Go modules · proxy.golang.org

github.com/influxdata/telegraf

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.10.2-0.20260601190108-2f446e25daef

Severity	Signal	Evidence
medium	Remote Payload	matched "cURL " · github.com/influxdata/[email protected]/plugins/outputs/newrelic/newrelic.go
medium	Remote Payload	matched "raw.githubusercontent.com" · github.com/influxdata/[email protected]/tools/license_checker/package.go

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.10.2-0.20210408164339-8e7da355b318`	Low risk	0	2026-06-03
`v0.10.2-0.20260601190108-2f446e25daef`	Review	29	2026-06-03
`v0.10.2-0.20260601064233-29b247bf6730`	Review	29	2026-06-02
`v0.10.2-0.20260526173714-8afe14ac49b6`	Review	29	2026-05-30
`v0.10.2-0.20260528153639-a509170b8224`	Review	29	2026-05-29

Block this in CI

PkgRadar gates github.com/influxdata/telegraf (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/influxdata/[email protected]