PkgRadar

Go modules · proxy.golang.org

github.com/madpsy/ka9q_ubersdr

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.0-20260602132107-3be59b91c5a1

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/madpsy/[email protected]/config.go
mediumRemote Payloadmatched "cURL " · github.com/madpsy/[email protected]/instance_reporter.go
mediumRemote Payloadmatched "cURL " · github.com/madpsy/[email protected]/mcp_server.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/madpsy/[email protected]/version_checker.go
mediumRemote Payloadmatched "cURL " · github.com/madpsy/[email protected]/websdr_websocket.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260602132107-3be59b91c5a1High risk632026-06-03
v0.0.0-20260602121912-5bf134d909cdHigh risk632026-06-03
v0.0.0-20260602114348-9696d32e4325High risk632026-06-03
v0.0.0-20260602111200-0f532afb6821High risk632026-06-03
v0.0.0-20260602104609-39c927a7af37High risk632026-06-03
v0.0.0-20260602100659-849f7328439fHigh risk632026-06-03
v0.0.0-20260602085129-2cde9589d54eHigh risk632026-06-03
v0.0.0-20260602075313-4d41abd7ec51High risk632026-06-03
v0.0.0-20260529131501-65f5ff1874fbReview632026-05-30

Block this in CI

PkgRadar gates github.com/madpsy/ka9q_ubersdr (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/madpsy/[email protected]