PkgRadar

Go modules · proxy.golang.org

github.com/Files-com/files-sdk-go/v3

DNS / OAST exfiltration: matched "burpcollaborator.net"

Why PkgRadar flagged v3.3.147

SeveritySignalEvidence
highDNS / OAST exfiltrationmatched "burpcollaborator.net" · github.com/files-com/files-sdk-go/[email protected]/user/fixtures/TestClient_Update.yaml

Scanned versions

VersionVerdictScoreScanned (UTC)
v3.3.147High risk502026-06-16
v3.3.146High risk502026-06-16
v3.3.145High risk502026-06-15
v3.3.141High risk502026-06-12
v3.3.139High risk502026-06-11
v3.3.138High risk502026-06-11
v3.3.137High risk502026-06-10
v3.3.136High risk502026-06-09
v3.3.135High risk502026-06-09
v3.3.134High risk502026-06-07
v3.3.133High risk502026-06-06
v3.3.132High risk502026-06-06
v3.3.131High risk502026-06-05
v3.3.130High risk502026-06-05
v3.3.129High risk502026-06-05
v3.3.128High risk502026-06-04
v3.3.127High risk502026-06-04
v3.3.126High risk502026-06-04
v3.3.123High risk502026-06-02
v3.3.122High risk502026-06-02
v3.3.121High risk502026-06-02
v3.3.120High risk502026-06-01
v3.3.119High risk502026-06-01
v3.3.117High risk502026-05-30

Block this in CI

PkgRadar gates github.com/Files-com/files-sdk-go/v3 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Files-com/files-sdk-go/[email protected]
Start free — 25 scans / moView full evidence