Go modules · proxy.golang.org
github.com/drunkleen/l-ui/v3
Remote Payload: matched "curl "
Why PkgRadar flagged v3.0.0-20260604195441-18f3c3250654
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · github.com/drunkleen/l-ui/[email protected]/web/service/node_bootstrap.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/drunkleen/l-ui/[email protected]/web/service/panel.go |
| medium | Remote Payload | matched "github.com/XTLS/Xray-core/releases/download" · github.com/drunkleen/l-ui/[email protected]/web/service/server.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v3.0.0-20260604195441-18f3c3250654 | High risk | 36 | 2026-06-06 |
Block this in CI
pkgradar gate --ecosystem go github.com/drunkleen/l-ui/[email protected]