PkgRadar

Go modules · proxy.golang.org

mirror-github.paniser.workers.dev/google/syzkaller

Go Generate Shell: //go:generate directive shells out to curl/wget/bash — runs during `go generate`.

Why PkgRadar flagged v0.0.0-20260612145234-4f06757f683a

SeveritySignalEvidence
mediumGo Generate Shell//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · mirror-github.paniser.workers.dev/google/[email protected]/executor/gen_linux_amd64.go
mediumGo Generate Shell//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · mirror-github.paniser.workers.dev/google/[email protected]/executor/gen_linux_ppc64le.go
mediumGo Generate Shell//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · mirror-github.paniser.workers.dev/google/[email protected]/sys/fuchsia/init.go
mediumRemote Payloadmatched "cURL " · mirror-github.paniser.workers.dev/google/[email protected]/pkg/asset/backend_dummy.go
mediumRemote Payloadmatched "cURL " · mirror-github.paniser.workers.dev/google/[email protected]/pkg/asset/backend_gcs.go
mediumRemote Payloadmatched "cURL " · mirror-github.paniser.workers.dev/google/[email protected]/pkg/asset/storage.go
mediumRemote Payloadmatched "cURL " · mirror-github.paniser.workers.dev/google/[email protected]/pkg/gcs/gcs.go
mediumRemote Payloadmatched "curl " · mirror-github.paniser.workers.dev/google/[email protected]/pkg/vcs/fuchsia.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260612145234-4f06757f683aHigh risk1052026-06-14
v0.0.0-20260611203028-e93da63ed6baHigh risk1052026-06-13
v0.0.0-20260609100630-c36c07f6c1f2High risk1052026-06-10
v0.0.0-20260605170244-cc0956393c53High risk1052026-06-07
v0.0.0-20260603212752-197909be84fbHigh risk1052026-06-05
v0.0.0-20260601135111-1095583bae1dHigh risk1052026-06-02
v0.0.0-20260529094533-6b4a844333e8Review1052026-05-31

Block this in CI

PkgRadar gates mirror-github.paniser.workers.dev/google/syzkaller (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go mirror-github.paniser.workers.dev/google/[email protected]