Go modules · proxy.golang.org

github.com/germanamz/tusk

Remote Payload, Obfuscation Density

Why PkgRadar flagged v1.18.1-0.20260721134155-94fa6768d1e5

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.18.1-0.20260721134155-94fa6768d1e5`	Review	24	2026-07-22
`v1.18.1-0.20260720123424-37b9c093eb22`	Review	24	2026-07-21
`v1.18.1-0.20260719125724-2a0d053241db`	Review	12	2026-07-20
`v1.18.1-0.20260717191907-de6d4fa812b6`	Review	12	2026-07-18
`v1.18.1-0.20260714184122-4af30a1565a9`	Review	12	2026-07-15
`v1.18.1-0.20260714025402-d33169297053`	Review	12	2026-07-15
`v1.18.1-0.20260712213207-e4e7ca5c0db9`	Review	12	2026-07-13
`v1.18.1-0.20260712135019-1f88b757b34d`	Review	12	2026-07-13
`v1.18.1-0.20260701213252-0b96a5d1816c`	Review	12	2026-07-02
`v1.18.1-0.20260701145415-9e269edb4379`	Review	12	2026-07-02
`v1.18.1-0.20260629190417-7e94562b2739`	Review	12	2026-06-30
`v1.18.1-0.20260629125323-23327f07cfec`	Review

Block this in CI

PkgRadar gates github.com/germanamz/tusk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/germanamz/[email protected]