PkgRadar

Go modules · proxy.golang.org

github.com/divkix/alita_robot

Go Init Base64 Combo: Go init() with base64 decode — possible obfuscated payload.

Why PkgRadar flagged v0.0.0-20260528092740-09703f887c8c

SeveritySignalEvidence
mediumGo Init Base64 ComboGo init() with base64 decode — possible obfuscated payload. · github.com/divkix/[email protected]/alita/modules/captcha.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260615075308-072d40002b8fLow risk02026-06-17
v0.0.0-20260609022137-c86e98fea8c5Low risk02026-06-10
v0.0.0-20260607211405-a5c1041aaa56Low risk02026-06-08
v0.0.0-20260604020702-76e0b108781eLow risk02026-06-05
v0.0.0-20260603120139-e3cb91ab7617Low risk02026-06-04
v0.0.0-20260602190714-eff3650fc263Low risk02026-06-04
v0.0.0-20260601005621-bc5497e5eafdLow risk02026-06-02
v0.0.0-20260531104919-9547066f792aLow risk02026-06-01
v0.0.0-20260528092740-09703f887c8cReview182026-05-29

Block this in CI

PkgRadar gates github.com/divkix/alita_robot (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/divkix/[email protected]
github.com/divkix/alita_robot — Go modules security scan | PkgRadar