Go modules · proxy.golang.org
github.com/luxfi/cli
Remote Payload: matched "curl "
Why PkgRadar flagged v1.101.2-0.20260607020656-e4a5408b5362
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · github.com/luxfi/[email protected]/cmd/kmscmd/kms.go |
| medium | Remote Payload | matched "cURL " · github.com/luxfi/[email protected]/cmd/networkcmd/send.go |
| medium | Remote Payload | matched "github.com/luxfi/evm/releases/download" · github.com/luxfi/[email protected]/cmd/nodecmd/upgrade.go |
| medium | Remote Payload | matched "cURL " · github.com/luxfi/[email protected]/cmd/primarycmd/describe.go |
| medium | Remote Payload | matched "cURL " · github.com/luxfi/[email protected]/cmd/rpccmd/transfer.go |
| medium | Remote Payload | matched "github.com/%s/%s/releases/download" · github.com/luxfi/[email protected]/cmd/vmcmd/install.go |
| medium | Remote Payload | matched "github.com/%s/%s/releases/download" · github.com/luxfi/[email protected]/pkg/binutils/github.go |
| medium | Remote Payload | matched "github.com/luxfi/%s/releases/download" · github.com/luxfi/[email protected]/pkg/binutils/latest.go |
| medium | Remote Payload | matched "CUrl " · github.com/luxfi/[email protected]/pkg/chainkit/schema.go |
| medium | Remote Payload | matched "cURL " · github.com/luxfi/[email protected]/pkg/contract/contract.go |
| medium | Remote Payload | matched "cURL " · github.com/luxfi/[email protected]/pkg/contract/deploy.go |
| medium | Remote Payload | matched "cURL " · github.com/luxfi/[email protected]/pkg/contract/ownable.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v1.101.2-0.20260607020656-e4a5408b5362 | High risk | 115 | 2026-06-08 |
v1.101.1 | High risk | 125 | 2026-06-08 |
v1.101.0 | High risk | 115 | 2026-05-31 |
Block this in CI
pkgradar gate --ecosystem go github.com/luxfi/[email protected]