Go modules · proxy.golang.org
github.com/velocidex/velociraptor
Go Generate Shell: //go:generate directive shells out to curl/wget/bash — runs during `go generate`.
Why PkgRadar flagged v0.76.1-rc1.0.20260602100428-b490f6d5b7b9
| Severity | Signal | Evidence |
|---|---|---|
| medium | Go Generate Shell | //go:generate directive shells out to curl/wget/bash — runs during `go generate`. · github.com/velocidex/[email protected]/vql/parsers/ese/sid.go |
| medium | Remote Payload | matched "cUrl " · github.com/velocidex/[email protected]/api/authenticators/auth.go |
| medium | Remote Payload | matched "cUrl " · github.com/velocidex/[email protected]/config/proto/config.pb.go |
| medium | Remote Payload | matched "cUrl " · github.com/velocidex/[email protected]/services/frontend/urls.go |
| medium | Remote Payload | matched "cUrl " · github.com/velocidex/[email protected]/tools/survey/compile.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.76.1-rc1.0.20260602100428-b490f6d5b7b9 | High risk | 69 | 2026-06-05 |
v0.76.6 | High risk | 69 | 2026-06-05 |
Block this in CI
pkgradar gate --ecosystem go github.com/velocidex/[email protected]