PkgRadar

Go modules · proxy.golang.org

github.com/kidcarmi/culvert

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.313

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/kidcarmi/[email protected]/bootstrap.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/kidcarmi/[email protected]/feedsync.go
mediumRemote Payloadmatched "cURL " · github.com/kidcarmi/[email protected]/main.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/kidcarmi/[email protected]/threatfeed.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.313High risk482026-06-16
v0.0.312High risk482026-06-16
v0.0.311High risk482026-06-16
v0.0.311-0.20260615173714-8886532a8763High risk482026-06-16
v0.0.310High risk482026-06-16
v0.0.309High risk482026-06-16
v0.0.309-0.20260615052358-f220adc2a1e4High risk482026-06-16
v0.0.308High risk482026-06-16
v0.0.307High risk482026-06-15
v0.0.306High risk482026-06-15
v0.0.302High risk482026-06-14
v0.0.304High risk482026-06-14
v0.0.303High risk482026-06-14
v0.0.301High risk482026-06-14
v0.0.300High risk482026-06-14
v0.0.297High risk482026-06-14
v0.0.294High risk482026-06-14
v0.0.295High risk482026-06-14
v0.0.299High risk482026-06-13
v0.0.293High risk482026-06-12
v0.0.276High risk482026-06-11
v0.0.275High risk482026-06-11
v0.0.277High risk482026-06-11
v0.0.278High risk482026-06-11
v0.0.283High risk482026-06-11
v0.0.285High risk482026-06-11
v0.0.280High risk482026-06-11
v0.0.281High risk482026-06-11
v0.0.287High risk482026-06-11
v0.0.288High risk482026-06-11
v0.0.290High risk482026-06-11
v0.0.289High risk482026-06-11
v0.0.286High risk482026-06-10
v0.0.239High risk482026-06-07
v0.0.247High risk482026-06-07
v0.0.236High risk482026-06-07
v0.0.252High risk482026-06-07
v0.0.268High risk482026-06-07
v0.0.263High risk482026-06-07
v0.0.250High risk482026-06-07
v0.0.240High risk482026-06-07
v0.0.238High risk482026-06-07
v0.0.241High risk482026-06-07
v0.0.256High risk482026-06-07
v0.0.243High risk482026-06-07
v0.0.262High risk482026-06-07
v0.0.229High risk482026-06-07
v0.0.234High risk482026-06-07
v0.0.233High risk482026-06-07
v0.0.270High risk482026-06-07
v0.0.248High risk482026-06-07
v0.0.259High risk482026-06-07
v0.0.271High risk482026-06-07
v0.0.237High risk482026-06-07
v0.0.264High risk482026-06-07
v0.0.255High risk482026-06-07
v0.0.272High risk482026-06-07
v0.0.245High risk482026-06-07
v0.0.258High risk482026-06-07
v0.0.267High risk482026-06-07
v0.0.269High risk482026-06-07
v0.0.260High risk482026-06-07
v0.0.249High risk482026-06-07
v0.0.231High risk482026-06-07
v0.0.261High risk482026-06-07
v0.0.257High risk482026-06-07
v0.0.235High risk482026-06-07
v0.0.274High risk482026-06-07
v0.0.230High risk482026-06-07
v0.0.242High risk482026-06-07
v0.0.266High risk482026-06-07
v0.0.246High risk482026-06-07
v0.0.254High risk482026-06-07
v0.0.232High risk482026-06-07
v0.0.273High risk482026-06-07
v0.0.265High risk482026-06-07
v0.0.251High risk482026-06-06
v0.0.244High risk482026-06-05
v0.0.199High risk482026-06-02
v0.0.218High risk482026-06-02
v0.0.227High risk482026-06-02
v0.0.204High risk482026-06-02
v0.0.224High risk482026-06-02
v0.0.192High risk482026-06-02
v0.0.195High risk482026-06-02
v0.0.197High risk482026-06-02
v0.0.191High risk482026-06-02
v0.0.208High risk482026-06-02
v0.0.198High risk482026-06-02
v0.0.210High risk482026-06-02
v0.0.225High risk482026-06-02
v0.0.200High risk482026-06-02
v0.0.193High risk482026-06-02
v0.0.211High risk482026-06-02
v0.0.223High risk482026-06-02
v0.0.209Review482026-05-31

Block this in CI

PkgRadar gates github.com/kidcarmi/culvert (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/kidcarmi/[email protected]
Start free — 25 scans / moView full evidence