PkgRadar

Go modules · proxy.golang.org

github.com/mvanhorn/agentcookie

Remote Payload: matched "curl "

Why PkgRadar flagged v0.14.0-beta.1.0.20260606022112-82cc6ddf3cd7

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/mvanhorn/[email protected]/internal/cli/wizard.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.14.0-beta.1.0.20260606022112-82cc6ddf3cd7Review122026-06-07
v0.14.0-beta.1.0.20260604064244-922f11594290Review122026-06-05
v0.14.0-beta.1.0.20260601234357-051b516d173fReview122026-06-02
v0.14.0-beta.1.0.20260601012409-cd323b624d93Review122026-06-02
v0.12.0-beta.2Review122026-06-02
v0.12.0-beta.1Review122026-06-02
v0.12.0-beta.4Review122026-06-02
v0.13.0-beta.1Review122026-06-02
v0.12.0-beta.6Review122026-06-02
v0.12.0-beta.5Review122026-06-02
v0.12.0-beta.3Review122026-06-02
v0.14.0-beta.1Review122026-06-02

Block this in CI

PkgRadar gates github.com/mvanhorn/agentcookie (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/mvanhorn/[email protected]
github.com/mvanhorn/agentcookie — Go modules security scan | PkgRadar