PkgRadar

Go modules · proxy.golang.org

github.com/kumahq/kuma

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260608162249-5ab7515119c6

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/kumahq/[email protected]/pkg/plugins/authn/api-server/tokens/admin_token_bootstrap.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260608162249-5ab7515119c6Review122026-06-09
v0.0.0-20260605070622-955213ac74c3Review122026-06-06
v0.0.0-20260605000147-eb6c4a86eee4Review122026-06-05
v0.0.0-20260602083938-ad42b8bb61ffReview122026-06-03
v0.0.0-20260601081853-a256af4869aeReview122026-06-02

Block this in CI

PkgRadar gates github.com/kumahq/kuma (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/kumahq/[email protected]