PkgRadar

Go modules · proxy.golang.org

github.com/cuhsat/fox/v4

Remote Payload: matched "Curl "

Why PkgRadar flagged v4.58.3-0.20260610011100-543335c38839

SeveritySignalEvidence
mediumRemote Payloadmatched "Curl " · github.com/cuhsat/fox/[email protected]/internal/cmd/str/str.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v4.58.3-0.20260610011100-543335c38839Review122026-06-11
v4.58.2Review122026-06-11
v4.58.0Review122026-06-10
v4.58.1Review122026-06-10
v4.56.0Review122026-06-05
v4.54.1Review122026-06-05
v4.57.1Review122026-06-05
v4.57.0Review122026-06-04
v4.55.1-0.20260531005115-dbd5bfd49d16Review122026-06-01
v4.55.0Review122026-06-01
v4.53.2-0.20260529112738-dd4d67504a37Low risk02026-05-30

Block this in CI

PkgRadar gates github.com/cuhsat/fox/v4 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/cuhsat/fox/[email protected]
Start free — 25 scans / moView full evidence