Go modules · proxy.golang.org

github.com/dthereum/go-ethereum

Shell Credential File Read, Go Generate Shell, Credential file access +1 more

Why PkgRadar flagged v1.7.4-0.20180328081024-83c75b32ac2b

Severity	Signal	Evidence
high	Shell Credential File Read	github.com/dthereum/[email protected]/accounts/keystore/key.go
high	Shell Credential File Read	github.com/dthereum/[email protected]/accounts/keystore/keystore_passphrase.go
high	Shell Credential File Read	github.com/dthereum/[email protected]/accounts/keystore/keystore_plain.go
high	Shell Credential File Read	github.com/dthereum/[email protected]/accounts/keystore/keystore_wallet.go
high	Shell Credential File Read	github.com/dthereum/[email protected]/mobile/accounts.go
medium	Go Generate Shell	github.com/dthereum/[email protected]/dashboard/dashboard.go
medium	Credential file access	github.com/dthereum/[email protected]/cmd/puppeth/ssh.go

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.7.4-0.20180328081024-83c75b32ac2b`	High risk	125	2026-06-24
`v1.4.7`	High risk	62	2026-06-24
`v1.7.3`	High risk	110	2026-06-24
`v1.0.2`	High risk	102	2026-06-24
`v0.7.11`	High risk	69	2026-06-24

Block this in CI

PkgRadar gates github.com/dthereum/go-ethereum (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/dthereum/[email protected]