Go modules · proxy.golang.org
github.com/marshal-easm/webssi/v3
Webhook Exfil Endpoint: matched "canarytokens.org"
Why PkgRadar flagged v3.0.0-20260602030338-97b30d40a84a
| Severity | Signal | Evidence |
|---|---|---|
| high | Webhook Exfil Endpoint | matched "canarytokens.org" · github.com/marshal-easm/webssi/[email protected]/pkg/detectors/aws/access_keys/canary.go |
| medium | Remote Payload | matched "cURL " · github.com/marshal-easm/webssi/[email protected]/pkg/analyzer/analyzers/ngrok/models.go |
| medium | Remote Payload | matched "curl " · github.com/marshal-easm/webssi/[email protected]/pkg/analyzer/analyzers/slack/permissions.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/marshal-easm/webssi/[email protected]/pkg/detectors/github/v1/github_old.go |
| medium | Remote Payload | matched "api.github.com/graphql" · github.com/marshal-easm/webssi/[email protected]/pkg/sources/github/connector.go |
| medium | Remote Payload | matched "api.github.com/graphql" · github.com/marshal-easm/webssi/[email protected]/pkg/sources/github_experimental/object_discovery.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v3.0.0-20260602030338-97b30d40a84a | High risk | 145 | 2026-06-03 |
v3.0.0-20260602024958-5f76761589ab | High risk | 145 | 2026-06-03 |
Block this in CI
pkgradar gate --ecosystem go github.com/marshal-easm/webssi/[email protected]