PkgRadar

Go modules · proxy.golang.org

github.com/mrz1836/sigil

Remote Payload: matched "cURL "

Why PkgRadar flagged v1.4.9

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/mrz1836/[email protected]/internal/chain/eth/client.go
mediumRemote Payloadmatched "cURL " · github.com/mrz1836/[email protected]/internal/chain/eth/gas.go
mediumRemote Payloadmatched "cURL " · github.com/mrz1836/[email protected]/internal/chain/eth/tx.go
mediumRemote Payloadmatched "cURL " · github.com/mrz1836/[email protected]/internal/chain/factory.go
mediumRemote Payloadmatched "github.com/%s/%s/releases/download" · github.com/mrz1836/[email protected]/internal/cli/upgrade.go
mediumRemote Payloadmatched "cURL " · github.com/mrz1836/[email protected]/internal/service/balance/fetcher.go
mediumRemote Payloadmatched "cURL " · github.com/mrz1836/[email protected]/internal/service/transaction/eth.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.4.9Review742026-05-29
v1.4.8Review742026-05-29

Block this in CI

PkgRadar gates github.com/mrz1836/sigil (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/mrz1836/[email protected]
Start free — 25 scans / moView full evidence