Go modules · proxy.golang.org
github.com/frikky/shuffle-shared
Remote Payload: matched "curl "
Why PkgRadar flagged v1.2.69
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · github.com/frikky/[email protected]/ai.go |
| medium | Remote Payload | matched "curl\n\n" · github.com/frikky/[email protected]/blobs.go |
| medium | Remote Payload | matched "cUrl " · github.com/frikky/[email protected]/cloudSync.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/frikky/[email protected]/codegen.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/frikky/[email protected]/health.go |
| medium | Remote Payload | matched "cUrl " · github.com/frikky/[email protected]/structs.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v1.2.69 | High risk | 72 | 2026-06-11 |
v1.2.68 | High risk | 72 | 2026-06-07 |
v1.2.67-0.20260603063248-4c71051ebb7d | High risk | 72 | 2026-06-04 |
v1.2.64 | High risk | 72 | 2026-06-04 |
v1.2.64-0.20260528222018-1cdfb3e1e337 | High risk | 72 | 2026-06-01 |
v1.2.63 | High risk | 72 | 2026-06-01 |
Block this in CI
pkgradar gate --ecosystem go github.com/frikky/[email protected]