Composer · packagist.org

vortos/vortos-framework

Php Base64 Eval Chain, Php Shell With Decode, Remote Payload +2 more

Why PkgRadar flagged v1.0.0-alpha-320

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.0.0-alpha-320`	High risk	139	2026-08-01
`v1.0.0-alpha-319`	High risk	139	2026-07-31
`v1.0.0-alpha-310`	High risk	139	2026-07-29
`v1.0.0-alpha-309`	High risk	139	2026-07-29
`v1.0.0-alpha-307`	High risk	139	2026-07-28
`v1.0.0-alpha-305`	High risk	139	2026-07-28
`v1.0.0-alpha-303`	High risk	139	2026-07-28
`v1.0.0-alpha-302`	High risk	139	2026-07-28
`v1.0.0-alpha-301`	High risk	139	2026-07-28
`v1.0.0-alpha-299`	High risk	139	2026-07-28
`v1.0.0-alpha-300`	High risk	139	2026-07-28
`v1.0.0-alpha-298`	High risk	139	2026-07-28
`v1.0.0-alpha-297`	High risk	134	2026-07-27
`v1.0.0-alpha-292`	High risk

Block this in CI

PkgRadar gates vortos/vortos-framework (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer vortos/[email protected]