PkgRadar

Cargo · crates.io

sync-ai-clis

Remote Payload: matched "curl "

Why PkgRadar flagged 0.2.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · sync-ai-clis-0.2.0/src/tools/antigravity.rs
mediumRemote Payloadmatched "curl " · sync-ai-clis-0.2.0/src/tools/claude.rs
mediumRemote Payloadmatched "curl " · sync-ai-clis-0.2.0/src/tools/codex.rs
mediumRemote Payloadmatched "curl " · sync-ai-clis-0.2.0/src/tools/kiro.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.2.0High risk482026-06-11
0.1.3High risk482026-06-11
0.1.2High risk482026-06-10
0.1.1High risk482026-06-10
0.1.0High risk482026-06-10

Block this in CI

PkgRadar gates sync-ai-clis (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]
Start free — 25 scans / moView full evidence