Cargo · crates.io
zoi-rs
Remote Payload: matched "curl "
Why PkgRadar flagged 1.18.5
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · zoi-rs-1.18.5/src/pkg/package/docker.rs |
| medium | Remote Payload | matched "raw.githubusercontent.com" · zoi-rs-1.18.5/src/pkg/package/init_lsp.rs |
| medium | Remote Payload | matched "raw.githubusercontent.com" · zoi-rs-1.18.5/src/pkg/purl.rs |
| medium | Remote Payload | matched "raw.githubusercontent.com" · zoi-rs-1.18.5/src/pkg/repo_install.rs |
| medium | Remote Payload | matched "raw.githubusercontent.com" · zoi-rs-1.18.5/src/pkg/resolve.rs |
| medium | Remote Payload | matched "raw.githubusercontent.com" · zoi-rs-1.18.5/src/pkg/sync.rs |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.18.5 | High risk | 43 | 2026-06-14 |
1.18.4 | High risk | 43 | 2026-06-13 |
1.18.3 | High risk | 43 | 2026-06-08 |
1.18.2 | High risk | 43 | 2026-06-08 |
1.18.1 | High risk | 43 | 2026-06-08 |
1.18.0 | High risk | 43 | 2026-06-07 |
1.17.0 | High risk | 43 | 2026-06-04 |
1.16.1 | High risk | 43 | 2026-06-03 |
Block this in CI
pkgradar gate --ecosystem cargo [email protected]