PkgRadar

PyPI · pypi.org

kubsome

Py Runtime Base64 Decode: base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern.

Why PkgRadar flagged 1.13.32

SeveritySignalEvidence
highPy Runtime Base64 Decodebase64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · kubsome-1.13.32/core/collectors/configs.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.13.32High risk302026-06-14
1.13.31High risk302026-06-14
1.13.30High risk502026-06-11
1.13.26High risk502026-05-30
1.13.25High risk502026-05-30
1.13.24High risk502026-05-30

Block this in CI

PkgRadar gates kubsome (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi kubsome==1.13.32
Start free — 25 scans / moView full evidence