PkgRadar

Go modules · proxy.golang.org

github.com/red-collective/red-engine

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.0-20260603195151-0b2d9bb03d91

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/red-collective/[email protected]/cmd/red/main.go
mediumRemote Payloadmatched "cURL " · github.com/red-collective/[email protected]/internal/node/info.go
mediumRemote Payloadmatched "cURL " · github.com/red-collective/[email protected]/internal/registry/registry.go
mediumRemote Payloadmatched "cURL " · github.com/red-collective/[email protected]/internal/router/admin_peers.go
mediumRemote Payloadmatched "cURL " · github.com/red-collective/[email protected]/internal/router/announce.go
mediumRemote Payloadmatched "cURL " · github.com/red-collective/[email protected]/internal/router/nodeinfo.go
mediumRemote Payloadmatched "cURL " · github.com/red-collective/[email protected]/internal/router/nodes.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/red-collective/[email protected]/internal/router/sync.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260530192317-d33f0bf58ce9Review122026-06-05
v0.0.0-20260603195151-0b2d9bb03d91High risk962026-06-05

Block this in CI

PkgRadar gates github.com/red-collective/red-engine (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/red-collective/[email protected]