Go modules · proxy.golang.org

github.com/shadow1ng/fscan

Reverse Shell, Tls Verification Disabled, Credential file access +1 more

Why PkgRadar flagged v0.0.0-20260425093916-760c8ea50247

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260425093916-760c8ea50247`	High risk	106	2026-07-18
`v0.0.0-20260715180436-3ef7a1beeee8`	High risk	113	2026-07-18
`v0.0.0-20260710055726-bf036fd9b272`	High risk	113	2026-07-11
`v0.0.0-20260614142348-c49c23c7f0bf`	Review	13	2026-06-19
`v0.0.0-20260616032917-3c128ca4bd58`	Review	9	2026-06-17
`v0.0.0-20260615111115-353d525642d3`	Review	9	2026-06-16
`v0.0.0-20260615044601-d7dbccab76e5`	Review	7	2026-06-16
`v0.0.0-20260614142352-6d61b661f4b1`	Review	7	2026-06-15
`v0.0.0-20260601005424-72042111c6a3`	Low risk	0	2026-06-02

Block this in CI

PkgRadar gates github.com/shadow1ng/fscan (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/shadow1ng/[email protected]