Go modules · proxy.golang.org

github.com/pedidopago/wabaman-contrib

Remote Payload: matched "cURL "

Why PkgRadar flagged v1.9.13-0.20260610132753-2f8095eadb76

Severity	Signal	Evidence
medium	Remote Payload	matched "cURL " · github.com/pedidopago/[email protected]/rest/types.go
medium	Remote Payload	matched "cURL " · github.com/pedidopago/[email protected]/wsapi/clientmessage.go

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.9.13-0.20260610132753-2f8095eadb76`	Review	24	2026-06-11
`v1.9.13-0.20260608141714-fb4f0f44947e`	Review	24	2026-06-09
`v1.9.13-0.20260608141654-4af4b0e02ad9`	Review	24	2026-06-09
`v1.9.13-0.20260604181908-b1e12c0742cb`	Review	24	2026-06-05
`v1.9.13-0.20260529144028-4940ce19264e`	Review	24	2026-05-30

Block this in CI

PkgRadar gates github.com/pedidopago/wabaman-contrib (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/pedidopago/[email protected]