PkgRadar

Go modules · proxy.golang.org

github.com/memohai/memoh

Remote Payload: matched "curl "

Why PkgRadar flagged v0.11.1-0.20260605092213-dfe3e7fdeb9c

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/memohai/[email protected]/internal/agent/tools/container.go
mediumRemote Payloadmatched "cURL\n\t\t" · github.com/memohai/[email protected]/internal/channel/adapters/dingtalk/outbound.go
mediumRemote Payloadmatched "cURL " · github.com/memohai/[email protected]/internal/channel/adapters/wechatoa/protocol.go
mediumRemote Payloadmatched "cURL " · github.com/memohai/[email protected]/internal/channel/prepared_outbound.go
mediumRemote Payloadmatched "cURL " · github.com/memohai/[email protected]/internal/conversation/flow/capability_policy.go
mediumRemote Payloadmatched "cURL " · github.com/memohai/[email protected]/internal/conversation/flow/resolver.go
mediumRemote Payloadmatched "cURL\n\t\t\t" · github.com/memohai/[email protected]/internal/conversation/flow/resolver_attachments.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.11.1-0.20260605092213-dfe3e7fdeb9cHigh risk842026-06-06
v0.11.1-0.20260605103751-863e10adadc3High risk842026-06-06
v0.10.0-alpha.1High risk842026-06-01
v0.8.3High risk842026-06-01
v0.10.1-0.20260531171245-6c908140408bHigh risk842026-06-01
v0.10.0High risk842026-06-01

Block this in CI

PkgRadar gates github.com/memohai/memoh (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/memohai/[email protected]