PyPI · pypi.org
ai-forge-cli
Py Runtime Base64 Decode: base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern.
Why PkgRadar flagged 2.1.13
| Severity | Signal | Evidence |
|---|---|---|
| high | Py Runtime Base64 Decode | base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · ai_forge_cli-2.1.13/src/cli/resources/skills/forge-security/anthropic_cybersecurity_skills_reference/skills/analyzing-powershell-empire-artifacts/scripts/agent.py |
| high | Py Runtime Base64 Decode | base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · ai_forge_cli-2.1.13/src/cli/resources/skills/forge-security/anthropic_cybersecurity_skills_reference/skills/detecting-suspicious-powershell-execution/scripts/agent.py |
| high | Py Runtime Base64 Decode | base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · ai_forge_cli-2.1.13/src/cli/resources/skills/forge-security/anthropic_cybersecurity_skills_reference/skills/implementing-mimecast-targeted-attack-protection/scripts/agent.py |
| medium | Remote Payload | matched "curl " · ai_forge_cli-2.1.13/src/cli/resources/skills/forge-build/coding_agent_skills_reference/hooks/sdd-cache-post.sh |
| medium | Remote Payload | matched "curl " · ai_forge_cli-2.1.13/src/cli/resources/skills/forge-build/coding_agent_skills_reference/hooks/sdd-cache-pre.sh |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
3.0.2 | Review | 50 | 2026-06-05 |
3.0.1 | Review | 50 | 2026-06-05 |
3.0.0 | Review | 50 | 2026-06-05 |
2.1.13 | High risk | 74 | 2026-05-31 |
Block this in CI
pkgradar gate --ecosystem pypi ai-forge-cli==2.1.13