PkgRadar

Go modules · proxy.golang.org

github.com/Core-Coin/go-core

Shell Credential File Read, Go Generate Shell, Remote Payload +2 more

Why PkgRadar flagged v1.0.49

SeveritySignalEvidence
highShell Credential File Read
highShell Credential File Read
highShell Credential File Read
highShell Credential File Read
highShell Credential File Read
mediumGo Generate Shell
mediumRemote Payload

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.0.49High risk1322026-06-28
v1.0.50High risk1322026-06-28
v1.0.51High risk1322026-06-28
v1.0.52High risk1322026-06-28
v1.0.54High risk1322026-06-28
v1.0.55High risk1322026-06-28
v1.0.56High risk1322026-06-28
v1.0.57High risk1322026-06-28
v1.0.58High risk1322026-06-28
v1.0.59High risk1322026-06-28
v1.0.60High risk1322026-06-28
v1.0.61High risk1322026-06-28
v1.0.62High risk1322026-06-28
v1.0.63High risk1322026-06-28
v1.0.64High risk1322026-06-28
v1.0.65High risk1322026-06-28
v1.0.66High risk1322026-06-28
v1.0.67High risk1322026-06-28
v1.1.0High risk1322026-06-28
v1.1.1High risk1322026-06-28
v1.1.2High risk1322026-06-28
v1.0.0High risk1372026-06-28
v1.1.3High risk1322026-06-28
v1.0.1High risk1372026-06-28
v1.1.4High risk1322026-06-28
v1.0.2High risk1372026-06-28
v1.1.5High risk1322026-06-28
v1.0.3High risk1372026-06-28
v1.1.6High risk1322026-06-28
v1.0.48High risk1322026-06-28
v1.1.7High risk1322026-06-28

Block this in CI

PkgRadar gates github.com/Core-Coin/go-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Core-Coin/[email protected]
github.com/Core-Coin/go-core — Go modules security scan | PkgRadar