PyPI · pypi.org

kicad-monkey

Py Runtime Base64 Decode: base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern.

Why PkgRadar flagged 2026.6.13

Severity	Signal	Evidence
high	Py Runtime Base64 Decode	base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · kicad_monkey-2026.6.13/src/py/kicad_monkey/filter_debug.py
high	Py Runtime Base64 Decode	base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · kicad_monkey-2026.6.13/src/py/kicad_monkey/kicad_schematic_to_ir.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`2026.6.13`	High risk	50	2026-06-13
`2026.6.10`	High risk	50	2026-06-11
`2026.6.3`	High risk	50	2026-06-03
`2026.6.2`	High risk	50	2026-06-02
`2026.5.31`	High risk	50	2026-05-31

Block this in CI

PkgRadar gates kicad-monkey (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi kicad-monkey==2026.6.13