Go modules · proxy.golang.org

github.com/nordsecurity/nordvpn-linux

Shell Credential File Read, Go Cgo Preamble

Why PkgRadar flagged v0.0.0-20260629124510-cedc169d506b

Severity	Signal	Evidence
high	Shell Credential File Read	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260629124510-cedc169d506b`	High risk	45	2026-06-30
`v0.0.0-20260629084938-f4760cdbb3f2`	High risk	45	2026-06-30
`v0.0.0-20260618090542-748baa6c5c19`	Low risk	0	2026-06-19
`v0.0.0-20260617115708-b06e3fe7d6fc`	Low risk	0	2026-06-18
`v0.0.0-20260617090754-a700ccf98650`	Low risk	0	2026-06-18
`v0.0.0-20260616135702-3e40df8839e3`	Low risk	0	2026-06-17
`v0.0.0-20260616115446-3a0d26207c6c`	Low risk	0	2026-06-17
`v0.0.0-20260615115816-fdf5e8b7c60b`	Low risk	0	2026-06-16
`v0.0.0-20260609123848-e1ff1e8cba96`	Low risk	0	2026-06-10
`v0.0.0-20260608180531-8a5dda60bad3`	Low risk	0	2026-06-09
`v0.0.0-20260608104837-a80553f4a8f8`	Low risk	0	2026-06-09
`v0.0.0-20260605070435-5cd3b204242f`	Low risk	0	2026-06-06
`v0.0.0-20260602063140-45da4721b6b1`	Low risk	0	2026-06-03
`v0.0.0-20260601074014-667e4097184d`	Low risk	0	2026-06-02
`v0.0.0-20260528134135-df7a9034147c`	Low risk	0	2026-05-29

Block this in CI

PkgRadar gates github.com/nordsecurity/nordvpn-linux (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/nordsecurity/[email protected]