PkgRadar

PyPI · pypi.org

polyai-adk

Py Runtime Base64 Decode: base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern.

Why PkgRadar flagged 0.25.7

SeveritySignalEvidence
highPy Runtime Base64 Decodebase64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · polyai_adk-0.25.7/src/poly/cli.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.25.7High risk302026-06-12
0.25.6High risk302026-06-12
0.25.5High risk302026-06-12
0.25.4High risk302026-06-12
0.25.3High risk302026-06-09
0.25.2High risk302026-06-09
0.25.0High risk302026-06-08
0.24.0High risk302026-06-08
0.23.3High risk302026-06-08
0.23.2High risk302026-06-08
0.23.1High risk302026-06-03
0.23.0High risk302026-05-30
0.22.2High risk302026-05-30
0.22.1High risk302026-05-30
0.22.0High risk302026-05-30

Block this in CI

PkgRadar gates polyai-adk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi polyai-adk==0.25.7
Start free — 25 scans / moView full evidence