PkgRadar

Go modules · proxy.golang.org

github.com/xalgord/xalgorix/v4

Remote Payload: matched "wget "

Why PkgRadar flagged v4.5.13

SeveritySignalEvidence
mediumRemote Payloadmatched "wget " · github.com/xalgord/xalgorix/[email protected]/cmd/xalgorix/main.go
mediumRemote Payloadmatched "curl " · github.com/xalgord/xalgorix/[email protected]/internal/agent/agent.go
mediumRemote Payloadmatched "curl " · github.com/xalgord/xalgorix/[email protected]/internal/agent/hooks.go
mediumRemote Payloadmatched "wget " · github.com/xalgord/xalgorix/[email protected]/internal/tools/httpclient/httpclient.go
mediumRemote Payloadmatched "curl " · github.com/xalgord/xalgorix/[email protected]/internal/tools/proxy/proxy.go
mediumRemote Payloadmatched "curl " · github.com/xalgord/xalgorix/[email protected]/internal/web/autonomous.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v4.5.13High risk772026-06-09
v4.5.1High risk652026-06-09
v4.5.2High risk652026-06-09
v4.5.12High risk772026-06-09
v4.5.8High risk772026-06-09
v4.5.4High risk652026-06-09
v4.4.33High risk652026-06-09
v4.5.6High risk772026-06-09
v4.5.7High risk772026-06-09
v4.4.36-0.20260607220158-627a72eb322dHigh risk772026-06-09
v4.5.16High risk772026-06-09
v4.4.36-0.20260606222349-548c3e8620c8High risk652026-06-08
v4.5.5High risk652026-06-08
v4.4.35High risk652026-06-07
v4.4.33-0.20260604225534-a164d86a598fHigh risk652026-06-06
v4.4.32High risk652026-06-06
v4.4.31-0.20260603224000-2fbee77f885aHigh risk652026-06-05
v4.4.30High risk652026-06-05
v4.4.29High risk652026-06-04
v4.4.27Review652026-05-30
v4.4.24Review652026-05-30
v4.4.26Review652026-05-30
v4.4.25Review652026-05-30
v4.4.24-0.20260529113409-c63f7dc0300cReview652026-05-30
v4.4.23Review652026-05-30

Block this in CI

PkgRadar gates github.com/xalgord/xalgorix/v4 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/xalgord/xalgorix/[email protected]
Start free — 25 scans / moView full evidence