Go modules · proxy.golang.org
github.com/inipew/sing-box
Remote Payload: matched "cURL "
Why PkgRadar flagged v0.0.0-20260611041752-94de57655759
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "cURL " · github.com/inipew/[email protected]/adapter/tailscale.go |
| medium | Remote Payload | matched "cURL " · github.com/inipew/[email protected]/common/httpclient/apple_transport_darwin.go |
| medium | Remote Payload | matched "cURL " · github.com/inipew/[email protected]/daemon/started_service.pb.go |
| medium | Remote Payload | matched "cURL " · github.com/inipew/[email protected]/experimental/libbox/command_types_tailscale.go |
| medium | Remote Payload | matched "cURL " · github.com/inipew/[email protected]/protocol/tailscale/status.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.0.0-20260611041752-94de57655759 | High risk | 50 | 2026-06-13 |
v0.0.0-20260610022516-068441151f42 | High risk | 50 | 2026-06-11 |
v0.0.0-20260608175037-739c14fb2f3a | High risk | 50 | 2026-06-10 |
v0.0.0-20260604030555-ba18fe7d1805 | High risk | 50 | 2026-06-05 |
v0.0.0-20260528224620-40410a68dd51 | Review | 50 | 2026-05-31 |
Block this in CI
pkgradar gate --ecosystem go github.com/inipew/[email protected]