Go modules · proxy.golang.org
namespacelabs.dev/foundation
Remote Payload: matched "curl "
Why PkgRadar flagged v0.0.521
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · namespacelabs.dev/[email protected]/framework/planning/render/networkplanutils.go |
| medium | Remote Payload | matched "curl " · namespacelabs.dev/[email protected]/internal/cli/cmd/devbox/cmd.go |
| medium | Remote Payload | matched "curl " · namespacelabs.dev/[email protected]/internal/cli/cmd/tools/grpcurl.go |
| medium | Remote Payload | matched "curl " · namespacelabs.dev/[email protected]/internal/debugshell/image.go |
| medium | Remote Payload | matched "curl " · namespacelabs.dev/[email protected]/internal/planning/deploy/storage/output.go |
| medium | Remote Payload | matched "cUrl " · namespacelabs.dev/[email protected]/internal/providers/nscloud/api/types.go |
| medium | Remote Payload | matched "github.com/moby/buildkit/releases/download" · namespacelabs.dev/[email protected]/internal/sdk/buildctl/buildctl.go |
| medium | Remote Payload | matched "curl\n\n" · namespacelabs.dev/[email protected]/internal/sdk/grpcurl/grpcurl.go |
| medium | Remote Payload | matched "github.com/rancher/k3d/releases/download" · namespacelabs.dev/[email protected]/internal/sdk/k3d/k3d.go |
| medium | Remote Payload | matched "github.com/chainguard-dev/melange/releases/download" · namespacelabs.dev/[email protected]/internal/sdk/melange/melange.go |
| medium | Remote Payload | matched "cUrl " · namespacelabs.dev/[email protected]/library/oss/localstack/prepare/bucket/main.go |
| medium | Remote Payload | matched "cUrl " · namespacelabs.dev/[email protected]/library/oss/minio/prepare/main.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.0.521 | High risk | 110 | 2026-06-11 |
v0.0.520 | High risk | 110 | 2026-06-06 |
v0.0.517 | High risk | 110 | 2026-06-02 |
Block this in CI
pkgradar gate --ecosystem go namespacelabs.dev/[email protected]