Go modules · proxy.golang.org
github.com/flash-lhr/trpc-agent-go
Remote Payload: matched "curl "
Why PkgRadar flagged v0.0.0-20260415133759-fa4eab48f026
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · github.com/flash-lhr/[email protected]/tool/workspaceexec/workspace_exec.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.0.0-20260604112549-ea18116324ee | Low risk | 0 | 2026-06-05 |
v0.0.0-20260604084632-0ffabdef41b4 | Low risk | 0 | 2026-06-05 |
v0.0.0-20260603042005-e6d684c154ef | Low risk | 0 | 2026-06-05 |
v0.0.0-20260415133759-fa4eab48f026 | Review | 12 | 2026-06-05 |
v0.0.0-20260602121024-664ebd0ab56d | Low risk | 0 | 2026-06-04 |
v0.0.0-20260602035624-6178731fa589 | Low risk | 0 | 2026-06-03 |
v0.0.0-20260601091006-9b4e406ae287 | Low risk | 0 | 2026-06-03 |
v0.0.0-20260529112842-4f26702973ef | Low risk | 0 | 2026-06-02 |
v0.0.0-20260528025230-9308b28d32f1 | Low risk | 0 | 2026-05-30 |
Block this in CI
pkgradar gate --ecosystem go github.com/flash-lhr/[email protected]