Go modules · proxy.golang.org

github.com/mr-spect3r/vandor

Remote Payload, Messenger Bot Endpoint, Credential file access

Why PkgRadar flagged v0.0.0-20260610180323-48af7a5247e9

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Scanned (UTC)
`v0.0.0-20260610180323-48af7a5247e9`	Low risk	2026-06-11
`v0.0.0-20260610084317-10192fad3b36`	Low risk	2026-06-11
`v0.0.0-20260610082651-b3e7db271250`	Low risk	2026-06-11
`v0.0.0-20260610082018-76fa4004fe48`	Low risk	2026-06-11
`v0.0.0-20260610073445-ce324392ff9a`	Low risk	2026-06-11
`v0.0.0-20260610073239-57321646c0e7`	Low risk	2026-06-11
`v0.0.0-20260610072113-f3ac5cb47bf9`	Low risk	2026-06-11
`v0.0.0-20260610071440-0d7151df6bdb`	Low risk	2026-06-11
`v0.0.0-20260610071027-0852798d3226`	Low risk	2026-06-11
`v0.0.0-20260610071733-2b980f4a9a57`	Low risk	2026-06-11
`v0.0.0-20260610070607-7a57f0786a22`	Low risk	2026-06-11
`v0.0.0-20260610070326-11af0db3aef6`	Low risk	2026-06-11

Block this in CI

PkgRadar gates github.com/mr-spect3r/vandor (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/mr-spect3r/[email protected]