PkgRadar

Go modules · proxy.golang.org

codeberg.org/gituser/my-go-packages

Remote Payload: matched "Curl "

Why PkgRadar flagged v0.0.0-20260616093533-11ba8f8a9d6e

SeveritySignalEvidence
mediumRemote Payloadmatched "Curl " · codeberg.org/gituser/[email protected]/libhttp/libhttpclient/http_client_public.go
mediumRemote Payloadmatched "cUrl\n\t\t\t\t\t\t\t\t" · codeberg.org/gituser/[email protected]/libweb/libdiscourse/discourse.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260616093533-11ba8f8a9d6eReview242026-06-20

Block this in CI

PkgRadar gates codeberg.org/gituser/my-go-packages (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go codeberg.org/gituser/[email protected]