Go modules · proxy.golang.org

code.hackerspace.pl/hswaw/hscloud

Remote Payload: matched "CURL "

Why PkgRadar flagged v0.0.0-20260603212805-36dc0fb40cde

Severity	Signal	Evidence
medium	Remote Payload	matched "CURL " · code.hackerspace.pl/hswaw/[email protected]/dc/cmc-proxy/main.go
medium	Remote Payload	matched "cURL " · code.hackerspace.pl/hswaw/[email protected]/devtools/hackdoc/main.go
medium	Remote Payload	matched "curl " · code.hackerspace.pl/hswaw/[email protected]/go.sum

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260603212805-36dc0fb40cde`	High risk	36	2026-06-05
`v0.0.0-20260531160956-4e240f681c19`	High risk	36	2026-06-02
`v0.0.0-20260529190627-36a007038ad1`	Review	36	2026-05-30

Block this in CI

PkgRadar gates code.hackerspace.pl/hswaw/hscloud (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go code.hackerspace.pl/hswaw/[email protected]