PkgRadar

Go modules · proxy.golang.org

github.com/lin-snow/Ech0

Remote Payload: matched "curl "

Why PkgRadar flagged v1.4.8-0.20260503035905-cecc2c19b590

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/lin-snow/[email protected]/internal/mcp/adapter_comment.go
mediumRemote Payloadmatched "curl " · github.com/lin-snow/[email protected]/internal/mcp/adapter_file.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.4.8-0.20260503035905-cecc2c19b590Review242026-06-19
v1.4.8-0.20260503034700-cb8d7a997dd8Review242026-06-19
v1.4.8-0.20260503041146-eab62379c795Review242026-06-19
v1.4.8-0.20260503035519-fd320fe3e902Review242026-06-19
v1.4.8-0.20260503040728-a7e8b8e84bd1Review242026-06-19

Block this in CI

PkgRadar gates github.com/lin-snow/Ech0 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/lin-snow/[email protected]
Start free — 25 scans / moView full evidence