PyPI · pypi.org

pypowerwall

Py Runtime Base64 Decode: base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern.

Why PkgRadar flagged 0.15.10

Severity	Signal	Evidence
high	Py Runtime Base64 Decode	base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · proxy/pypowerwall/tesla_auth.py
high	Py Runtime Base64 Decode	base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · pypowerwall/tesla_auth.py
high	Py Import Time Network Call	Network call (urllib/requests/httpx/http.client) at install or import time. · proxy/pypowerwall/cloud/teslapy/__init__.py
high	Py Import Time Network Call	Network call (urllib/requests/httpx/http.client) at install or import time. · pypowerwall/cloud/teslapy/__init__.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.15.10`	High risk	41	2026-05-31

Block this in CI

PkgRadar gates pypowerwall (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi pypowerwall==0.15.10