PkgRadar

Go modules · proxy.golang.org

github.com/ctfer-io/chall-manager/deploy

Remote Payload: matched "curl "

Why PkgRadar flagged v0.6.7-0.20260609093804-b92cc1d326e6

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/ctfer-io/chall-manager/[email protected]/services/parts/chall-manager-janitor.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.6.7-0.20260609093804-b92cc1d326e6Review122026-06-10
v0.0.0-20260603221755-88fdfcb8097aReview122026-06-06
v0.6.7-0.20260529175354-6538cecb67c6Review122026-06-01
v0.0.0-20260529175354-6538cecb67c6Review122026-06-01
v0.6.7-0.20260529170133-71b262ea859cReview122026-05-30
v0.6.6Review122026-05-30
v0.0.0-20260519204436-b1ab2eb25286Review122026-05-29

Block this in CI

PkgRadar gates github.com/ctfer-io/chall-manager/deploy (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/ctfer-io/chall-manager/[email protected]