PkgRadar

Go modules · proxy.golang.org

github.com/google/device-infra

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260528053226-48fbce53a317

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/google/[email protected]/src/devtools/recoverbot/firmware/build.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260602085957-adbfda1d1776Low risk02026-06-03
v0.0.0-20260602083909-3e242853a571Low risk02026-06-03
v0.0.0-20260602071726-902f3005229bLow risk02026-06-03
v0.0.0-20260602062039-495aea3cbc66Low risk02026-06-03
v0.0.0-20260602051544-1c431576c046Low risk02026-06-03
v0.0.0-20260602032555-e301f7fe70c4Low risk02026-06-03
v0.0.0-20260602030609-99b2b68c8da7Low risk02026-06-03
v0.0.0-20260602023413-c4fa2beab2d2Low risk02026-06-03
v0.0.0-20260601211707-5415caf003f4Low risk02026-06-02
v0.0.0-20260601133709-0f62cc86fde1Low risk02026-06-02
v0.0.0-20260601125333-bc670a7a781dLow risk02026-06-02
v0.0.0-20260601112728-9930445e97f4Low risk02026-06-02
v0.0.0-20260601104922-9371782f81f7Low risk02026-06-02
v0.0.0-20260601093703-572ad0bec62fLow risk02026-06-02
v0.0.0-20260601075707-3a8132aa247dLow risk02026-06-02
v0.0.0-20260601073214-6c33c28af6f6Low risk02026-06-02
v0.0.0-20260601064112-054a980d8286Low risk02026-06-02
v0.0.0-20260601063355-5560aea02e56Low risk02026-06-02
v0.0.0-20260601042342-bb88c11b0016Low risk02026-06-02
v0.0.0-20260601032314-33e57dae39bdLow risk02026-06-02
v0.0.0-20260530121523-3e6176370f09Low risk02026-05-31
v0.0.0-20260529110836-5d46d9932397Low risk02026-05-30
v0.0.0-20260529103803-c82a06b93c26Low risk02026-05-30
v0.0.0-20260529095451-a5326b63093aLow risk02026-05-30
v0.0.0-20260529090619-15d908210662Low risk02026-05-30
v0.0.0-20260529081816-34256469331cLow risk02026-05-30
v0.0.0-20260529042500-f75afc0e9f47Low risk02026-05-30
v0.0.0-20260529041143-5e07723130d4Low risk02026-05-30
v0.0.0-20260529032214-bfea98644be9Low risk02026-05-30
v0.0.0-20260528190253-f939fe1be744Low risk02026-05-29
v0.0.0-20260528053226-48fbce53a317Review122026-05-29
v0.0.0-20260528034357-fc163d9b205bReview122026-05-29
v0.0.0-20260528031459-4f506a567c8cReview122026-05-29

Block this in CI

PkgRadar gates github.com/google/device-infra (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/google/[email protected]
Start free — 25 scans / moView full evidence