PkgRadar

Go modules · proxy.golang.org

github.com/mr-spect3r/vandor

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260610180323-48af7a5247e9

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/mr-spect3r/[email protected]/postexploit/backdoor.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260610180323-48af7a5247e9Review222026-06-11
v0.0.0-20260610084317-10192fad3b36Review52026-06-11
v0.0.0-20260610082651-b3e7db271250Review52026-06-11
v0.0.0-20260610082018-76fa4004fe48Review52026-06-11
v0.0.0-20260610073445-ce324392ff9aReview52026-06-11
v0.0.0-20260610073239-57321646c0e7Review52026-06-11
v0.0.0-20260610072113-f3ac5cb47bf9Review52026-06-11
v0.0.0-20260610071440-0d7151df6bdbReview52026-06-11
v0.0.0-20260610071027-0852798d3226Review52026-06-11
v0.0.0-20260610071733-2b980f4a9a57Review52026-06-11
v0.0.0-20260610070607-7a57f0786a22Review52026-06-11
v0.0.0-20260610070326-11af0db3aef6Review52026-06-11
v0.0.0-20260609135245-e2b69f05f897Review52026-06-10
v0.0.0-20260609131210-6cf902cb39b4Review52026-06-10
v0.0.0-20260609132355-d24de4a886d0Review52026-06-10

Block this in CI

PkgRadar gates github.com/mr-spect3r/vandor (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/mr-spect3r/[email protected]