PkgRadar

PyPI · pypi.org

trino-spark-adapter

Py Runtime Base64 Decode: base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern.

Why PkgRadar flagged 1.1.4

SeveritySignalEvidence
highPy Runtime Base64 Decodebase64/hex decode combined with exec/subprocess — classic obfuscated payload pattern. · trino_spark_adapter-1.1.4/trino_spark_adapter/crypto.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.1.4High risk302026-06-01
1.1.3High risk302026-06-01
1.1.2High risk302026-05-31
1.1.1High risk302026-05-31
1.1.0High risk302026-05-31
1.0.3High risk302026-05-31
1.0.2High risk302026-05-31
1.0.1High risk302026-05-31
1.0.0High risk302026-05-31

Block this in CI

PkgRadar gates trino-spark-adapter (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi trino-spark-adapter==1.1.4
Start free — 25 scans / moView full evidence
trino-spark-adapter — PyPI security scan | PkgRadar