Pub (Dart) · pub.dev
adk_dart
Dart Process Base64 Combo: Process spawn paired with base64Decode — possible obfuscated payload.
Why PkgRadar flagged 2026.6.6
| Severity | Signal | Evidence |
|---|---|---|
| medium | Dart Process Base64 Combo | Process spawn paired with base64Decode — possible obfuscated payload. · lib/src/code_executors/vertex_ai_code_executor.dart |
| medium | Dart Process Base64 Combo | Process spawn paired with base64Decode — possible obfuscated payload. · lib/src/code_executors/container_code_executor.dart |
| medium | Dart Process Base64 Combo | Process spawn paired with base64Decode — possible obfuscated payload. · lib/src/code_executors/unsafe_local_code_executor.dart |
| medium | Dart Process Base64 Combo | Process spawn paired with base64Decode — possible obfuscated payload. · lib/src/code_executors/agent_engine_sandbox_code_executor.dart |
| medium | Dart Process Base64 Combo | Process spawn paired with base64Decode — possible obfuscated payload. · lib/src/code_executors/gke_code_executor.dart |
| medium | Dart Process Http Combo | Process spawn paired with HTTP fetch — typical fetch-and-run shape. · lib/src/tools/_google_access_token.dart |
| medium | Dart Process Http Combo | Process spawn paired with HTTP fetch — typical fetch-and-run shape. · lib/src/tools/spanner/utils.dart |
| medium | Remote Payload | matched "cUrl " · lib/src/a2a/utils/agent_card_builder.dart |
| medium | Remote Payload | matched "cUrl " · lib/src/a2a/protocol.dart |
| medium | Remote Payload | matched "curl " · lib/src/tools/spanner/admin_tool.dart |
| medium | Remote Payload | matched "curl " · lib/src/tools/spanner/client.dart |
| medium | Remote Payload | matched "curl " · lib/src/tools/bigquery/client.dart |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2026.6.6 | High risk | 158 | 2026-06-06 |
Block this in CI
pkgradar gate --ecosystem pub [email protected]