PkgRadar

Go modules · proxy.golang.org

github.com/jhaals/yopass

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.0-20260616075741-df1f0023a8dc

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/jhaals/[email protected]/pkg/server/server.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260616075741-df1f0023a8dcReview122026-06-17
v0.0.0-20260616042344-3640db6facfdReview122026-06-17
v0.0.0-20260616041259-a8c2be6fbc67Review122026-06-17
v0.0.0-20260615134111-a3e18fe22f55Review122026-06-16
v0.0.0-20260615060436-05ec7de2e3deReview122026-06-16
v0.0.0-20260615041355-57adc11d9eecReview122026-06-16
v0.0.0-20260614165253-a5d2317ce2d1Review122026-06-15
v0.0.0-20260613140731-9e653ed9991eReview122026-06-14
v0.0.0-20260612192207-f0ebd4c84d9bReview122026-06-13
v0.0.0-20260612044618-3d45e10ea47eReview122026-06-13
v0.0.0-20260611181446-9d8de0dd430cReview122026-06-12
v0.0.0-20260611092128-5fe87843d393Review122026-06-12
v0.0.0-20260611041151-9d484d73f3fcReview122026-06-12
v0.0.0-20260610041112-1ed5feb8de8cReview122026-06-11
v0.0.0-20260608183622-94b0b818abbcReview122026-06-09
v0.0.0-20260608041105-e582393ce170Review122026-06-09
v0.0.0-20260605133027-3ac4f98851cfReview122026-06-06
v0.0.0-20260605042143-934bbe77caafReview122026-06-06
v0.0.0-20260604174225-e55cb9f19976Review122026-06-05
v0.0.0-20260603221146-5ad93e842c0eReview122026-06-04
v0.0.0-20260601074903-860c089e1ba1Review122026-06-02
v0.0.0-20260601073854-f559c3632f07Review122026-06-02
v0.0.0-20260601072540-8f33287f7006Review122026-06-02
v0.0.0-20260529042619-3e1a9a59835eReview122026-05-30
v0.0.0-20260528085119-e56ccd8acb80Review292026-05-29
v0.0.0-20260528041227-dd21427de9a6Review292026-05-29

Block this in CI

PkgRadar gates github.com/jhaals/yopass (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/jhaals/[email protected]