PkgRadar

Cargo · crates.io

brokk-rtk

Remote Payload: matched "curl "

Why PkgRadar flagged 0.42.4

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · brokk-rtk-0.42.4/src/discover/registry.rs
mediumRemote Payloadmatched "curl " · brokk-rtk-0.42.4/src/hooks/hook_cmd.rs
mediumRemote Payloadmatched "curl " · brokk-rtk-0.42.4/src/hooks/init.rs
mediumRemote Payloadmatched "curl " · brokk-rtk-0.42.4/src/hooks/integrity.rs
mediumRemote Payloadmatched "curl " · brokk-rtk-0.42.4/src/hooks/permissions.rs
mediumRemote Payloadmatched "Wget " · brokk-rtk-0.42.4/src/lib.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.42.4High risk722026-06-18

Block this in CI

PkgRadar gates brokk-rtk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]