PkgRadar

Cargo · crates.io

ccag

Remote Payload: matched "curl "

Why PkgRadar flagged 1.7.3

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · ccag-1.7.3/src/api/mod.rs
mediumRemote Payloadmatched "curl " · ccag-1.7.3/src/detection/dangerous.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
1.7.3Review292026-06-06
1.7.1Review292026-06-05

Block this in CI

PkgRadar gates ccag (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]
ccag — Cargo security scan | PkgRadar