PyPI · pypi.org
synapse
Py Runtime Base64 Decode: base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern.
Why PkgRadar flagged 2.246.0
| Severity | Signal | Evidence |
|---|---|---|
| high | Py Runtime Base64 Decode | base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · synapse-2.246.0/synapse/tools/docker/validate.py |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2.246.0 | Review | 9 | 2026-06-11 |
2.245.0 | Review | 9 | 2026-06-05 |
2.244.1 | Review | 9 | 2026-06-02 |
2.244.0 | Review | 9 | 2026-05-29 |
Block this in CI
pkgradar gate --ecosystem pypi synapse==2.246.0