PkgRadar

Go modules · proxy.golang.org

github.com/alibaba/higress/plugins/golang-filter

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260612100524-73e7510ecab8

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/alibaba/higress/plugins/[email protected]/go.sum

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260612100524-73e7510ecab8Review122026-06-13
v0.0.0-20260607074945-2897c1e83a82Review122026-06-08
v0.0.0-20260605095820-57db9ccc4670Review122026-06-06
v0.0.0-20260605025743-137d76332eacReview122026-06-06
v0.0.0-20260604025224-29b5a533e65fReview122026-06-05
v0.0.0-20260602122630-071086904dbeReview122026-06-03
v0.0.0-20260602041100-58ffdae6bae3Review122026-06-03
v0.0.0-20260601021946-52c99eb27d90Review122026-06-02
v0.0.0-20260528015456-385f8d8b4e2aReview122026-05-29

Block this in CI

PkgRadar gates github.com/alibaba/higress/plugins/golang-filter (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/alibaba/higress/plugins/[email protected]