PyPI · pypi.org
omdev
Py Runtime Base64 Decode: base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern.
Why PkgRadar flagged 0.0.21
| Severity | Signal | Evidence |
|---|---|---|
| high | Py Runtime Base64 Decode | base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · omdev-0.0.21/omdev/manifests/_dumping.py |
| high | Py Runtime Base64 Decode | base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · omdev-0.0.21/omdev/scripts/ci.py |
| high | Py Runtime Base64 Decode | base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · omdev-0.0.21/omdev/scripts/lib/formats/goyaml.py |
| high | Py Runtime Base64 Decode | base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · omdev-0.0.21/omdev/scripts/pidfiles.py |
| high | Py Runtime Base64 Decode | base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · omdev-0.0.21/omdev/scripts/pyproject.py |
| medium | Remote Payload | matched "curl " · omdev-0.0.21/omdev/dockerdev/resources/fragments/docker.sh |
| medium | Remote Payload | matched "curl " · omdev-0.0.21/omdev/dockerdev/resources/fragments/go.sh |
| medium | Remote Payload | matched "curl " · omdev-0.0.21/omdev/dockerdev/resources/fragments/jdk.sh |
| medium | Remote Payload | matched "curl " · omdev-0.0.21/omdev/dockerdev/resources/fragments/nvm.sh |
| medium | Remote Payload | matched "curl " · omdev-0.0.21/omdev/dockerdev/resources/fragments/rbenv.sh |
| medium | Remote Payload | matched "curl " · omdev-0.0.21/omdev/dockerdev/resources/fragments/rust.sh |
| medium | Remote Payload | matched "curl " · omdev-0.0.21/omdev/dockerdev/resources/fragments/uv.sh |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.0.21 | High risk | 50 | 2026-05-30 |
0.0.20 | High risk | 50 | 2026-05-30 |
Block this in CI
pkgradar gate --ecosystem pypi omdev==0.0.21