PkgRadar

Go modules · proxy.golang.org

github.com/Molten-Bot/moltenhub-code

Remote Payload: matched "curl "

Why PkgRadar flagged v1.0.30

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/molten-bot/[email protected]/internal/app/backpressure.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/molten-bot/[email protected]/internal/app/harness.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.0.30Review242026-06-12
v1.0.32Review242026-06-12
v1.0.30-0.20260604222532-608e29847877Review242026-06-05
v1.0.28Review242026-06-05
v1.0.29Review242026-06-05
v1.0.28-0.20260604041857-16cb758e5238Review242026-06-05
v1.0.26Review242026-06-05
v1.0.25Review242026-06-05
v1.0.27Review242026-06-05
v1.0.25-0.20260602161118-af97b60f5590Review242026-06-04
v1.0.24Review242026-06-04
v1.0.17Review242026-06-03
v1.0.20Review242026-06-03
v1.0.19Review242026-06-03
v1.0.13Review122026-06-03
v1.0.14Review122026-06-03
v1.0.12Review122026-06-03
v1.0.22Review242026-06-03
v1.0.16Review242026-06-03
v1.0.15Review242026-06-03
v1.0.21Review242026-06-03
v1.0.18Review242026-06-03
v1.0.23Review242026-06-03
v1.0.10Review122026-05-31
v1.0.11Review122026-05-31
v1.0.9Review122026-05-31

Block this in CI

PkgRadar gates github.com/Molten-Bot/moltenhub-code (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Molten-Bot/[email protected]