Go modules · proxy.golang.org

github.com/ra000wl/syck

Webhook Exfil Endpoint: matched "hooks.slack.com/services/"

Why PkgRadar flagged v1.0.1-0.20260606171932-decbda15aec7

Severity	Signal	Evidence
high	Webhook Exfil Endpoint	matched "hooks.slack.com/services/" · github.com/ra000wl/[email protected]/internal/ruletest/generate.go

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.0.1-0.20260606171932-decbda15aec7`	High risk	58	2026-06-07
`v1.0.0`	High risk	58	2026-06-07
`v0.0.0-20260606105846-29d5c9b2a791`	High risk	58	2026-06-07
`v0.0.0-20260606122818-fb49e34c4a6b`	High risk	58	2026-06-07
`v0.0.0-20260606121736-9e9ec2cf54c5`	High risk	58	2026-06-07
`v0.0.0-20260606115115-29de6aaf06a1`	High risk	58	2026-06-07
`v0.0.0-20260606112159-222c342a3bdf`	High risk	58	2026-06-07
`v0.0.0-20260605153306-3032f4807c5d`	Review	13	2026-06-07
`v0.0.0-20260606103742-049e788f88f0`	High risk	58	2026-06-07
`v0.0.0-20260606081643-cb2b9fcd81e7`	High risk	58	2026-06-07

Block this in CI

PkgRadar gates github.com/ra000wl/syck (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/ra000wl/[email protected]