PkgRadar

PyPI · pypi.org

naeural-core

Py Runtime Base64 Decode: base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern.

Why PkgRadar flagged 7.7.313

SeveritySignalEvidence
highPy Runtime Base64 Decodebase64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · naeural_core-7.7.313/naeural_core/business/test_framework/test_chain_store_hsync.py
highPy Runtime Base64 Decodebase64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · naeural_core-7.7.313/naeural_core/utils/plugins_base/plugin_base_utils.py
mediumRemote Payloadmatched "curl " · naeural_core-7.7.313/naeural_core/utils/_y5/y5utils/downloads.py
mediumRemote Payloadmatched "curl " · naeural_core-7.7.313/xperimental/th_y5/updates/export.py

Scanned versions

VersionVerdictScoreScanned (UTC)
7.7.313High risk372026-06-12
7.7.312High risk372026-06-12
7.7.310High risk372026-06-10
7.7.309High risk372026-06-08
7.7.308High risk372026-06-08
7.7.307High risk372026-05-30

Block this in CI

PkgRadar gates naeural-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi naeural-core==7.7.313
Start free — 25 scans / moView full evidence
naeural-core — PyPI security scan | PkgRadar