PkgRadar

Composer · packagist.org

yrodevgit/ctrx

Php Base64 Eval Chain: base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload.

Why PkgRadar flagged v2.8.4

SeveritySignalEvidence
highPhp Base64 Eval Chainbase64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · YroDevGit-ctrx-a216303/app/php/mail/PHPMailer/src/PHPMailer.php
highPhp Shell With Decodeexec / system / shell_exec combined with base64/hex decode. · YroDevGit-ctrx-a216303/app/php/mail/PHPMailer/src/PHPMailer.php
highPhp Backtick With DecodeBacktick shell-out combined with base64/hex decode. · YroDevGit-ctrx-a216303/app/php/mail/PHPMailer/src/PHPMailer.php
mediumRemote Payloadmatched "raw.githubusercontent.com" · YroDevGit-ctrx-a216303/app/php/core/partials/command.php

Scanned versions

VersionVerdictScoreScanned (UTC)
v2.8.4High risk1222026-06-17
v2.8.3High risk1222026-06-17
v2.8.2High risk1222026-06-17
v2.8High risk1222026-06-16
v2.8.1High risk1222026-06-16
v2.7.9High risk1222026-06-15
v2.7.8High risk1222026-06-15
v2.7.6High risk1222026-06-15
v2.7.4High risk1222026-06-14
v2.7.5High risk1222026-06-14
v2.7.3High risk1222026-06-14
v2.7.1High risk1222026-06-14
v2.7.2High risk1222026-06-14
v2.7High risk1222026-06-13
v2.6.9High risk1222026-06-13
v2.6.7High risk1222026-06-12
v2.6.8High risk1222026-06-12
v2.6.6High risk1222026-06-12
v2.6.5High risk1222026-06-12
v2.6.2High risk1222026-06-11
v2.6.3High risk1222026-06-11
v2.6High risk1222026-06-11
v2.5.8High risk1222026-06-11
v2.5.9High risk1222026-06-11
v2.5.7High risk1222026-06-11
v2.5.5High risk1222026-06-11
v2.5.6High risk1222026-06-11
v2.5.1High risk1222026-06-11
v2.5.2High risk1222026-06-11
v2.5.3High risk1222026-06-11
v2.4.9High risk1222026-06-09
v2.5High risk1222026-06-09
v2.4.7High risk1222026-06-09
v2.4.6High risk1222026-06-09
v2.4.5High risk1222026-06-09
v2.4.4High risk1222026-06-08
v2.4.3High risk1222026-06-05
v2.4.2High risk1222026-06-04
v2.4.1High risk1222026-06-04
v2.4High risk1222026-06-04
v2.3.9High risk1222026-06-03
v2.3.7High risk1222026-06-03
v2.3.4High risk1222026-06-03
v2.3.3High risk1222026-06-01
v2.3.2High risk1222026-06-01
v2.2.9High risk1222026-05-31
v2.3.1High risk1222026-05-31
v2.2.3High risk1222026-05-30
v2.1High risk1222026-05-30
v2.0High risk1222026-05-30
v1.9.9High risk1222026-05-30
v1.9.5High risk1222026-05-30
v1.9.8High risk1222026-05-30
v1.9.7High risk1222026-05-30
v1.9.6High risk1222026-05-30
v1.9.3High risk1222026-05-30

Block this in CI

PkgRadar gates yrodevgit/ctrx (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer yrodevgit/[email protected]
Start free — 25 scans / moView full evidence