PkgRadar

Go modules · proxy.golang.org

github.com/sudorandom/buf

Remote Payload: matched "curl\n\n"

Why PkgRadar flagged v0.0.0-20260519161702-d0e7d39ca13b

SeveritySignalEvidence
mediumRemote Payloadmatched "curl\n\n" · github.com/sudorandom/[email protected]/cmd/buf/internal/command/curl/curl.go
mediumRemote Payloadmatched "curl\n\n" · github.com/sudorandom/[email protected]/private/buf/bufcurl/bufcurl.go
mediumRemote Payloadmatched "curl\n\n" · github.com/sudorandom/[email protected]/private/buf/bufcurl/headers.go
mediumRemote Payloadmatched "curl\n\n" · github.com/sudorandom/[email protected]/private/buf/bufcurl/invoker.go
mediumRemote Payloadmatched "curl\n\n" · github.com/sudorandom/[email protected]/private/buf/bufcurl/io.go
mediumRemote Payloadmatched "curl\n\n" · github.com/sudorandom/[email protected]/private/buf/bufcurl/reflection_resolver.go
mediumRemote Payloadmatched "curl\n\n" · github.com/sudorandom/[email protected]/private/buf/bufcurl/resolver.go
mediumRemote Payloadmatched "curl\n\n" · github.com/sudorandom/[email protected]/private/buf/bufcurl/tls.go
mediumRemote Payloadmatched "curl\n\n" · github.com/sudorandom/[email protected]/private/buf/bufcurl/usage.gen.go
mediumRemote Payloadmatched "curl\n\n" · github.com/sudorandom/[email protected]/private/buf/bufcurl/verbose_transport.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260519161702-d0e7d39ca13bReview242026-06-19

Block this in CI

PkgRadar gates github.com/sudorandom/buf (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/sudorandom/[email protected]