PkgRadar

Go modules · proxy.golang.org

github.com/robertpelloni/hypercode

Webhook Exfil Endpoint: matched "webhook.site"

Why PkgRadar flagged v0.0.0-20260614234110-82a896d4f405

SeveritySignalEvidence
highWebhook Exfil Endpointmatched "webhook.site" · github.com/robertpelloni/[email protected]/..go_backup_old/webhook_tester_mcp.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/robertpelloni/[email protected]/..go_backup_old/awesome_mcp_servers.go
mediumRemote Payloadmatched "cURL " · github.com/robertpelloni/[email protected]/..go_backup_old/evm_mcp.go
mediumRemote Payloadmatched "curl " · github.com/robertpelloni/[email protected]/..go_backup_old/feuse_mcp.go
mediumRemote Payloadmatched "api.github.com/graphql" · github.com/robertpelloni/[email protected]/..go_backup_old/github_graphql_mcp_server.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/robertpelloni/[email protected]/..go_backup_old/gx_mcp_server.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/robertpelloni/[email protected]/..go_backup_old/jpisnice_shadcn_ui_mcp_server.go
mediumRemote Payloadmatched "cUrl " · github.com/robertpelloni/[email protected]/..go_backup_old/kubb_mcp.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/robertpelloni/[email protected]/..go_backup_old/mcpdiscovery.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/robertpelloni/[email protected]/..go_backup_old/mcpmcp_server.go
mediumRemote Payloadmatched "cURL " · github.com/robertpelloni/[email protected]/..go_backup_old/nestjs_swagger_mcp.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/robertpelloni/[email protected]/..go_backup_old/plsreadme.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260614234110-82a896d4f405High risk1552026-06-16
v0.0.0-20260614032813-336c0907478dLow risk02026-06-15
v0.0.0-20260607003048-728410f7763fLow risk02026-06-08
v0.0.0-20260606210251-5ae512a09366Low risk02026-06-08
v0.0.0-20260606193009-c6c91366ed82Low risk02026-06-07
v0.0.0-20260606180950-f11fb1f2a262Low risk02026-06-07
v0.0.0-20260606010710-8b785f7dcfd4Low risk02026-06-07
v0.0.0-20260603033151-85be73436a35High risk422026-06-04
v0.0.0-20260602021814-b5a84ebb734dHigh risk422026-06-03
v0.0.0-20260601003346-041b4ccb0ad2High risk422026-06-02

Block this in CI

PkgRadar gates github.com/robertpelloni/hypercode (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/robertpelloni/[email protected]