PkgRadar

Go modules · proxy.golang.org

vuuvv.cn/unisoftcn/orca

Remote Payload: matched "wGet "

Why PkgRadar flagged v0.2.52

SeveritySignalEvidence
mediumRemote Payloadmatched "wGet " · vuuvv.cn/unisoftcn/[email protected]/cache/helper.go
mediumRemote Payloadmatched "wGet " · vuuvv.cn/unisoftcn/[email protected]/localcache/helper.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.2.52Review242026-06-04
v0.2.51Review242026-06-04

Block this in CI

PkgRadar gates vuuvv.cn/unisoftcn/orca (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go vuuvv.cn/unisoftcn/[email protected]