Go modules · proxy.golang.org
github.com/famclaw/honeybadger
Webhook Exfil Endpoint: matched "webhook.site"
Why PkgRadar flagged v0.2.1
| Severity | Signal | Evidence |
|---|---|---|
| high | Webhook Exfil Endpoint | matched "webhook.site" · github.com/famclaw/[email protected]/internal/scanner/skillsafety/extract.go |
| high | Credential file access | matched ".ssh/" · github.com/famclaw/[email protected]/internal/scanner/skillsafety/extract.go |
| medium | Remote Payload | matched "webhook.site" · github.com/famclaw/[email protected]/internal/scanner/skillsafety/extract.go |
| medium | Remote Payload | matched "curl " · github.com/famclaw/[email protected]/internal/testfixture/fixtures.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.2.1 | High risk | 99 | 2026-06-14 |
v0.1.0 | Review | 17 | 2026-06-14 |
v0.4.0 | Review | 18 | 2026-06-14 |
v0.5.0 | Review | 18 | 2026-06-14 |
v0.5.2-0.20260517191033-31453cd91ec0 | Review | 18 | 2026-06-14 |
v0.3.0 | Review | 18 | 2026-06-14 |
v0.2.0 | High risk | 99 | 2026-06-14 |
v0.5.1 | Review | 18 | 2026-06-14 |
Block this in CI
pkgradar gate --ecosystem go github.com/famclaw/[email protected]