PkgRadar

Go modules · proxy.golang.org

github.com/foxforensics/fox/v4

Remote Payload: matched "Curl "

Why PkgRadar flagged v4.58.3

SeveritySignalEvidence
mediumRemote Payloadmatched "Curl " · github.com/foxforensics/fox/[email protected]/internal/cmd/str/str.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v4.58.3Review122026-06-14
v4.58.4Review122026-06-14
v4.58.8Review122026-06-14
v4.57.1Review122026-06-05
v4.52.2Low risk02026-06-03
v4.51.1Low risk02026-06-03
v4.51.0Low risk02026-06-03
v4.56.0Review122026-06-03
v4.54.0Review122026-05-30

Block this in CI

PkgRadar gates github.com/foxforensics/fox/v4 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/foxforensics/fox/[email protected]