PkgRadar

Go modules · proxy.golang.org

github.com/1panel-dev/1panel/agent

Remote Payload: matched "Wget "

Why PkgRadar flagged v0.0.0-20260603024904-15fef4d84eea

SeveritySignalEvidence
mediumRemote Payloadmatched "Wget " · github.com/1panel-dev/1panel/[email protected]/app/dto/request/file.go
mediumRemote Payloadmatched "curl " · github.com/1panel-dev/1panel/[email protected]/constant/terminal_ai.go
mediumRemote Payloadmatched "wget " · github.com/1panel-dev/1panel/[email protected]/utils/files/file_op.go
mediumCredential file accessmatched ".ssh/" · github.com/1panel-dev/1panel/[email protected]/app/service/ssh.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260603024904-15fef4d84eeaHigh risk512026-06-04
v0.0.0-20260303080426-475e4ca6299aReview272026-06-02
v0.0.0-20260601055254-389fcbf10cceHigh risk512026-06-02
v0.0.0-20260528101940-9a2b7a777567High risk512026-05-30
v0.0.0-20260528100441-024a4a9ef342High risk512026-05-30
v0.0.0-20260528035402-a332dfd3b352High risk512026-05-30
v0.0.0-20260528032600-68f8d8d2214eHigh risk512026-05-30
v0.0.0-20260528030900-4f78060d35f8High risk512026-05-30
v0.0.0-20260528023038-adb97730c164High risk512026-05-30
v0.0.0-20260529140626-9cca14c382a4Review512026-05-30
v0.0.0-20260529102502-3d5069fd4064Review512026-05-30
v0.0.0-20260529034157-8693cc17dfbfReview512026-05-30

Block this in CI

PkgRadar gates github.com/1panel-dev/1panel/agent (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/1panel-dev/1panel/[email protected]
Start free — 25 scans / moView full evidence