Go modules · proxy.golang.org
github.com/lewisyoung0914/cc-connect-pro
Remote Payload: matched "curl "
Why PkgRadar flagged v1.0.0-beta.3
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · github.com/lewisyoung0914/[email protected]/agent/qoder/qoder.go |
| medium | Remote Payload | matched "github.com/\" + githubRepo + \"/releases/download" · github.com/lewisyoung0914/[email protected]/cmd/cc-connect/update.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/lewisyoung0914/[email protected]/core/provider_presets.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/lewisyoung0914/[email protected]/core/skill_presets.go |
| medium | Remote Payload | matched "github.com/lewisyoung0914/cc-connect-pro/releases/download" · github.com/lewisyoung0914/[email protected]/core/updater.go |
| medium | Remote Payload | matched "cUrl " · github.com/lewisyoung0914/[email protected]/platform/wecom/wecom.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v1.0.0-beta.3 | High risk | 72 | 2026-06-12 |
Block this in CI
pkgradar gate --ecosystem go github.com/lewisyoung0914/[email protected]