// Code execution / obfuscation

Static pattern: base64-decode

패턴: base64-decode

Packages whose static analysis matched this pattern. See the per-package detail pages for the offending code excerpt.

8개 패키지에 이 패턴이 매칭됨. 최신순.

AUTO-PUBLISHED/pypi/11h ago
pipeline-check@1.1.0
by Daniel Martin
CI/CD Security Posture Scanner — scores AWS, Terraform, CloudFormation, GitHub Actions, GitLab CI, Azure DevOps, Bitbucket Pipelines, Jenkins, CircleCI, Google Cloud Build, Buildkite, Drone CI, Tekton, Argo Workflows, Dockerfile, Kubernetes manifests, Helm charts, OCI image manifests, SCM repo posture (GitHub / GitLab / Bitbucket), npm and pypi dependency files against OWASP Top 10 CI/CD Risks and 14 other compliance frameworks
steals →npm tokenGitHub PATGitLab PATAI API keys
py-pip-install-runtimereads-github-tokensreads-gitlab-tokens
AUTO-PUBLISHED/npm/2026-03-29/MAL-2026-3847
openclaw-cn@0.2.0
by jiulingyun
Openclaw 中文版 - WhatsApp gateway CLI (Baileys web) with Pi RPC agent
steals →AI API keys→ sends tohttps://api.openai.com/v1/audio/transcriptions
archive-then-uploadreads-ai-api-keysreads-env-varsbase64-decodepy-urllib-requestchild-process-spawnpublic-github-push
AUTO-PUBLISHED/npm/2026-02-03/MAL-2026-3843
@openclaw-cn/libsignal@2.0.1
by jiulingyun
Signal protocol implementation for Node.js (fork for openclaw-cn)
base64-decode
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
weekly
—
/wk
llm verdict
benign 0.85
h-score
75
patterns
1
size
AUTO-PUBLISHED/npm/2024-01-10/MAL-2026-4099
@antv/x6-common@2.0.17
by newbyvector
Basic toolkit for X6
→ sends tohttps://x6.antv.antgroup.com
public-github-pushchild-process-spawnbase64-decode
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
weekly
12K
/wk
llm verdict
benign 0.85
AUTO-PUBLISHED/npm/2024-08-06/MAL-2026-4001
@antv/gi-assets-basic@2.4.40
by iaaron
G6VP 基础资产包
→ sends tohttps://github.com/antvis/G6VP.git
public-github-pushbase64-decode
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).
weekly
—
/wk
llm verdict
benign 0.85
AUTO-PUBLISHED/npm/2025-04-11/MAL-2026-3991
@antv/g6-pc@0.8.25
by banxuan
A Graph Visualization Framework in JavaScript
base64-decode
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
weekly
—
/wk
llm verdict
benign 0.85
h-score
75
patterns
1
size
AUTO-PUBLISHED/npm/2021-05-11/MAL-2026-3990
@antv/g6-mobile@0.1.2
by openwayne
A Graph Visualization Framework in JavaScript
→ sends togw.alipayobjects.com · https://gw.alipayobjects.com/mdn/rms_f8c6a0/afts/img/A*I…
base64-decode
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
weekly
56
/wk
llm verdict
benign 0.85
h-score
AUTO-PUBLISHED/npm/2023-01-18/MAL-2026-3900
@antv/f6@0.0.19
by openwayne
A Mobile Graph Visualization Framework in JavaScript
→ sends togw.alipayobjects.com · https://gw.alipayobjects.com/mdn/rms_f8c6a0/afts/img/A*I…
base64-decode
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
weekly
—
/wk
llm verdict
benign 0.85
h-score

Static pattern: base64-decode

pipeline-check@1.1.0

openclaw-cn@0.2.0

@openclaw-cn/libsignal@2.0.1

@antv/x6-common@2.0.17

@antv/gi-assets-basic@2.4.40

@antv/g6-pc@0.8.25

@antv/g6-mobile@0.1.2

@antv/f6@0.0.19