Go modules · proxy.golang.org

github.com/pgedge/control-plane

Reverse Shell, Remote Payload

Why PkgRadar flagged v0.10.0-rc.4

Severity	Signal	Evidence
high	Reverse Shell	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.10.0-rc.4`	High risk	52	2026-07-30
`v0.10.0-rc.3.0.20260729190154-d95ae68083e6`	High risk	52	2026-07-30
`v0.10.0-rc.3`	High risk	52	2026-07-30
`v0.9.1-0.20260727073703-12fdcd550fef`	High risk	52	2026-07-28
`v0.10.0-rc.2`	High risk	52	2026-07-28
`v0.9.1-0.20260724152100-c0ce2e8180b1`	High risk	52	2026-07-25
`v0.10.0-rc.1`	High risk	52	2026-07-25
`v0.9.1-0.20260708165942-38d405602cbd`	High risk	52	2026-07-09
`v0.9.1-0.20260706161717-15047c6b7adf`	High risk	52	2026-07-07
`v0.8.1-0.20260706155001-54956e09a176`	High risk	52	2026-07-07
`v0.9.1-0.20260624152524-685d2ab0ac0d`	High risk	15	2026-06-25
`v0.9.0`	High risk	15	2026-06-25
`v0.9.0-rc.2`	High risk

Block this in CI

PkgRadar gates github.com/pgedge/control-plane (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/pgedge/[email protected]