PkgRadar

Go modules · proxy.golang.org

yunion.io/x/cloudmux

Remote Payload: matched "cUrl "

Why PkgRadar flagged v0.3.10-0-alpha.1.0.20260605102801-598334dfea6f

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · yunion.io/x/[email protected]/pkg/multicloud/azure/storageaccount.go
mediumRemote Payloadmatched "cUrl " · yunion.io/x/[email protected]/pkg/multicloud/ecloud/instance.go
mediumRemote Payloadmatched "cUrl " · yunion.io/x/[email protected]/pkg/multicloud/esxi/storage.go
mediumRemote Payloadmatched "cURL " · yunion.io/x/[email protected]/pkg/multicloud/openstack/oscli/token2.go
mediumRemote Payloadmatched "cUrl " · yunion.io/x/[email protected]/pkg/multicloud/qcloud/bucket.go
mediumRemote Payloadmatched "cUrl " · yunion.io/x/[email protected]/pkg/multicloud/qcloud/elastic_search.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.3.10-0-alpha.1.0.20260605102801-598334dfea6fHigh risk922026-06-11
v0.3.10-0-alpha.1.0.20260608093459-7789fd47ef2bHigh risk922026-06-09
v0.3.10-0-alpha.1.0.20260608062406-a5f49eb4d079High risk922026-06-09
v0.3.10-0-alpha.1.0.20260605102752-5312ff154585High risk922026-06-06
v0.3.10-0-alpha.1.0.20260601032706-df89db04e485High risk922026-06-02
v0.3.10-0-alpha.1.0.20260123023413-f5d35910430cHigh risk802026-06-02
v0.3.10-0-alpha.1.0.20260528115421-5ca4bf4875b8High risk922026-05-30
v0.3.10-0-alpha.1.0.20260305042141-39d16105837fHigh risk682026-05-30

Block this in CI

PkgRadar gates yunion.io/x/cloudmux (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go yunion.io/x/[email protected]