PkgRadar

Go modules · proxy.golang.org

github.com/Rosevari/agentcookie

Remote Payload: matched "curl "

Why PkgRadar flagged v0.14.0-beta.1.0.20260601012409-cd323b624d93

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/rosevari/[email protected]/internal/cli/wizard.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.14.0-beta.1.0.20260601012409-cd323b624d93Review122026-06-02
v0.12.0-beta.4Review122026-06-02
v0.12.0-beta.3Review122026-06-02
v0.12.0-beta.1Review122026-06-02
v0.12.0-beta.6Review122026-06-02
v0.12.0-beta.5Review122026-06-02
v0.12.0-beta.2Review122026-06-02
v0.13.0-beta.1Review122026-06-02
v0.14.0-beta.1Review122026-06-02
v0.14.0-beta.1.0.20260601101950-1d2881fe236dReview122026-06-02

Block this in CI

PkgRadar gates github.com/Rosevari/agentcookie (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Rosevari/[email protected]
Start free — 25 scans / moView full evidence