PkgRadar

Go modules · proxy.golang.org

github.com/ethereum/go-ethereum

Remote Payload: matched "cURL "

Why PkgRadar flagged v1.17.4-0.20260615080941-e2164cc78c69

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/ethereum/[email protected]/cmd/fetchpayload/main.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.17.4-0.20260615080941-e2164cc78c69Review172026-06-16
v1.12.1-0.20230715143530-d233b6b23af3Review292026-06-15
v1.12.1-0.20230717170218-988d84aa7cafReview292026-06-14
v1.17.4-0.20260612210954-23483010a479Review172026-06-14
v1.17.4-0.20260612122903-9059157eba22Review172026-06-13
v1.17.4-0.20260608103910-0ee70187fd28Review172026-06-13
v1.17.4-0.20260612071034-906727089b1bReview172026-06-13
v1.17.4-0.20260611152615-e595aedcd067Review172026-06-13
v1.17.4-0.20260611064507-17aab1ac9a83Review172026-06-12
v1.8.21-0.20190620093831-25c3282cf126Review52026-06-12
v1.17.4-0.20260610180313-8a8becaeab1aReview172026-06-11
v1.17.4-0.20260518023712-d4027f3d4654Review172026-06-11
v0.0.0-20260422144838-8e2107dc39dcReview172026-06-07
v1.17.4-0.20260605024441-13d8df63f451Review172026-06-06
v1.17.4-0.20260604171746-f5c62d0552e0Review172026-06-05
v1.17.4-0.20260527113818-45698e9cb9d9Review172026-06-05
v0.0.0-20260603215127-7835a71dae92Review172026-06-05
v1.17.4-0.20260603215127-7835a71dae92Review172026-06-04
v1.17.4-0.20260602121306-19f5fe079b46Review172026-06-03
v1.17.4-0.20260602014611-02dd66dfc0b1Review172026-06-03
v1.17.4-0.20260601030142-fdf99d9883c7Review172026-06-02
v1.17.4-0.20260529205126-046a10e8a796Review172026-06-01
v1.17.4-0.20260521185734-3f0c06c527e3Review172026-06-01
v0.0.0-20211025062812-e40b37718326Low risk02026-05-29
v1.17.4-0.20260528150647-61342e9c01b9Review172026-05-29

Block this in CI

PkgRadar gates github.com/ethereum/go-ethereum (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/ethereum/[email protected]
Start free — 25 scans / moView full evidence