PkgRadar

PyPI · pypi.org

fenrir-framework

Py Runtime Base64 Decode: base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern.

Why PkgRadar flagged 3.1.2

SeveritySignalEvidence
highPy Runtime Base64 Decodebase64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · fenrir_framework-3.1.2/fenrir/bottle.py

Scanned versions

VersionVerdictScoreScanned (UTC)
3.1.2High risk302026-06-15
3.1.1High risk302026-06-14
3.1.0High risk302026-06-14
3.0.0High risk302026-06-13
2.3.5High risk302026-06-11
2.3.4High risk302026-06-11
2.3.3High risk302026-06-11
2.3.2High risk302026-06-11
2.2.2High risk302026-06-09
1.2.2High risk302026-06-04
1.2.1High risk302026-05-30
1.1.1High risk302026-05-30
1.1.0High risk302026-05-30
0.1.0High risk302026-05-30

Block this in CI

PkgRadar gates fenrir-framework (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi fenrir-framework==3.1.2
Start free — 25 scans / moView full evidence