PkgRadar

Go modules · proxy.golang.org

github.com/synapsecns/sanguine/ethergo

Remote Payload: matched "cURL "

Why PkgRadar flagged v1.20.2-0.20260522040455-be4367812d5b

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/synapsecns/sanguine/[email protected]/backends/anvil/client.go
mediumRemote Payloadmatched "cURL " · github.com/synapsecns/sanguine/[email protected]/backends/preset/backend.go
mediumRemote Payloadmatched "cURL " · github.com/synapsecns/sanguine/[email protected]/chain/chain_impl.go
mediumRemote Payloadmatched "cURL " · github.com/synapsecns/sanguine/[email protected]/forker/fork.go
mediumRemote Payloadmatched "curl " · github.com/synapsecns/sanguine/[email protected]/go.sum

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.20.2-0.20260522040455-be4367812d5bHigh risk602026-06-17
v0.0.0-20220825191335-2b90a41fbb2dReview122026-06-17

Block this in CI

PkgRadar gates github.com/synapsecns/sanguine/ethergo (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/synapsecns/sanguine/[email protected]