Loading the latest scan…
Go modules · proxy.golang.org
Go Init Env Token Exfil, Remote Payload, Tls Verification Disabled +1 more
Why PkgRadar flagged v4.0.0-20260727203954-30fac345ee61
| Severity | Signal | Evidence |
|---|---|---|
| high | Go Init Env Token Exfil | — |
| high | Go Init Env Token Exfil | — |
| medium | Remote Payload | — |
| medium | Tls Verification Disabled | — |
| medium | Tls Verification Disabled | — |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v4.0.0-20260727203954-30fac345ee61 | High risk | 96 | 2026-07-28 |
v4.0.0-20260727201839-719fda8ed553 | High risk | 96 | 2026-07-28 |
v4.0.0-20260601184446-90fdc4b5ead2 | High risk | 21 | 2026-06-20 |
Block this in CI
pkgradar gate --ecosystem go github.com/daniel-moreno-levy-gravwell/gravwell/[email protected]