PkgRadar

Go modules · proxy.golang.org

github.com/0xsterny/spuderman

Webhook Exfil Endpoint: matched "hooks.slack.com/services/"

Why PkgRadar flagged v1.3.1

SeveritySignalEvidence
highWebhook Exfil Endpointmatched "hooks.slack.com/services/" · github.com/0xsterny/[email protected]/pkg/matcher/presets.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.3.1High risk452026-06-20
v1.2.3High risk452026-06-20
v1.2.4High risk452026-06-20
v1.2.1High risk452026-06-20
v1.2.0High risk452026-06-20
v1.2.2High risk452026-06-20
v1.3.1-0.20260618041506-edd16261c97aHigh risk452026-06-20
v1.3.0High risk452026-06-20
v1.0.2Low risk02026-06-19
v1.0.1Low risk02026-06-19

Block this in CI

PkgRadar gates github.com/0xsterny/spuderman (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/0xsterny/[email protected]
Start free — 25 scans / moView full evidence