Loading the latest scan…
Go modules · proxy.golang.org
Go Init Env Token Exfil, Shipped Live Secret, Remote Payload
Why PkgRadar flagged v0.0.12
| Severity | Signal | Evidence |
|---|---|---|
| high | Go Init Env Token Exfil | — |
| high | Shipped Live Secret | — |
| medium | Remote Payload | — |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.0.12 | High risk | 22 | 2026-06-23 |
v0.0.35 | High risk | 18 | 2026-06-23 |
v0.0.25 | High risk | 18 | 2026-06-23 |
v0.0.9 | High risk | 11 | 2026-06-23 |
v0.0.27 | High risk | 8 | 2026-06-23 |
v0.0.13 | High risk | 8 | 2026-06-23 |
v0.0.16 | High risk | 5 | 2026-06-20 |
v0.0.10 | High risk | 7 | 2026-06-20 |
v0.0.29 | High risk | 5 | 2026-06-20 |
v0.1.19 | Low risk | 0 | 2026-06-02 |
v0.0.1 | Low risk | 0 | 2026-06-02 |
v0.0.1-beta1 | Low risk | 0 | 2026-06-02 |
v0.0.5 | Low risk | 0 | 2026-06-02 |
v0.0.3 | Low risk | 0 | 2026-06-02 |
v0.1.35-rc1-nightly.0.20260515211931-2d71e4f743d0 | Low risk |
Block this in CI
pkgradar gate --ecosystem go github.com/matixlol/[email protected]| 0 |
| 2026-06-02 |