PkgRadar

Go modules · proxy.golang.org

github.com/pingcap/pd/tools

Go Init Base64 Combo: Go init() with base64 decode — possible obfuscated payload.

Why PkgRadar flagged v0.0.0-20260528054907-88f4e3d0eb5d

SeveritySignalEvidence
mediumGo Init Base64 ComboGo init() with base64 decode — possible obfuscated payload. · github.com/pingcap/pd/[email protected]/pd-ctl/helper/mok/rules.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260616072621-5eb3dab5370bLow risk02026-06-17
v0.0.0-20260616052821-2d5d3fed2444Low risk02026-06-17
v0.0.0-20260615095642-1d3e90fccdb9Low risk02026-06-16
v0.0.0-20260612032048-1807dfb06773Low risk02026-06-13
v0.0.0-20260610133158-9df9e671c326Low risk02026-06-11
v0.0.0-20260610095037-d2af8964786bLow risk02026-06-11
v0.0.0-20260610073018-6e3d72f90cfaLow risk02026-06-11
v0.0.0-20260609125551-53f7ab717932Low risk02026-06-10
v0.0.0-20260609084310-33718ef7ad5bLow risk02026-06-10
v0.0.0-20260604125942-9f1c47b1e851Low risk02026-06-05
v0.0.0-20260603094237-64def44776c0Low risk02026-06-04
v0.0.0-20260603074622-42942d9e1137Low risk02026-06-04
v0.0.0-20260602102030-51b1226c301eLow risk02026-06-03
v0.0.0-20260602041622-1877ae55e584Low risk02026-06-03
v0.0.0-20260601095827-7e35063b369bLow risk02026-06-02
v0.0.0-20260601035915-3ef6a3b10c84Low risk02026-06-02
v0.0.0-20260529094106-d2127bd17afaLow risk02026-05-30
v0.0.0-20260528054907-88f4e3d0eb5dReview182026-05-29
v0.0.0-20260528024511-966036d74f78Review182026-05-29

Block this in CI

PkgRadar gates github.com/pingcap/pd/tools (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/pingcap/pd/[email protected]
Start free — 25 scans / moView full evidence