PkgRadar

Go modules · proxy.golang.org

github.com/pylakey/gotd

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.0.0-20260611161102-a687dc794b18

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/pylakey/[email protected]/cmd/dlkey/main.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/pylakey/[email protected]/cmd/dltl/main.go
mediumRemote Payloadmatched "cURL " · github.com/pylakey/[email protected]/tgtest/cluster/up.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260611161102-a687dc794b18High risk362026-06-12
v0.0.0-20260611041943-4fdbf0b76e85High risk362026-06-12
v0.0.0-20260610144840-c269adb28e14High risk362026-06-11
v0.0.0-20260609144438-39912213c395High risk362026-06-11
v0.0.0-20260610110002-6bfcd4372d62High risk362026-06-11
v0.0.0-20260601143428-d7f7673d6a6dHigh risk362026-06-05
v0.0.0-20260602075836-639886202acdHigh risk362026-06-03

Block this in CI

PkgRadar gates github.com/pylakey/gotd (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/pylakey/[email protected]
Start free — 25 scans / moView full evidence