Go modules · proxy.golang.org

github.com/RA000WL/syck

Webhook Exfil Endpoint: matched "hooks.slack.com/services/"

Why PkgRadar flagged v0.0.0-20260606122818-fb49e34c4a6b

Severity	Signal	Evidence
high	Webhook Exfil Endpoint	matched "hooks.slack.com/services/" · github.com/ra000wl/[email protected]/internal/ruletest/generate.go

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260606122818-fb49e34c4a6b`	High risk	58	2026-06-07
`v0.0.0-20260606121736-9e9ec2cf54c5`	High risk	58	2026-06-07
`v0.0.0-20260606115115-29de6aaf06a1`	High risk	58	2026-06-07
`v0.0.0-20260606112159-222c342a3bdf`	High risk	58	2026-06-07
`v0.0.0-20260606105846-29d5c9b2a791`	High risk	58	2026-06-07
`v0.0.0-20260606103742-049e788f88f0`	High risk	58	2026-06-07

Block this in CI

PkgRadar gates github.com/RA000WL/syck (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/RA000WL/[email protected]