PyPI · pypi.org

animica

Py Runtime Base64 Decode: base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern.

Why PkgRadar flagged 0.4.6

Severity	Signal	Evidence
high	Py Runtime Base64 Decode	base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · animica-0.4.6/_build_vendor/agent_runtime/aicf_worker.py
high	Py Runtime Dynamic Dangerous Import	Dynamic __import__('os') — reflection bypass for static checks. · animica-0.4.6/_build_vendor/coretx/crypto.py
high	Py Runtime Base64 Decode	base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · animica-0.4.6/animica/contracts/artifacts.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.4.6`	High risk	83	2026-06-13
`0.4.5`	High risk	83	2026-06-06
`0.4.4`	High risk	83	2026-06-06
`0.4.3`	High risk	83	2026-06-05
`0.4.2`	High risk	83	2026-06-04
`0.4.1`	High risk	83	2026-06-04
`0.4.0`	High risk	83	2026-06-04
`0.3.13`	High risk	83	2026-06-03
`0.3.12`	High risk	83	2026-06-03
`0.3.11`	High risk	83	2026-06-03
`0.3.10`	High risk	83	2026-06-01
`0.3.9`	High risk	83	2026-06-01
`0.3.8`	High risk	83	2026-06-01
`0.3.7`	High risk	83	2026-06-01
`0.3.6`	High risk	83	2026-06-01
`0.3.5`	High risk	83	2026-05-31
`0.3.4`	High risk	83	2026-05-31
`0.3.3`	High risk	83	2026-05-31
`0.3.2`	High risk	83	2026-05-31
`0.3.1`	High risk	83	2026-05-31
`0.3.0`	High risk	83	2026-05-31
`0.2.0`	High risk	83	2026-05-30
`0.1.70`	High risk	83	2026-05-30
`0.1.69`	High risk	83	2026-05-30
`0.1.68`	High risk	83	2026-05-30
`0.1.67`	High risk	83	2026-05-30
`0.1.66`	High risk	83	2026-05-30
`0.1.65`	High risk	63	2026-05-30
`0.1.64`	High risk	30	2026-05-30

Block this in CI

PkgRadar gates animica (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi animica==0.4.6