PkgRadar

Go modules · proxy.golang.org

github.com/sthbryan/ftm

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.9.1-0.20260604204056-264f15d12cab

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/sthbryan/[email protected]/internal/app/keyhandlers_list.go
mediumRemote Payloadmatched "cURL " · github.com/sthbryan/[email protected]/internal/app/ui/components/detail_panel.go
mediumRemote Payloadmatched "cURL " · github.com/sthbryan/[email protected]/internal/app/ui/views/list.go
mediumRemote Payloadmatched "cURL " · github.com/sthbryan/[email protected]/internal/config/tunnel.go
mediumRemote Payloadmatched "cURL " · github.com/sthbryan/[email protected]/internal/process/managed.go
mediumRemote Payloadmatched "cURL " · github.com/sthbryan/[email protected]/internal/process/manager.go
mediumRemote Payloadmatched "github.com/ekzhang/bore/releases/download" · github.com/sthbryan/[email protected]/internal/providers/bore/installer.go
mediumRemote Payloadmatched "cURL " · github.com/sthbryan/[email protected]/internal/providers/interface.go
mediumRemote Payloadmatched "github.com/Pinggy-io/cli-js/releases/download" · github.com/sthbryan/[email protected]/internal/providers/pinggy/installer.go
mediumRemote Payloadmatched "cURL\n\t\t" · github.com/sthbryan/[email protected]/internal/web/handlers.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.9.1-0.20260604204056-264f15d12cabHigh risk1052026-06-07
v0.9.0High risk1052026-06-07

Block this in CI

PkgRadar gates github.com/sthbryan/ftm (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/sthbryan/[email protected]