PkgRadar

Cargo · crates.io

ramarivera-rtk

Remote Payload: matched "curl "

Why PkgRadar flagged 0.42.3-ramarivera.2

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · ramarivera-rtk-0.42.3-ramarivera.2/src/discover/registry.rs
mediumRemote Payloadmatched "curl " · ramarivera-rtk-0.42.3-ramarivera.2/src/hooks/hook_cmd.rs
mediumRemote Payloadmatched "curl " · ramarivera-rtk-0.42.3-ramarivera.2/src/hooks/init.rs
mediumRemote Payloadmatched "curl " · ramarivera-rtk-0.42.3-ramarivera.2/src/hooks/integrity.rs
mediumRemote Payloadmatched "curl " · ramarivera-rtk-0.42.3-ramarivera.2/src/hooks/permissions.rs
mediumRemote Payloadmatched "Wget " · ramarivera-rtk-0.42.3-ramarivera.2/src/main.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.42.3-ramarivera.2High risk722026-06-08
0.42.3-ramarivera.1High risk722026-06-08

Block this in CI

PkgRadar gates ramarivera-rtk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]