PkgRadar

Go modules · proxy.golang.org

github.com/acepanel/panel/v3

Remote Payload: matched "curl "

Why PkgRadar flagged v3.2.6-0.20260609094123-31bd29ae7aff

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/acepanel/panel/[email protected]/internal/apps/apache/app.go
mediumRemote Payloadmatched "curl " · github.com/acepanel/panel/[email protected]/internal/apps/prometheus/app.go
mediumRemote Payloadmatched "curl " · github.com/acepanel/panel/[email protected]/internal/data/app.go
mediumRemote Payloadmatched "wget " · github.com/acepanel/panel/[email protected]/internal/data/backup.go
mediumRemote Payloadmatched "curl " · github.com/acepanel/panel/[email protected]/internal/data/cron.go
mediumRemote Payloadmatched "curl " · github.com/acepanel/panel/[email protected]/internal/data/environment.go
mediumRemote Payloadmatched "curl " · github.com/acepanel/panel/[email protected]/internal/service/environment_php.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v3.2.6-0.20260609094123-31bd29ae7affHigh risk672026-06-11
v3.2.5High risk672026-06-11

Block this in CI

PkgRadar gates github.com/acepanel/panel/v3 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/acepanel/panel/[email protected]