PkgRadar

Go modules · proxy.golang.org

github.com/Files-com/Files-sdk-go/v3

DNS / OAST exfiltration: matched "burpcollaborator.net"

Why PkgRadar flagged v3.3.103

SeveritySignalEvidence
highDNS / OAST exfiltrationmatched "burpcollaborator.net" · github.com/files-com/files-sdk-go/[email protected]/user/fixtures/TestClient_Update.yaml

Scanned versions

VersionVerdictScoreScanned (UTC)
v3.3.103High risk502026-06-09
v3.3.104High risk502026-06-09
v3.3.105High risk502026-06-09
v3.3.106High risk502026-06-09
v3.3.107High risk502026-06-09
v3.3.108High risk502026-06-09
v3.3.109High risk502026-06-09
v3.3.110High risk502026-06-09
v3.3.112High risk502026-06-09
v3.3.113High risk502026-06-09
v3.3.114High risk502026-06-09
v3.3.115High risk502026-06-09
v3.3.116High risk502026-06-09
v3.3.117High risk502026-06-09
v3.3.118High risk502026-06-09
v3.3.119High risk502026-06-09
v3.3.120High risk502026-06-09
v3.3.121High risk502026-06-09
v3.3.122High risk502026-06-09
v3.3.123High risk502026-06-09
v3.3.124High risk502026-06-09
v3.3.125High risk502026-06-09
v3.3.126High risk502026-06-09
v3.3.127High risk502026-06-09
v3.3.128High risk502026-06-09
v3.3.129High risk502026-06-09
v3.3.130High risk502026-06-09
v3.3.131High risk502026-06-09
v3.3.132High risk502026-06-09
v3.3.133High risk502026-06-09
v3.3.134High risk502026-06-09

Block this in CI

PkgRadar gates github.com/Files-com/Files-sdk-go/v3 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Files-com/Files-sdk-go/[email protected]