PkgRadar

Go modules · proxy.golang.org

github.com/cplieger/subflux

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.1.18

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/cplieger/[email protected]/internal/api/types.go
mediumRemote Payloadmatched "cURL\n\t" · github.com/cplieger/[email protected]/internal/config/config_accessors.go
mediumRemote Payloadmatched "cURL " · github.com/cplieger/[email protected]/internal/config/config_types.go
mediumRemote Payloadmatched "cURL " · github.com/cplieger/[email protected]/internal/config/config_validate.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/cplieger/[email protected]/internal/provider/anidb/anidb.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.1.18High risk602026-06-15
v0.1.26High risk602026-06-15
v0.1.16High risk602026-06-15
v0.1.35High risk602026-06-15
v0.1.0High risk602026-06-15
v0.1.5High risk602026-06-15
v0.1.14High risk602026-06-15
v0.1.29High risk602026-06-15
v0.1.23High risk602026-06-15
v0.1.2High risk602026-06-15
v0.1.22High risk602026-06-15
v0.1.15High risk602026-06-15
v0.1.24High risk602026-06-15
v0.1.10High risk602026-06-15
v0.1.7High risk602026-06-15
v0.1.17High risk602026-06-15
v0.1.20High risk602026-06-15
v0.1.3High risk602026-06-15
v0.1.4High risk602026-06-15
v0.1.38-0.20260614224833-22c9c472d7b6High risk602026-06-15
v0.1.34High risk602026-06-15
v0.1.37High risk602026-06-15

Block this in CI

PkgRadar gates github.com/cplieger/subflux (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/cplieger/[email protected]
Start free — 25 scans / moView full evidence