PkgRadar

Go modules · proxy.golang.org

github.com/powerkimhub/cb-spider

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260612122925-2e821e3d9804

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/powerkimhub/[email protected]/api-runtime/rest-runtime/admin-web/AdminWeb-Driver.go
mediumRemote Payloadmatched "cURL " · github.com/powerkimhub/[email protected]/api-runtime/rest-runtime/admin-web/AdminWeb-QuotaInfo.go
mediumRemote Payloadmatched "curl " · github.com/powerkimhub/[email protected]/cloud-control-manager/cloud-driver/drivers/aws/resources/ClusterHandler.go
mediumRemote Payloadmatched "curl " · github.com/powerkimhub/[email protected]/cloud-control-manager/cloud-driver/drivers/gcp/resources/ClusterHandler.go
mediumRemote Payloadmatched "cUrl " · github.com/powerkimhub/[email protected]/cloud-control-manager/cloud-driver/drivers/gcp/resources/NLBHandler.go
mediumRemote Payloadmatched "curl " · github.com/powerkimhub/[email protected]/cloud-control-manager/cloud-driver/drivers/ncp/resources/ClusterHandler.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260612122925-2e821e3d9804High risk982026-06-13
v0.0.0-20260602135304-f3518d287824High risk982026-06-03

Block this in CI

PkgRadar gates github.com/powerkimhub/cb-spider (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/powerkimhub/[email protected]