PkgRadar

Go modules · proxy.golang.org

github.com/goshs-labs/goshs

Go Init Base64 Combo: Go init() with base64 decode — possible obfuscated payload.

Why PkgRadar flagged v1.0.7

SeveritySignalEvidence
mediumGo Init Base64 ComboGo init() with base64 decode — possible obfuscated payload. · github.com/goshs-labs/[email protected]/logger/logger.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.2Low risk02026-05-29
v1.0.7Review182026-05-29
v0.1.4Low risk02026-05-29
v0.3.7Review182026-05-29
v0.1.1Low risk02026-05-29
v0.4.0Review182026-05-29
v0.1.5Low risk02026-05-29
v1.0.3Review182026-05-29
v1.0.6Review182026-05-29
v0.0.9Low risk02026-05-29
v1.1.0Review182026-05-29
v0.3.6Review182026-05-29
v0.0.1Low risk02026-05-29
v0.0.3Low risk02026-05-29
v0.3.2Review182026-05-29
v1.1.4Review302026-05-29

Block this in CI

PkgRadar gates github.com/goshs-labs/goshs (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/goshs-labs/[email protected]
Start free — 25 scans / moView full evidence