PkgRadar

Go modules · proxy.golang.org

golang.org/x/sys

Remote Payload: matched "wget "

Why PkgRadar flagged v0.0.0-20260527141443-d58dcfa8a745

SeveritySignalEvidence
mediumRemote Payloadmatched "wget " · golang.org/x/[email protected]/unix/ztypes_netbsd_386.go
mediumRemote Payloadmatched "wget " · golang.org/x/[email protected]/unix/ztypes_netbsd_amd64.go
mediumRemote Payloadmatched "wget " · golang.org/x/[email protected]/unix/ztypes_netbsd_arm.go
mediumRemote Payloadmatched "wget " · golang.org/x/[email protected]/unix/ztypes_netbsd_arm64.go
mediumRemote Payloadmatched "wget " · golang.org/x/[email protected]/unix/ztypes_openbsd_386.go
mediumRemote Payloadmatched "wget " · golang.org/x/[email protected]/unix/ztypes_openbsd_amd64.go
mediumRemote Payloadmatched "wget " · golang.org/x/[email protected]/unix/ztypes_openbsd_arm.go
mediumRemote Payloadmatched "wget " · golang.org/x/[email protected]/unix/ztypes_openbsd_arm64.go
mediumRemote Payloadmatched "wget " · golang.org/x/[email protected]/unix/ztypes_openbsd_mips64.go
mediumRemote Payloadmatched "wget " · golang.org/x/[email protected]/unix/ztypes_openbsd_ppc64.go
mediumRemote Payloadmatched "wget " · golang.org/x/[email protected]/unix/ztypes_openbsd_riscv64.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260527141443-d58dcfa8a745High risk502026-06-07

Block this in CI

PkgRadar gates golang.org/x/sys (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go golang.org/x/[email protected]