PkgRadar

PyPI · pypi.org

claude-swap

Py Runtime Base64 Decode: base64/hex decode combined with exec/subprocess in the same file — obfuscated-payload pattern.

Why PkgRadar flagged 0.11.1

SeveritySignalEvidence
mediumPy Runtime Base64 Decodebase64/hex decode combined with exec/subprocess in the same file — obfuscated-payload pattern. · claude_swap-0.11.1/src/claude_swap/switcher.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.13.1Low risk02026-06-13
0.13.0Low risk02026-06-12
0.12.0Low risk02026-06-12
0.11.1Review152026-06-05
0.11.0Review152026-06-04
0.11.0b1Review152026-06-03

Block this in CI

PkgRadar gates claude-swap (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi claude-swap==0.11.1