PkgRadar

Go modules · proxy.golang.org

cnb.cool/i0358/ai-cvm

Go Init Base64 Combo: Go init() with base64 decode — possible obfuscated payload.

Why PkgRadar flagged v1.0.49

SeveritySignalEvidence
mediumGo Init Base64 ComboGo init() with base64 decode — possible obfuscated payload. · cnb.cool/i0358/[email protected]/pkg/k8s/sdk.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.1.20Low risk02026-06-07
v1.0.56Low risk02026-06-07
v1.0.57Low risk02026-06-07
v1.0.55Low risk02026-06-07
v1.0.53Low risk02026-05-31
v1.0.52Low risk02026-05-31
v1.0.54Low risk02026-05-31
v1.0.49Review282026-05-29
v1.0.36Review282026-05-29
v1.0.51Review282026-05-29
v1.0.47Review282026-05-29
v1.0.46Review282026-05-29

Block this in CI

PkgRadar gates cnb.cool/i0358/ai-cvm (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go cnb.cool/i0358/[email protected]
Start free — 25 scans / moView full evidence