PkgRadar

PyPI · pypi.org

gamesentenceminer

Py Runtime Base64 Decode: base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern.

Why PkgRadar flagged 2026.6.10

SeveritySignalEvidence
highPy Runtime Base64 Decodebase64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · gamesentenceminer-2026.6.10/GameSentenceMiner/obs_old.py

Scanned versions

VersionVerdictScoreScanned (UTC)
2026.6.10High risk152026-06-08
2026.6.9High risk152026-06-03
2026.6.8High risk152026-06-03
2026.6.7High risk152026-06-02
2026.6.6High risk152026-06-02
2026.6.5High risk152026-06-02
2026.6.4High risk152026-06-02
2026.6.3High risk152026-06-02
2026.6.2High risk152026-06-01
2026.6.1High risk152026-06-01
2026.5.12High risk152026-06-01
2026.5.11High risk152026-05-31
2026.5.10High risk152026-05-30
2026.5.9High risk152026-05-30
2026.5.8High risk152026-05-30

Block this in CI

PkgRadar gates gamesentenceminer (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi gamesentenceminer==2026.6.10