Go modules · proxy.golang.org
github.com/open2b/scrigo
Go Init Env Token Exfil: Go init() reads CI / npm / cloud env tokens AND has network/exec on the same scope — canonical credential-exfil shape.
Why PkgRadar flagged v0.37.0
| Severity | Signal | Evidence |
|---|---|---|
| high | Go Init Env Token Exfil | Go init() reads CI / npm / cloud env tokens AND has network/exec on the same scope — canonical credential-exfil shape. · github.com/open2b/[email protected]/playground/packages.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.37.0 | High risk | 45 | 2026-06-20 |
v0.3.0 | High risk | 45 | 2026-06-20 |
v0.8.0 | High risk | 45 | 2026-06-20 |
v0.26.0 | High risk | 45 | 2026-06-20 |
v0.6.0 | High risk | 45 | 2026-06-20 |
v0.43.0 | High risk | 45 | 2026-06-20 |
v0.36.0 | High risk | 45 | 2026-06-20 |
v0.0.1 | High risk | 45 | 2026-06-20 |
v0.15.0 | High risk | 45 | 2026-06-20 |
v0.45.0 | High risk | 45 | 2026-06-20 |
v0.33.0 | High risk | 45 | 2026-06-20 |
v0.10.0 | High risk | 45 | 2026-06-20 |
v0.24.0 | High risk | 45 | 2026-06-20 |
v0.20.0 | High risk | 45 | 2026-06-20 |
v0.38.0 | High risk | 45 | 2026-06-20 |
v0.7.0 | High risk | 45 | 2026-06-20 |
v0.23.0 | High risk | 45 | 2026-06-20 |
v0.39.0 | High risk | 45 | 2026-06-20 |
v0.35.0 | High risk | 45 | 2026-06-20 |
v0.13.0 | High risk | 45 | 2026-06-20 |
v0.28.0 | High risk | 45 | 2026-06-20 |
v0.11.0 | High risk | 45 | 2026-06-20 |
v0.44.0 | High risk | 45 | 2026-06-20 |
v0.14.0 | High risk | 45 | 2026-06-20 |
v0.4.0 | High risk | 45 | 2026-06-20 |
v0.19.0 | High risk | 45 | 2026-06-20 |
v0.21.0 | High risk | 45 | 2026-06-20 |
v0.42.0 | High risk | 45 | 2026-06-20 |
v0.12.0 | High risk | 45 | 2026-06-20 |
v0.5.0 | High risk | 45 | 2026-06-20 |
v0.41.0 | High risk | 45 | 2026-06-20 |
v0.22.0 | High risk | 45 | 2026-06-20 |
v0.18.0 | High risk | 45 | 2026-06-20 |
v0.9.0 | High risk | 45 | 2026-06-20 |
v0.52.0 | Low risk | 0 | 2026-06-19 |
v0.59.1 | Low risk | 0 | 2026-06-19 |
v0.52.1 | Low risk | 0 | 2026-06-19 |
v0.55.0 | Low risk | 0 | 2026-06-19 |
v0.53.4 | Low risk | 0 | 2026-06-19 |
v0.50.0 | Low risk | 0 | 2026-06-19 |
v0.54.0 | Low risk | 0 | 2026-06-19 |
v0.61.0 | Low risk | 0 | 2026-06-19 |
v0.56.1 | Low risk | 0 | 2026-06-19 |
v0.58.1 | Low risk | 0 | 2026-06-19 |
v0.49.0 | Low risk | 0 | 2026-06-19 |
v0.57.1 | Low risk | 0 | 2026-06-19 |
v0.47.0 | Low risk | 0 | 2026-06-19 |
v0.51.1 | Low risk | 0 | 2026-06-19 |
v0.61.2-0.20260317143427-2f437fb8222e | Low risk | 0 | 2026-06-19 |
v0.57.0 | Low risk | 0 | 2026-06-19 |
v0.53.3 | Low risk | 0 | 2026-06-19 |
v0.60.0 | Low risk | 0 | 2026-06-19 |
v0.56.0 | Low risk | 0 | 2026-06-19 |
v0.61.1 | Low risk | 0 | 2026-06-19 |
Block this in CI
pkgradar gate --ecosystem go github.com/open2b/[email protected]