Cargo · crates.io
santa
Remote Payload: matched "raw.githubusercontent.com"
Why PkgRadar flagged 0.3.4
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "raw.githubusercontent.com" · santa-0.3.4/src/bin/collect_packages.rs |
| medium | Remote Payload | matched "curl " · santa-0.3.4/src/commands/tests.rs |
| medium | Remote Payload | matched "curl " · santa-0.3.4/src/configuration.rs |
| medium | Remote Payload | matched "curl " · santa-0.3.4/src/data.rs |
| medium | Remote Payload | matched "raw.githubusercontent.com" · santa-0.3.4/src/data_layers.rs |
| medium | Remote Payload | matched "curl " · santa-0.3.4/src/script_generator.rs |
| medium | Remote Payload | matched "raw.githubusercontent.com" · santa-0.3.4/src/source_layers.rs |
| medium | Remote Payload | matched "curl " · santa-0.3.4/src/sources.rs |
| medium | Remote Payload | matched "curl\n" · santa-0.3.4/src/tests.rs |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.3.4 | High risk | 68 | 2026-06-04 |
Block this in CI
pkgradar gate --ecosystem cargo [email protected]