PkgRadar

Go modules · proxy.golang.org

github.com/getlantern/radiance

Remote Payload: matched "CURL "

Why PkgRadar flagged v0.0.0-20260603001322-a7fe2a28bb84

SeveritySignalEvidence
mediumRemote Payloadmatched "CURL " · github.com/getlantern/[email protected]/account/client.go
mediumRemote Payloadmatched "Curl " · github.com/getlantern/[email protected]/common/env/env.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/getlantern/[email protected]/kindling/dnstt/parser.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/getlantern/[email protected]/kindling/fronted/amp.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/getlantern/[email protected]/kindling/fronted/fronted.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260603001322-a7fe2a28bb84High risk602026-06-04
v0.0.0-20260602203347-ecdaa4b6b020High risk602026-06-03
v0.0.0-20260531221356-11aa55a6ff16High risk602026-06-01
v0.0.0-20260529195536-3684cef6632cReview602026-05-30
v0.0.0-20260529195140-5959bbef7f5aReview602026-05-30
v0.0.0-20260529020215-87ffa0d9e3abReview602026-05-30
v0.0.0-20260528235635-8cb3713110c1Review602026-05-30
v0.0.0-20260528094828-5684a85c63e5Review602026-05-29
v0.0.0-20260528154753-d1cfdebf4459Review602026-05-29

Block this in CI

PkgRadar gates github.com/getlantern/radiance (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/getlantern/[email protected]