PkgRadar

Go modules · proxy.golang.org

github.com/znasllc-io/memql

Remote Payload: matched "cURL\n\t"

Why PkgRadar flagged v0.9.7-0.20260602203324-8dbc21b0811d

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL\n\t" · github.com/znasllc-io/[email protected]/component/polyphon/localroom.go
mediumRemote Payloadmatched "curl " · github.com/znasllc-io/[email protected]/component/safety/llm/prompt.go
mediumRemote Payloadmatched "cURL " · github.com/znasllc-io/[email protected]/integrations/avatardirect/avatardirect.go
mediumRemote Payloadmatched "curl " · github.com/znasllc-io/[email protected]/integrations/knowledge/seed.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.9.7-0.20260602203324-8dbc21b0811dHigh risk532026-06-03
v0.9.6High risk412026-06-03
v0.9.0High risk412026-05-31

Block this in CI

PkgRadar gates github.com/znasllc-io/memql (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/znasllc-io/[email protected]
Start free — 25 scans / moView full evidence