Go modules · proxy.golang.org
github.com/smartcontractkit/chainlink/core/scripts
Remote Payload: matched "cURL "
Why PkgRadar flagged v0.0.0-20260602195737-722339d2b7b9
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "cURL " · github.com/smartcontractkit/chainlink/core/[email protected]/ccip/ccip-revert-reason/main.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/smartcontractkit/chainlink/core/[email protected]/cre/environment/environment/chip_ingress_stack.go |
| medium | Remote Payload | matched "cURL " · github.com/smartcontractkit/chainlink/core/[email protected]/cre/environment/environment/examples.go |
| medium | Remote Payload | matched "cURL " · github.com/smartcontractkit/chainlink/core/[email protected]/cre/environment/environment/workflow.go |
| medium | Go Mod Replace Local | go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/smartcontractkit/chainlink/core/[email protected]/go.mod |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.0.0-20260602195737-722339d2b7b9 | High risk | 58 | 2026-06-03 |
v0.0.0-20260602171916-730b6a300c81 | High risk | 58 | 2026-06-03 |
v0.0.0-20260602170357-a39ccc25a9d9 | High risk | 58 | 2026-06-03 |
v0.0.0-20260602151940-0ea6ed5bb798 | High risk | 58 | 2026-06-03 |
v0.0.0-20260602151055-3bb5d45f9e5d | High risk | 58 | 2026-06-03 |
v0.0.0-20260602124023-f8867abadf48 | High risk | 58 | 2026-06-03 |
v0.0.0-20260601214114-c5dbe0633bf7 | High risk | 58 | 2026-06-02 |
v0.0.0-20260601194301-070875879334 | High risk | 58 | 2026-06-02 |
v0.0.0-20260601151340-86881e5bc869 | High risk | 58 | 2026-06-02 |
v0.0.0-20260601122428-1cb63f7c1476 | High risk | 58 | 2026-06-02 |
v0.0.0-20260601091614-e48b85574780 | High risk | 58 | 2026-06-02 |
v0.0.0-20260528101724-4615d67bdc27 | High risk | 58 | 2026-05-30 |
v0.0.0-20260529143830-9e6be79b8f13 | Review | 58 | 2026-05-30 |
v0.0.0-20260528213054-4aa8695aa9fa | Review | 58 | 2026-05-30 |
Block this in CI
pkgradar gate --ecosystem go github.com/smartcontractkit/chainlink/core/[email protected]