PkgRadar

PyPI · pypi.org

nvidia-nat-core

Py Runtime Base64 Decode: base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern.

Why PkgRadar flagged 1.9.0a20260617

SeveritySignalEvidence
highPy Runtime Base64 Decodebase64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · nat/registry_handlers/rest/rest_handler.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.9.0a20260617High risk352026-06-17
1.8.0High risk352026-06-17
1.8.0a20260616High risk352026-06-16
1.9.0a20260616High risk352026-06-16
1.8.0a20260615High risk352026-06-15
1.9.0a20260615High risk352026-06-15
1.8.0rc7High risk352026-06-15
1.8.0a20260614High risk352026-06-14
1.9.0a20260614High risk352026-06-14
1.8.0a20260613High risk352026-06-13
1.9.0a20260613High risk352026-06-13
1.8.0rc6High risk352026-06-12
1.8.0a20260612High risk352026-06-12
1.9.0a20260612High risk352026-06-12
1.8.0rc5High risk352026-06-12
1.8.0a20260611High risk352026-06-11
1.9.0a20260611High risk352026-06-11
1.8.0rc4High risk352026-06-11
1.8.0a20260610High risk352026-06-10
1.9.0a20260610High risk352026-06-10
1.8.0rc3High risk352026-06-10
1.8.0a20260609High risk352026-06-09
1.9.0a20260609High risk352026-06-09
1.8.0rc2High risk352026-06-09
1.8.0a20260608High risk352026-06-08
1.9.0a20260608High risk352026-06-08
1.8.0a20260607High risk352026-06-07
1.9.0a20260607High risk352026-06-07
1.8.0rc1High risk352026-06-06
1.8.0a20260606High risk352026-06-06
1.9.0a20260606High risk352026-06-06
1.8.0a20260605High risk352026-06-05
1.8.0a20260604High risk352026-06-04
1.8.0a20260603High risk352026-06-03
1.8.0a20260602High risk352026-06-02
1.8.0a20260601High risk352026-06-01
1.8.0a20260531High risk352026-05-31
1.8.0a20260530High risk352026-05-30
1.8.0a20260529High risk352026-05-30
1.8.0a20260528High risk352026-05-30
1.8.0a20260527High risk352026-05-30

Block this in CI

PkgRadar gates nvidia-nat-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi nvidia-nat-core==1.9.0a20260617