PkgRadar

Go modules · proxy.golang.org

github.com/never-labs/gscript

Remote Payload: matched "wGet "

Why PkgRadar flagged v0.0.0-20260603173024-8bc0751234fd

SeveritySignalEvidence
mediumRemote Payloadmatched "wGet " · github.com/never-labs/[email protected]/internal/runtime/native_string.go
mediumRemote Payloadmatched "wGet " · github.com/never-labs/[email protected]/internal/vm/vm_ops.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260603173024-8bc0751234fdReview242026-06-04
v0.0.0-20260601172609-bcd8952517feReview242026-06-02
v0.0.0-20260601162121-657c2ad0c1adReview242026-06-02
v0.0.0-20260601160306-e3d610650d9dReview242026-06-02
v0.0.0-20260601155743-4b9d282a717eReview242026-06-02
v0.0.0-20260601145629-9d20147f90edReview242026-06-02
v0.0.0-20260601145306-5f6a9934c9abReview242026-06-02
v0.0.0-20260601142227-628cedfaf34eReview242026-06-02
v0.0.0-20260601135334-5489d02ab944Review242026-06-02
v0.0.0-20260601132852-dced86295e2aReview242026-06-02
v0.0.0-20260601132719-435090f6ce3cReview242026-06-02
v0.0.0-20260601125722-7c8eb7163845Review242026-06-02
v0.0.0-20260601125556-cd5e08469a46Review242026-06-02
v0.0.0-20260601115319-eff6b67a8d25Review242026-06-02
v0.0.0-20260601112204-97db55140dc7Review242026-06-02
v0.0.0-20260601105756-16102a268a7bReview242026-06-02
v0.0.0-20260601104520-82faed4e6a51Review242026-06-02
v0.0.0-20260601102837-c422e8247b33Review242026-06-02
v0.0.0-20260601100221-5eafb30dec30Review242026-06-02
v0.0.0-20260601093258-43cd3870faf4Review242026-06-02
v0.0.0-20260601092303-dd08b970d2e4Review242026-06-02
v0.0.0-20260601085501-02aba3bbae7dReview242026-06-02
v0.0.0-20260601082331-ebe68c3c1f2fReview242026-06-02
v0.0.0-20260601080314-4da77c07b068Review242026-06-02
v0.0.0-20260601075419-a43b61253b72Review242026-06-02
v0.0.0-20260601073148-81f601f4831eReview242026-06-02
v0.0.0-20260601072313-1f1c04c2143eReview242026-06-02
v0.0.0-20260601070840-9d2c1309ac52Review242026-06-02
v0.0.0-20260601065425-1c9cadbd856fReview242026-06-02

Block this in CI

PkgRadar gates github.com/never-labs/gscript (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/never-labs/[email protected]