PkgRadar

Go modules · proxy.golang.org

github.com/0xSterny/spuderman

Webhook Exfil Endpoint, Credential file access

Why PkgRadar flagged v1.3.1

SeveritySignalEvidence
highWebhook Exfil Endpointgithub.com/0xsterny/[email protected]/pkg/matcher/presets.go

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.3.1High risk452026-06-20
v1.2.3High risk452026-06-20
v1.2.4High risk452026-06-20
v1.2.1High risk452026-06-20
v1.2.2High risk452026-06-20
v1.3.0High risk452026-06-20
v1.0.2Low risk02026-06-19
v1.0.3Low risk02026-06-19
v1.0.4Low risk02026-06-19
v1.0.1Low risk02026-06-19

Block this in CI

PkgRadar gates github.com/0xSterny/spuderman (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/0xSterny/[email protected]
Start free — 25 scans / moView full evidence