Cargo · crates.io
dalfox
Remote Payload: matched "curl "
Why PkgRadar flagged 3.0.2
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · dalfox-3.0.2/src/cmd/scan/poc.rs |
| medium | Remote Payload | matched "curl " · dalfox-3.0.2/src/cmd/scan/tests.rs |
| medium | Remote Payload | matched "raw.githubusercontent.com" · dalfox-3.0.2/src/scanning/result.rs |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
3.0.2 | High risk | 36 | 2026-06-02 |
3.0.1 | High risk | 36 | 2026-06-02 |
Block this in CI
pkgradar gate --ecosystem cargo [email protected]