PkgRadar

Go modules · proxy.golang.org

github.com/gosuda/portal-tunnel/v2

Remote Payload: matched "cURL "

Why PkgRadar flagged v2.3.2

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/gosuda/portal-tunnel/[email protected]/cmd/portal-tunnel/agent/dashboard.go
mediumRemote Payloadmatched "cURL " · github.com/gosuda/portal-tunnel/[email protected]/sdk/expose.go
mediumRemote Payloadmatched "cURL " · github.com/gosuda/portal-tunnel/[email protected]/sdk/listener.go
mediumRemote Payloadmatched "cURL " · github.com/gosuda/portal-tunnel/[email protected]/sdk/mitm.go
mediumRemote Payloadmatched "cURL " · github.com/gosuda/portal-tunnel/[email protected]/types/agent.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v2.3.2High risk652026-06-07
v2.3.0High risk892026-06-02
v2.2.6-0.20260531162012-c33e401d0c81High risk892026-06-01
v2.2.5High risk892026-06-01

Block this in CI

PkgRadar gates github.com/gosuda/portal-tunnel/v2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/gosuda/portal-tunnel/[email protected]
github.com/gosuda/portal-tunnel/v2 — Go modules security scan | PkgRadar