PkgRadar

Go modules · proxy.golang.org

github.com/1Panel-dev/1Panel/agent

Remote Payload: matched "Wget "

Why PkgRadar flagged v0.0.0-20260615054624-f987af264fb8

SeveritySignalEvidence
mediumRemote Payloadmatched "Wget " · github.com/1panel-dev/1panel/[email protected]/app/dto/request/file.go
mediumRemote Payloadmatched "curl " · github.com/1panel-dev/1panel/[email protected]/constant/terminal_ai.go
mediumRemote Payloadmatched "wget " · github.com/1panel-dev/1panel/[email protected]/utils/files/file_op.go
mediumCredential file accessmatched ".ssh/" · github.com/1panel-dev/1panel/[email protected]/app/service/ssh.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260615054624-f987af264fb8High risk512026-06-16
v0.0.0-20260612101435-a2eed66bc476High risk512026-06-13
v0.0.0-20260612094434-a49b9b132d07High risk512026-06-13
v0.0.0-20260612061616-e8505a249aa8High risk512026-06-13
v0.0.0-20260612034514-dbff9c02e942High risk512026-06-13
v0.0.0-20260610134854-e66000ffd2baHigh risk512026-06-11
v0.0.0-20260610104532-c61139c5ccb1High risk512026-06-11
v0.0.0-20260610103023-571a4068c420High risk512026-06-11
v0.0.0-20260610082816-fa3e137db8ccHigh risk512026-06-11
v0.0.0-20260609092836-ed30567a22dfHigh risk512026-06-10
v0.0.0-20260609032928-2151daab1f90High risk512026-06-10
v0.0.0-20260608110119-338301907a0bHigh risk512026-06-09
v0.0.0-20260608093345-506ff1d46e7dHigh risk512026-06-09
v0.0.0-20260605105011-fe343a64ed50High risk512026-06-06
v0.0.0-20260604114814-d9d4d55ecaaeHigh risk512026-06-05
v0.0.0-20260602143521-e49fa620c804High risk512026-06-03
v0.0.0-20260602083106-929cd3818405High risk512026-06-03
v0.0.0-20260601055254-389fcbf10cceHigh risk512026-06-02
v0.0.0-20260528101940-9a2b7a777567High risk512026-05-30
v0.0.0-20260528035402-a332dfd3b352High risk512026-05-30
v0.0.0-20260528032600-68f8d8d2214eHigh risk512026-05-30
v0.0.0-20260528030900-4f78060d35f8High risk512026-05-30
v0.0.0-20260528023038-adb97730c164High risk512026-05-30
v0.0.0-20260529140626-9cca14c382a4Review512026-05-30
v0.0.0-20260529102502-3d5069fd4064Review512026-05-30
v0.0.0-20260529034157-8693cc17dfbfReview512026-05-30

Block this in CI

PkgRadar gates github.com/1Panel-dev/1Panel/agent (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/1Panel-dev/1Panel/[email protected]