PyPI · pypi.org

openbrowser-ai

Py Runtime Base64 Decode: base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern.

Why PkgRadar flagged 0.1.45

Severity	Signal	Evidence
high	Py Runtime Base64 Decode	base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · openbrowser_ai-0.1.45/src/openbrowser/browser/video_recorder.py
medium	Remote Payload	matched "curl " · openbrowser_ai-0.1.45/install.sh
medium	Remote Payload	matched "curl " · openbrowser_ai-0.1.45/infra/eval/terraform/user_data.sh

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.1.45`	High risk	64	2026-06-02
`0.1.44`	High risk	64	2026-06-02
`0.1.43`	High risk	64	2026-06-02

Block this in CI

PkgRadar gates openbrowser-ai (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi openbrowser-ai==0.1.45