PkgRadar

Go modules · proxy.golang.org

gitee.com/hexug/go-tools/v2

Remote Payload: matched "cUrl "

Why PkgRadar flagged v2.0.7

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · gitee.com/hexug/go-tools/[email protected]/msgbot/dingtalk/out_msg_model.go
mediumRemote Payloadmatched "cUrl " · gitee.com/hexug/go-tools/[email protected]/msgbot/dingtalk/sender_link.go
mediumRemote Payloadmatched "CURL " · gitee.com/hexug/go-tools/[email protected]/msgbot/feishu/out_msg_model.go
mediumRemote Payloadmatched "cURL " · gitee.com/hexug/go-tools/[email protected]/msgbot/wecom/out_msg_model.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v2.0.7High risk482026-06-13
v2.0.13High risk482026-06-13
v2.0.11High risk482026-06-13
v2.0.10High risk482026-06-13
v2.0.9High risk482026-06-13
v2.0.8High risk482026-06-13
v2.0.6High risk482026-06-13

Block this in CI

PkgRadar gates gitee.com/hexug/go-tools/v2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go gitee.com/hexug/go-tools/[email protected]