PkgRadar

Go modules · proxy.golang.org

mygithub.libinneed.workers.dev/nanovms/ops

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260531154124-ad0a36ecc9de

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · mygithub.libinneed.workers.dev/nanovms/[email protected]/cmd/run_local_instance.go
mediumRemote Payloadmatched "curl " · mygithub.libinneed.workers.dev/nanovms/[email protected]/daemon/daemon.go
mediumRemote Payloadmatched "cURL " · mygithub.libinneed.workers.dev/nanovms/[email protected]/provider/digitalocean/digital_ocean_image.go
mediumRemote Payloadmatched "curl " · mygithub.libinneed.workers.dev/nanovms/[email protected]/provider/hetzner/hetzner_image.go
mediumRemote Payloadmatched "curl " · mygithub.libinneed.workers.dev/nanovms/[email protected]/provider/onprem/onprem_instance.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260531154124-ad0a36ecc9deHigh risk752026-06-02

Block this in CI

PkgRadar gates mygithub.libinneed.workers.dev/nanovms/ops (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go mygithub.libinneed.workers.dev/nanovms/[email protected]