PkgRadar

Go modules · proxy.golang.org

github.com/techarohq/anubis

Remote Payload: matched "cUrl "

Why PkgRadar flagged v0.0.0-20260611154028-eb31754f0585

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · github.com/techarohq/[email protected]/cmd/anubis/main.go
mediumRemote Payloadmatched "curl " · github.com/techarohq/[email protected]/cmd/robots2policy/main.go
mediumRemote Payloadmatched "cUrl " · github.com/techarohq/[email protected]/lib/config.go
mediumRemote Payloadmatched "cUrl " · github.com/techarohq/[email protected]/lib/http.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260611154028-eb31754f0585High risk482026-06-13
v1.25.1-0.20260611154028-eb31754f0585High risk482026-06-13
v1.25.1-0.20260606152546-e7181a9a4b7aHigh risk482026-06-07
v0.0.0-20260606152546-e7181a9a4b7aHigh risk482026-06-07
v1.25.1-0.20260604200537-44d5fa3ce047High risk482026-06-06
v0.0.0-20260604200537-44d5fa3ce047High risk482026-06-06
v1.25.1-0.20260530050501-a08b0f4262eaHigh risk482026-06-01
v0.0.0-20260530050501-a08b0f4262eaHigh risk482026-06-01
v1.25.1-0.20260528153514-04b3a835cdacReview482026-05-29

Block this in CI

PkgRadar gates github.com/techarohq/anubis (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/techarohq/[email protected]