Go modules · proxy.golang.org
github.com/openclaw-rocks/openclaw-operator
Remote Payload: matched "curl "
Why PkgRadar flagged v0.36.2
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · github.com/openclaw-rocks/[email protected]/internal/resources/environment_skill.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.36.2 | Review | 17 | 2026-06-17 |
v0.36.4-0.20260616152107-ab5f444b646b | Review | 17 | 2026-06-17 |
v0.36.3 | Review | 17 | 2026-06-17 |
v0.36.2-0.20260608112256-facd64b2f2f0 | Review | 17 | 2026-06-11 |
v0.36.1 | Review | 17 | 2026-06-11 |
v0.36.0 | Review | 17 | 2026-06-05 |
v0.34.8 | Review | 17 | 2026-06-03 |
v0.34.6-0.20260526173638-e02788db1715 | Review | 17 | 2026-05-30 |
v0.34.5 | Review | 17 | 2026-05-30 |
Block this in CI
pkgradar gate --ecosystem go github.com/openclaw-rocks/[email protected]