PkgRadar

Maven · repo1.maven.org

org.atmosphere:atmosphere-ai

Java Base64 Combo: Base64.decode combined with network / process / defineClass — classic obfuscated payload.

Why PkgRadar flagged 4.0.54

SeveritySignalEvidence
highJava Base64 ComboBase64.decode combined with network / process / defineClass — classic obfuscated payload. · org/atmosphere/ai/code/ContainerCodeSandbox.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · org/atmosphere/ai/code/ContainerCodeSandbox.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · org/atmosphere/ai/code/ContainerCodeSandboxFactory.java

Scanned versions

VersionVerdictScoreScanned (UTC)
4.0.54High risk602026-06-13

Block this in CI

PkgRadar gates org.atmosphere:atmosphere-ai (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem maven org.atmosphere:[email protected]
Start free — 25 scans / moView full evidence