PkgRadar

Go modules · proxy.golang.org

gopkg.in/Datadog/dd-trace-go.v2

Go Generate Shell, Remote Payload, Go Init Exec In Body

Why PkgRadar flagged v2.9.0-dev.0.20260625135929-cedfb4290bb6

SeveritySignalEvidence
mediumGo Generate Shell
mediumRemote Payload

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v2.9.0-dev.0.20260625135929-cedfb4290bb6Review272026-06-26
v2.6.2-rc.1Review152026-06-26
v2.8.3-rc.1Review272026-06-26
v2.9.0Review272026-06-26
v2.9.0-rc.4Review272026-06-26
v2.9.1-rc.1Review272026-06-26
v2.9.1-rc.2Review272026-06-26

Block this in CI

PkgRadar gates gopkg.in/Datadog/dd-trace-go.v2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go gopkg.in/Datadog/[email protected]