PkgRadar

Go modules · proxy.golang.org

github.com/TrebuchetDynamics/polygolem

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.1.2-0.20260610150638-3dfca41cebc1

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/trebuchetdynamics/[email protected]/cmd/live_siwe_probe/main.go
mediumRemote Payloadmatched "cURL " · github.com/trebuchetdynamics/[email protected]/internal/cli/deposit_wallet.go
mediumRemote Payloadmatched "cURL " · github.com/trebuchetdynamics/[email protected]/internal/rpc/code.go
mediumRemote Payloadmatched "cURL " · github.com/trebuchetdynamics/[email protected]/internal/rpc/swap.go
mediumRemote Payloadmatched "cURL " · github.com/trebuchetdynamics/[email protected]/internal/rpc/transfer.go
mediumRemote Payloadmatched "CURL " · github.com/trebuchetdynamics/[email protected]/internal/workflows/depositwalletreads/depositwalletreads.go
mediumRemote Payloadmatched "CURL " · github.com/trebuchetdynamics/[email protected]/internal/workflows/depositwalletsettlement/depositwalletsettlement.go
mediumRemote Payloadmatched "cURL " · github.com/trebuchetdynamics/[email protected]/pkg/contracts/contracts.go
mediumRemote Payloadmatched "cURL " · github.com/trebuchetdynamics/[email protected]/pkg/funding/funding.go
mediumRemote Payloadmatched "CURL " · github.com/trebuchetdynamics/[email protected]/pkg/orderfills/reader.go
mediumRemote Payloadmatched "cURL " · github.com/trebuchetdynamics/[email protected]/pkg/relayer/onchain.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.1.2-0.20260610150638-3dfca41cebc1High risk862026-06-11
v0.1.2-0.20260606043813-531aebb6fb45High risk862026-06-08
v0.1.2-0.20260521173823-91876cf7a31eReview622026-05-30

Block this in CI

PkgRadar gates github.com/TrebuchetDynamics/polygolem (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/TrebuchetDynamics/[email protected]