PkgRadar

Go modules · proxy.golang.org

github.com/mem9-ai/dat9

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.10.1-0.20260619062805-c0e1ef0778d6

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/mem9-ai/[email protected]/cmd/drive9-server/main.go
mediumRemote Payloadmatched "cURL " · github.com/mem9-ai/[email protected]/pkg/server/server.go
mediumRemote Payloadmatched "cURL\n\t" · github.com/mem9-ai/[email protected]/pkg/server/slock.go
mediumRemote Payloadmatched "cURL " · github.com/mem9-ai/[email protected]/pkg/slockoauth/client.go
mediumRemote Payloadmatched "cURL " · github.com/mem9-ai/[email protected]/pkg/tenant/pool.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.10.1-0.20260619062805-c0e1ef0778d6Review242026-06-20
v0.10.1-0.20260618184759-3f66b5f3d08bReview242026-06-20
v0.10.0Review242026-06-20
v0.10.1-0.20260618174853-1ec5aaa9c3a1Review242026-06-20

Block this in CI

PkgRadar gates github.com/mem9-ai/dat9 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/mem9-ai/[email protected]
Start free — 25 scans / moView full evidence
github.com/mem9-ai/dat9 — Go modules security scan | PkgRadar