PkgRadar

PyPI · pypi.org

matplobbot-shared

Py Runtime Base64 Decode: base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern.

Why PkgRadar flagged 0.1.313

SeveritySignalEvidence
highPy Runtime Base64 Decodebase64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · matplobbot_shared-0.1.313/shared_lib/tasks.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.313High risk212026-06-12
0.1.312High risk212026-06-10
0.1.311High risk212026-05-30

Block this in CI

PkgRadar gates matplobbot-shared (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi matplobbot-shared==0.1.313