Go modules · proxy.golang.org
github.com/superfly/flyctl
Remote Payload: matched "cUrl "
Why PkgRadar flagged v0.4.58
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "cUrl " · github.com/superfly/[email protected]/gql/generated.go |
| medium | Remote Payload | matched "wget " · github.com/superfly/[email protected]/internal/build/imgsrc/builtins/defaultbuiltins.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/superfly/[email protected]/internal/build/imgsrc/nixpacks_builder.go |
| medium | Remote Payload | matched "cURL " · github.com/superfly/[email protected]/internal/cli/cli.go |
| medium | Remote Payload | matched "cUrl\n\n\t" · github.com/superfly/[email protected]/internal/command/redis/attach.go |
| medium | Remote Payload | matched "cUrl\n\t\t\t" · github.com/superfly/[email protected]/internal/command/redis/reset_password.go |
| medium | Remote Payload | matched "curl " · github.com/superfly/[email protected]/internal/command/wireguard/tokens.go |
| medium | Remote Payload | matched "cUrl " · github.com/superfly/[email protected]/internal/flyerr/flyerr.go |
| medium | Remote Payload | matched "iwr " · github.com/superfly/[email protected]/internal/update/update.go |
| medium | Remote Payload | matched "Wget " · github.com/superfly/[email protected]/scanner/phoenix.go |
| medium | Credential file access | matched ".ssh/" · github.com/superfly/[email protected]/internal/command/ssh/issue.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.4.58 | High risk | 130 | 2026-06-05 |
Block this in CI
pkgradar gate --ecosystem go github.com/superfly/[email protected]