PkgRadar

Go modules · proxy.golang.org

github.com/f0x4n6/fox/v4

Remote Payload: matched "Curl "

Why PkgRadar flagged v4.58.9

SeveritySignalEvidence
mediumRemote Payloadmatched "Curl " · github.com/f0x4n6/fox/[email protected]/internal/cmd/str/str.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v4.58.9Review122026-06-17
v4.58.4Review122026-06-14
v4.58.3Review122026-06-14
v4.58.0Review122026-06-14
v4.58.8Review122026-06-14
v4.58.5Review122026-06-12
v4.58.2Review122026-06-11
v4.57.1Review122026-06-06
v4.57.0Review122026-06-04
v4.54.0Review122026-06-03
v4.56.0Review122026-06-03
v4.55.1-0.20260531005115-dbd5bfd49d16Review122026-06-01
v4.55.0Review122026-06-01
v4.53.0Low risk02026-05-29

Block this in CI

PkgRadar gates github.com/f0x4n6/fox/v4 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/f0x4n6/fox/[email protected]