PkgRadar

Cargo · crates.io

shuttle-rs

Remote Payload: matched "curl "

Why PkgRadar flagged 2026.6.8

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · shuttle-rs-2026.6.8/src/bin/stl.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
2026.6.8Review122026-06-08
2026.6.7Review122026-06-08
2026.6.6Review122026-06-08
2026.6.5Review122026-06-07
2026.6.4Review122026-06-07
2026.6.3Low risk02026-06-07
2026.6.2Low risk02026-06-06
2026.6.1Low risk02026-06-06
2026.6.0Low risk02026-06-06

Block this in CI

PkgRadar gates shuttle-rs (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]