Go modules · proxy.golang.org

github.com/lin-snow/Ech0

Remote Payload, Obfuscation Density

Why PkgRadar flagged v1.4.8-0.20260409160337-b934467d26b9

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.4.8-0.20260409160337-b934467d26b9`	Review	24	2026-08-17
`v1.4.8-0.20260405115603-7b7890cbe294`	Review	24	2026-08-17
`v1.4.8-0.20260503035905-cecc2c19b590`	Low risk	0	2026-06-19
`v1.4.8-0.20260503041146-eab62379c795`	Low risk	0	2026-06-19
`v1.4.8-0.20260503034700-cb8d7a997dd8`	Low risk	0	2026-06-19
`v1.4.8-0.20260503035519-fd320fe3e902`	Low risk	0	2026-06-19
`v1.4.8-0.20260503040728-a7e8b8e84bd1`	Low risk	0	2026-06-19

Block this in CI

PkgRadar gates github.com/lin-snow/Ech0 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/lin-snow/[email protected]