PkgRadar

Go modules · proxy.golang.org

github.com/ylcn91/pilot

Remote Payload: matched "api.github.com/graphql"

Why PkgRadar flagged v0.0.0-20260603181831-77082da08a06

SeveritySignalEvidence
mediumRemote Payloadmatched "api.github.com/graphql" · github.com/ylcn91/[email protected]/internal/adapters/github/client.go
mediumRemote Payloadmatched "cURL " · github.com/ylcn91/[email protected]/internal/tunnel/ngrok.go
mediumRemote Payloadmatched "curl " · github.com/ylcn91/[email protected]/internal/upgrade/upgrade.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260603181831-77082da08a06High risk412026-06-05
v0.0.0-20260602211348-9a62821d6d9aHigh risk412026-06-03
v0.0.0-20260602193646-c5e5ec575afdHigh risk412026-06-03
v0.0.0-20260602155200-a8d8a529a320High risk412026-06-03
v0.0.0-20260602133815-fbe8f86ce777High risk412026-06-03

Block this in CI

PkgRadar gates github.com/ylcn91/pilot (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/ylcn91/[email protected]
Start free — 25 scans / moView full evidence