PkgRadar

Go modules · proxy.golang.org

github.com/mustafa-a-khan/telegram-bot-anime

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.0.0-20260604112853-ddd3cf40a20a

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/mustafa-a-khan/[email protected]/model/anime.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/mustafa-a-khan/[email protected]/model/car-model.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/mustafa-a-khan/[email protected]/model/flower-model.go
mediumRemote Payloadmatched "cURL " · github.com/mustafa-a-khan/[email protected]/model/instagram_userInfo.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/mustafa-a-khan/[email protected]/service/getSessionService.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260604112853-ddd3cf40a20aHigh risk702026-06-05
v0.0.0-20260604064934-decda6a90cebHigh risk702026-06-05
v0.0.0-20260531063247-d5a1fae86b7eHigh risk702026-06-02

Block this in CI

PkgRadar gates github.com/mustafa-a-khan/telegram-bot-anime (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/mustafa-a-khan/[email protected]