PkgRadar

Go modules · proxy.golang.org

github.com/vmware/alb-sdk

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.0-20260601035943-e35b773bea44

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/vmware/[email protected]/go/models/nsxt_image_details.go
mediumRemote Payloadmatched "cURL " · github.com/vmware/[email protected]/go/models/vcenter_cluster_details.go
mediumRemote Payloadmatched "cURL " · github.com/vmware/[email protected]/go/models/vcenter_image_details.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260601035943-e35b773bea44High risk472026-06-02
v0.0.0-20260601040021-6f000827b20bHigh risk472026-06-02
v0.0.0-20260601040843-c4e2e9e22253High risk472026-06-02
v0.0.0-20260601040625-37dfef950d3eHigh risk472026-06-02

Block this in CI

PkgRadar gates github.com/vmware/alb-sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/vmware/[email protected]