PkgRadar

Go modules · proxy.golang.org

github.com/md-mushfiqur123/lychee

Remote Payload: matched "curl "

Why PkgRadar flagged v0.30.0-rc21

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/md-mushfiqur123/[email protected]/cmd/launch/hermes.go
mediumRemote Payloadmatched "curl " · github.com/md-mushfiqur123/[email protected]/cmd/launch/kimi.go
mediumRemote Payloadmatched "curl " · github.com/md-mushfiqur123/[email protected]/server/inference_request_log.go
mediumRemote Payloadmatched "curl " · github.com/md-mushfiqur123/[email protected]/x/agent/approval.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.5.0-rc1Low risk02026-06-17
v0.30.0-rc21High risk532026-06-17
v0.20.6High risk562026-06-17
v0.5.0Low risk02026-06-17
v0.5.0-alphaHigh risk842026-06-17
v0.30.7-rc1.0.20260616070227-500fc88d5ef1High risk842026-06-17
v0.12.1-rc0Review152026-06-17
v0.3.5Review452026-06-17
v0.30.5High risk652026-06-17
v0.17.7-rc1Review592026-06-17
v0.30.0-rc26High risk532026-06-17
v0.30.0-rc15High risk532026-06-17
v0.9.5Review152026-06-17
v0.30.7-rc1.0.20260616054709-074214613714High risk842026-06-17
v0.30.3High risk652026-06-17
v0.5.2-rc2Low risk02026-06-17
v0.14.0-rc4Review442026-06-17
v0.30.0-rc5High risk652026-06-17
v0.13.4-rc2Review152026-06-17
v0.30.7-rc1.0.20260616040344-b01b12ab5375High risk842026-06-17
v0.11.0Review152026-06-17
v0.13.5Review152026-06-17
v0.3.7Review452026-06-17
v0.3.7-rc3Review452026-06-17
v0.13.5-rc1Review152026-06-17
v0.1.45-rc3Review452026-06-17
v0.17.0Review592026-06-17
v0.15.0Review442026-06-17
v0.17.8-rc4Review442026-06-17
v0.3.12-rc4Review452026-06-17
v0.17.0-rc2Review592026-06-17
v0.15.0-rc3Review442026-06-17
v0.18.0-rc2Review442026-06-17
v0.15.2Review442026-06-17
v0.17.7-rc2Review592026-06-17
v0.1.49-rc5Review452026-06-17
v0.30.2-rc0High risk652026-06-17
v0.14.0-rc5Review442026-06-17
v0.13.4-rc1Review152026-06-17
v0.1.49-rc12Review452026-06-17
v0.1.49-rc8Review452026-06-17
v0.23.2High risk802026-06-17
v0.5.2Low risk02026-06-17
v0.10.0Review152026-06-17
v0.5.13-rc1Review152026-06-17
v0.5.2-rc1Low risk02026-06-17
v0.23.2-rc0High risk802026-06-17
v0.10.0-rc3Review152026-06-17
v0.18.0Review442026-06-17
v0.18.0-rc1Review442026-06-17
v0.5.13-rc2Review152026-06-17
v0.5.8-rc5Review152026-06-17
v0.15.3Review442026-06-17
v0.14.3-rc1Review442026-06-17
v0.5.8-rc4Review152026-06-17
v0.1.45Review452026-06-17
v0.1.45-rc4Review452026-06-17
v0.20.7-rc0High risk562026-06-17
v0.1.39Review452026-06-17
v0.0.15Low risk02026-06-17
v0.20.1High risk562026-06-17
v0.14.0Review442026-06-17
v0.30.0-rc24High risk532026-06-17
v0.14.0-rc11Review442026-06-17
v0.20.1-rc0High risk562026-06-17
v0.18.1Review442026-06-17
v0.6.2Review152026-06-17
v0.18.1-rc0Review442026-06-17
v0.3.12-rc5Review452026-06-17
v0.6.2-rc0Review152026-06-17
v0.13.4Review152026-06-17
v0.15.5Review442026-06-17
v0.6.3Review152026-06-17
v0.3.14Review452026-06-17
v0.3.12Review452026-06-17
v0.18.2Review442026-06-17
v0.12.10Review152026-06-17
v0.3.14-rc0Review452026-06-17
v0.6.3-rc0Review152026-06-17
v0.17.7Review592026-06-17
v0.3.12-rc2Review452026-06-17
v0.18.2-rc0Review442026-06-17
v0.3.11Review452026-06-17
v0.11.5-rc3Review152026-06-17
v0.5.8Review152026-06-17
v0.30.0-rc14High risk532026-06-17
v0.11.5Review152026-06-17
v0.9.1Review152026-06-17
v0.14.2Review442026-06-17
v0.20.7High risk562026-06-17
v0.3.11-rc3Review452026-06-17
v0.9.4Review152026-06-17
v0.1.42Review452026-06-17
v0.12.9Review152026-06-17
v0.18.3High risk562026-06-17
v0.5.8-rc6Review152026-06-17
v0.1.46Review452026-06-17
v0.20.3High risk562026-06-17
v0.21.0High risk682026-06-17
v0.1.0-alphaHigh risk842026-06-17
v0.14.2-rc0Review442026-06-17
v0.30.0High risk532026-06-17
v0.5.13Review152026-06-17
v0.13.3Review152026-06-17
v0.20.7-rc1High risk562026-06-17
v0.6.6Review152026-06-17
v0.13.2Review152026-06-17
v0.13.2-rc0Review152026-06-17
v0.21.0-rc0High risk682026-06-17
v0.5.13-rc3Review152026-06-17
v0.6.6-rc2Review152026-06-17
v0.30.0-rc7High risk652026-06-17
v0.23.3High risk682026-06-17
v0.2.0Review452026-06-17
v0.16.0-rc2Review592026-06-17
v0.13.1Review152026-06-17
v0.1.1-alphaHigh risk842026-06-17
v0.14.3Review442026-06-17
v0.30.6High risk652026-06-17
v0.30.2High risk652026-06-17
v0.11.8Review152026-06-17
v0.23.3-rc0High risk682026-06-17
v0.13.1-rc1Review152026-06-17
v0.0.7Low risk02026-06-17

Block this in CI

PkgRadar gates github.com/md-mushfiqur123/lychee (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/md-mushfiqur123/[email protected]
Start free — 25 scans / moView full evidence