PkgRadar

Go modules · proxy.golang.org

github.com/ngrok/ngrok-ingress-controller

Webhook Exfil Endpoint: matched "ngrok.app"

Why PkgRadar flagged v0.0.0-20260602231316-422567c44cce

SeveritySignalEvidence
highWebhook Exfil Endpointmatched "ngrok.app" · github.com/ngrok/[email protected]/internal/annotations/testutil/ingress.go
highWebhook Exfil Endpointmatched "ngrok.app" · github.com/ngrok/[email protected]/internal/mocks/nmockapi/domain_client.go
mediumRemote Payloadmatched "cURL " · github.com/ngrok/[email protected]/internal/ngrokapi/bindingendpoint_aggregator.go
mediumRemote Payloadmatched "cURL\n\t\t" · github.com/ngrok/[email protected]/pkg/managerdriver/translator.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260602231316-422567c44cceHigh risk742026-06-04

Block this in CI

PkgRadar gates github.com/ngrok/ngrok-ingress-controller (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/ngrok/[email protected]