PkgRadar

Go modules · proxy.golang.org

github.com/bigkevmcd/rancher

Remote Payload: matched "wGet "

Why PkgRadar flagged v0.0.0-20260615072658-0240168d96fd

SeveritySignalEvidence
mediumRemote Payloadmatched "wGet " · github.com/bigkevmcd/[email protected]/pkg/api/steve/disallow/disallow.go
mediumRemote Payloadmatched "curl " · github.com/bigkevmcd/[email protected]/pkg/capr/planner/instructions.go
mediumRemote Payloadmatched "curl " · github.com/bigkevmcd/[email protected]/pkg/controllers/dashboard/clusterregistrationtoken/status.go
mediumRemote Payloadmatched "github.com/rancher-plugins/kontainer-engine-driver-oke/releases/download" · github.com/bigkevmcd/[email protected]/pkg/data/management/kontainerdriver_data.go
mediumRemote Payloadmatched "github.com/cloudscale-ch/docker-machine-driver-cloudscale/releases/download" · github.com/bigkevmcd/[email protected]/pkg/data/management/machinedriver_data.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/bigkevmcd/[email protected]/pkg/image/appco/load.go
mediumRemote Payloadmatched "github.com/rancher/rke2/releases/download" · github.com/bigkevmcd/[email protected]/pkg/image/external/external.go
mediumRemote Payloadmatched "github.com/rancher/system-agent/releases/download" · github.com/bigkevmcd/[email protected]/pkg/settings/setting.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260615072658-0240168d96fdHigh risk1112026-06-17
v0.0.0-20260612083607-b65cc8639b96High risk1112026-06-14
v0.0.0-20260612052823-fab1af47577cHigh risk1112026-06-13
v0.0.0-20260605075607-098ec8b34d68High risk1112026-06-07
v0.0.0-20260529130343-be6e739d612cHigh risk1112026-06-01
v0.0.0-20260527173324-2cc6c46753bcReview1112026-05-30

Block this in CI

PkgRadar gates github.com/bigkevmcd/rancher (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/bigkevmcd/[email protected]