Go modules · proxy.golang.org
github.com/leadaxe/singbox-launcher
Remote Payload: matched "raw.githubusercontent.com"
Why PkgRadar flagged v0.9.9-10-g34a1bb0-prerelease
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/leadaxe/[email protected]/core/template/loader.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/leadaxe/[email protected]/core/wintun_downloader.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/leadaxe/[email protected]/ui/configurator/dialogs/get_free_dialog.go |
| medium | Remote Payload | matched "cURL " · github.com/leadaxe/[email protected]/ui/configurator/outbounds_configurator/edit_dialog.go |
| medium | Remote Payload | matched "cURL " · github.com/leadaxe/[email protected]/ui/configurator/tabs/source_tab.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.9.9-10-g34a1bb0-prerelease | High risk | 60 | 2026-06-08 |
v0.9.9-14-g279152b-prerelease | High risk | 60 | 2026-06-08 |
v0.9.9-16-g8632790-prerelease | High risk | 60 | 2026-06-08 |
v0.9.9-18-g748ba95-prerelease | High risk | 60 | 2026-06-08 |
v0.9.9-3-g9d61229-prerelease | High risk | 60 | 2026-06-08 |
v0.9.9 | High risk | 60 | 2026-06-08 |
Block this in CI
pkgradar gate --ecosystem go github.com/leadaxe/[email protected]