Go modules · proxy.golang.org
github.com/r266-tech/wx-mcp
Remote Payload: matched "raw.githubusercontent.com"
Why PkgRadar flagged v1.6.7
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/r266-tech/[email protected]/cmd/wechat-cli/update.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v1.6.6 | Low risk | 0 | 2026-06-12 |
v1.6.2 | Low risk | 0 | 2026-06-12 |
v1.6.7 | Review | 12 | 2026-06-12 |
v1.6.12 | Review | 12 | 2026-06-12 |
v1.6.4 | Low risk | 0 | 2026-06-12 |
v1.6.9 | Review | 12 | 2026-06-12 |
v1.6.17 | Review | 12 | 2026-06-12 |
v1.6.5 | Low risk | 0 | 2026-06-12 |
v1.6.0 | Low risk | 0 | 2026-06-12 |
Block this in CI
pkgradar gate --ecosystem go github.com/r266-tech/[email protected]