Go modules · proxy.golang.org
github.com/Nox-HQ/nox
Remote Payload: matched "raw.githubusercontent.com"
Why PkgRadar flagged v1.1.1
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/nox-hq/[email protected]/cli/bootstrap.go |
| medium | Remote Payload | matched "github.com/%s/releases/download" · github.com/nox-hq/[email protected]/cli/plugin_entry_cmd.go |
| medium | Remote Payload | matched "curl " · github.com/nox-hq/[email protected]/core/analyzers/iac/rules.go |
| medium | Remote Payload | matched "curl " · github.com/nox-hq/[email protected]/core/analyzers/iac/rules_ansible.go |
| medium | Remote Payload | matched "curl " · github.com/nox-hq/[email protected]/core/analyzers/secrets/rules.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v1.1.1 | High risk | 85 | 2026-06-10 |
v1.1.2 | High risk | 85 | 2026-06-10 |
Block this in CI
pkgradar gate --ecosystem go github.com/Nox-HQ/[email protected]