PkgRadar

Go modules · proxy.golang.org

github.com/microsoft/azure-linux-dev-tools

Remote Payload: matched "wget "

Why PkgRadar flagged v0.1.1-0.20260602153715-afa42b55524d

SeveritySignalEvidence
mediumRemote Payloadmatched "wget " · github.com/microsoft/[email protected]/internal/app/azldev/cmds/advanced/wget.go
mediumRemote Payloadmatched "curl\n\n " · github.com/microsoft/[email protected]/internal/app/azldev/cmds/component/add.go
mediumRemote Payloadmatched "curl\n\n " · github.com/microsoft/[email protected]/internal/app/azldev/cmds/component/build.go
mediumRemote Payloadmatched "curl\n\n " · github.com/microsoft/[email protected]/internal/app/azldev/cmds/component/list.go
mediumRemote Payloadmatched "curl " · github.com/microsoft/[email protected]/internal/app/azldev/cmds/component/preparesources.go
mediumRemote Payloadmatched "curl\n\n " · github.com/microsoft/[email protected]/internal/app/azldev/cmds/component/query.go
mediumRemote Payloadmatched "curl\n\n " · github.com/microsoft/[email protected]/internal/app/azldev/cmds/component/render.go
mediumRemote Payloadmatched "curl\n\n " · github.com/microsoft/[email protected]/internal/app/azldev/cmds/component/update.go
mediumRemote Payloadmatched "curl\n\n " · github.com/microsoft/[email protected]/internal/app/azldev/cmds/downloadsources/downloadsources.go
mediumRemote Payloadmatched "curl\n\n " · github.com/microsoft/[email protected]/internal/app/azldev/cmds/pkg/list.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/microsoft/[email protected]/internal/projectconfig/configfile.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.1.1-0.20260602153715-afa42b55524dHigh risk862026-06-03
v0.1.1-0.20260601233648-62df64cfa612High risk862026-06-03

Block this in CI

PkgRadar gates github.com/microsoft/azure-linux-dev-tools (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/microsoft/[email protected]