PkgRadar

Cargo · crates.io

rr-rtk

Remote Payload: matched "curl "

Why PkgRadar flagged 0.42.3-rr.1

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · rr-rtk-0.42.3-rr.1/src/discover/registry.rs
mediumRemote Payloadmatched "curl " · rr-rtk-0.42.3-rr.1/src/hooks/hook_cmd.rs
mediumRemote Payloadmatched "curl " · rr-rtk-0.42.3-rr.1/src/hooks/init.rs
mediumRemote Payloadmatched "curl " · rr-rtk-0.42.3-rr.1/src/hooks/integrity.rs
mediumRemote Payloadmatched "curl " · rr-rtk-0.42.3-rr.1/src/hooks/permissions.rs
mediumRemote Payloadmatched "Wget " · rr-rtk-0.42.3-rr.1/src/main.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.42.3-rr.1High risk722026-06-08

Block this in CI

PkgRadar gates rr-rtk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]
Start free — 25 scans / moView full evidence