Cargo · crates.io
tirith
Remote Payload: matched "curl "
Why PkgRadar flagged 0.3.2
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · tirith-0.3.2/src/cli/agent.rs |
| medium | Remote Payload | matched "curl " · tirith-0.3.2/src/cli/ai.rs |
| medium | Remote Payload | matched "curl " · tirith-0.3.2/src/cli/clipboard.rs |
| medium | Remote Payload | matched "curl " · tirith-0.3.2/src/cli/intent.rs |
| medium | Remote Payload | matched "curl " · tirith-0.3.2/src/cli/last_trigger.rs |
| medium | Remote Payload | matched "curl " · tirith-0.3.2/src/cli/lsp.rs |
| medium | Remote Payload | matched "curl " · tirith-0.3.2/src/cli/mod.rs |
| medium | Remote Payload | matched "github.com/{REPO}/releases/download" · tirith-0.3.2/src/cli/selfupdate.rs |
| medium | Remote Payload | matched "raw.githubusercontent.com" · tirith-0.3.2/src/cli/threatdb_cmd.rs |
| medium | Remote Payload | matched "raw.githubusercontent.com" · tirith-0.3.2/src/cli/trust.rs |
| medium | Remote Payload | matched "curl " · tirith-0.3.2/src/main.rs |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.3.2 | High risk | 121 | 2026-06-16 |
Block this in CI
pkgradar gate --ecosystem cargo [email protected]