matched "cURL " · volumnet-raas.cms.shop-5227388/classes/views/viewsub_dev.class.php |
| medium | Remote Payload | matched "cURL " · volumnet-raas.cms.shop-5227388/tests/src/interfaces/UBRRInterfaceTest.php |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
4.6.3 | Review | 37 | 2026-06-07 |
Block this in CI
pkgradar gate --ecosystem composer volumnet/[email protected]