Go modules · proxy.golang.org
gitea.lerkolabs.com/lerkolabs/uptop
Webhook Exfil Endpoint: matched "discord.com/api/webhooks/"
Why PkgRadar flagged v0.1.0-rc.4.0.20260612233855-de51dde6e63f
| Severity | Signal | Evidence |
|---|---|---|
| high | Webhook Exfil Endpoint | matched "discord.com/api/webhooks/" · gitea.lerkolabs.com/lerkolabs/[email protected]/cmd/uptop/main.go |
| medium | Remote Payload | matched "curl " · gitea.lerkolabs.com/lerkolabs/[email protected]/internal/tui/view_detail.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.1.0-rc.4.0.20260612233855-de51dde6e63f | High risk | 67 | 2026-06-14 |
v0.1.0-rc.3 | High risk | 67 | 2026-06-14 |
v0.1.0-rc.1 | High risk | 67 | 2026-06-14 |
v0.1.0-rc.2 | High risk | 67 | 2026-06-13 |
v0.1.0-rc.4.0.20260612214748-eff67332aa4e | High risk | 67 | 2026-06-13 |
v0.1.0-rc.4 | High risk | 67 | 2026-06-13 |
Related campaigns
- webhook_exfil_endpoint:matched "discord.com/api/webhooks/" — 55 releases, max score 280
Block this in CI
pkgradar gate --ecosystem go gitea.lerkolabs.com/lerkolabs/[email protected]