ClaudeRabbit
New scan
github.com/Ullaakut/cameradar · b214998

90/ 100

No threats observed

No threats observed: The scan found no deductions from code or observed behavior. Scanned 25 Oct 2026.

NetworkRegistry only
Registry traffic only
Files7 changes
/home/cr/.config/go/telemetry/local/weekends
CodeNothing taken off
no code deduction

How the attack works

as the sandbox saw it
weekends
create in install
go@go1.27.…25.v1.count
create in install
AAAA storage.…eapis.com
0 B sent
A storage.…eapis.com
0 B sent
Forge
answered, nothing real left

Score

90 / 100
1000

Nothing was taken off for what the code did or what running it showed.

What it did

486 events in 59.7s
Fetched7.0s
2561819 bytes fetched inside the VM from codeload.github.com in 2743 ms; commit id verified; egress restored
Read13.5s
3 scanner finding(s)
Checked13.5s
0 locked dependencies, 0 malicious
Jev55.4s
Answered questions from the evidence
Sandbox55.5s
install completed, entry completed, 200 forged call(s)
Score55.5s
90 No threats observed

Network

nothing real left the machine
AAAA
proxy.golang.org
0 B sent in install
Forged dns
A
proxy.golang.org
0 B sent in install
Forged dns
AAAA
proxy.golang.org
0 B sent in install
Forged dns
A
proxy.golang.org
0 B sent in install
Forged dns
GET
proxy.golang.org/github.com/%21ull…nmap/v4/@v/v4.0.1.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/bluenv…plib/v5/@v/v5.6.7.zip
0 B sent in install
Forged registry
Show all 200 calls
GET
proxy.golang.org/github.com/%21ull…masscan/@v/v1.0.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/%21ull…nmap/v4/@v/v4.0.1.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/%21ull…masscan/@v/v1.0.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/bluenv…plib/v5/@v/v5.6.7.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/rtp/@v/v1.10.5.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…bubbles/@v/v1.0.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/rtp/@v/v1.10.5.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…bubbles/@v/v1.0.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…ipgloss/@v/v1.1.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…bletea/@v/v1.3.10.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…bletea/@v/v1.3.10.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…ipgloss/@v/v1.1.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/ettle/strcase/@v/v0.2.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/hamba/cmd/v3/@v/v3.1.3.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/urfave/cli/v3/@v/v3.14.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/ettle/strcase/@v/v0.2.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/golang.org/x/term/@v/v0.47.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/golang.org/x/term/@v/v0.47.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/hamba/cmd/v3/@v/v3.1.3.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/urfave/cli/v3/@v/v3.14.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/mattn/…isatty/@v/v0.0.24.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/google/uuid/@v/v1.6.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/gorill…bsocket/@v/v1.5.3.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/bluenv…mmon/v2/@v/v2.9.6.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/mattn/…isatty/@v/v0.0.24.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/rtcp/@v/v1.2.19.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/google/uuid/@v/v1.6.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/gorill…bsocket/@v/v1.5.3.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/sdp/v3/@v/v3.0.20.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/srtp/v3/@v/v3.1.3.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/sdp/v3/@v/v3.0.20.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/rtcp/@v/v1.2.19.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/srtp/v3/@v/v3.1.3.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/bluenv…mmon/v2/@v/v2.9.6.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/randutil/@v/v0.1.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…rmonica/@v/v0.2.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…x/ansi/@v/v0.11.6.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/randutil/@v/v0.1.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/lucasb…olorful/@v/v1.3.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…rmonica/@v/v0.2.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/muesli…ermenv/@v/v0.16.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…x/ansi/@v/v0.11.6.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/mattn/…ewidth/@v/v0.0.19.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/muesli…ermenv/@v/v0.16.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/mattn/…ewidth/@v/v0.0.19.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…/x/term/@v/v0.2.2.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/muesli…0256-276c6243b2f6.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/lucasb…olorful/@v/v1.3.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…/x/term/@v/v0.2.2.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/muesli…lreader/@v/v0.2.2.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…ellbuf/@v/v0.0.15.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/muesli…0256-276c6243b2f6.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/rivo/uniseg/@v/v0.4.7.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/muesli…lreader/@v/v0.2.2.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/golang.org/x/sys/@v/v0.49.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…ellbuf/@v/v0.0.15.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/grafan…cope-go/@v/v1.4.2.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/hamba/…ger/v2/@v/v2.10.1.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/rivo/uniseg/@v/v0.4.7.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/grafan…cope-go/@v/v1.4.2.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/hamba/…ger/v2/@v/v2.10.1.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/hamba/…ter/v2/@v/v2.10.1.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/hamba/…ter/v2/@v/v2.10.1.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.io/otel/@v/v1.45.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.…cegrpc/@v/v1.45.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.…ptrace/@v/v1.45.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/golang.org/x/sys/@v/v0.49.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.…cehttp/@v/v1.45.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.io/otel/@v/v1.45.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.…cegrpc/@v/v1.45.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.…cehttp/@v/v1.45.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.…el/sdk/@v/v1.45.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.…el/sdk/@v/v1.45.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/logging/@v/v0.2.4.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/t…port/v5/@v/v5.1.1.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/logging/@v/v0.2.4.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/t…port/v5/@v/v5.1.1.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/clippe…aywidth/@v/v0.9.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/clippe…aywidth/@v/v0.9.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/clippe…ax29/v2/@v/v2.5.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/aymanb…sc52/v2/@v/v2.0.1.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/aymanb…sc52/v2/@v/v2.0.1.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…profile/@v/v0.4.1.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…profile/@v/v0.4.1.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/clippe…ax29/v2/@v/v2.5.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.…/trace/@v/v1.45.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/grafan…taprof/@v/v0.1.12.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/go-stack/stack/@v/v1.8.1.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/go4org…4219-545ba229f689.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/go4org…4219-545ba229f689.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/go-stack/stack/@v/v1.8.1.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/grafan…taprof/@v/v0.1.12.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/cactus…ient/v5/@v/v5.1.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/%21vic…etrics/@v/v1.44.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/promet…golang/@v/v1.24.1.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.…/trace/@v/v1.45.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/cactus…ient/v5/@v/v5.1.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/go-logr/logr/@v/v1.4.4.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/%21vic…etrics/@v/v1.44.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.…metric/@v/v1.45.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/go-logr/logr/@v/v1.4.4.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.…metric/@v/v1.45.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.…ptrace/@v/v1.45.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.…o/otlp/@v/v1.11.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.…o/otlp/@v/v1.11.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/google.golang.org/grpc/@v/v1.83.2.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/google.golang.org…4853-08b0e4226688.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/promet…golang/@v/v1.24.1.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/google.golang.org…4853-08b0e4226688.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/google.golang.org/grpc/@v/v1.83.2.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/google.golang.org…tobuf/@v/v1.36.12.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/xo/ter…2029-abceb7e1c41e.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/klausp…mpress/@v/v1.19.2.zip
0 B sent in install
Forged registry
AAAA
storage.googleapis.com
0 B sent in install
Forged dns
A
storage.googleapis.com
0 B sent in install
Forged dns
GET
proxy.golang.org/github.com/clippe…ringish/@v/v0.1.1.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/xo/ter…2029-abceb7e1c41e.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/valyal…stogram/@v/v1.2.0.zip
0 B sent in install
Forged registry
GET
storage.googleapis.com/proxy-golang-org-…9cSNtIfk3FSyFYGN0rpDC
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/valyal…stogram/@v/v1.2.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/go-logr/stdr/@v/v1.2.2.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/clippe…ringish/@v/v0.1.1.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/go-logr/stdr/@v/v1.2.2.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.…uto/sdk/@v/v1.2.1.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/cespar…hash/v2/@v/v2.3.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.…uto/sdk/@v/v1.2.1.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/cenkal…koff/v5/@v/v5.0.3.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/cespar…hash/v2/@v/v2.3.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/grpc-e…way/v2/@v/v2.30.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/cenkal…koff/v5/@v/v5.0.3.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/google.golang.org…tobuf/@v/v1.36.12.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/promet…t_model/@v/v0.6.2.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/promet…t_model/@v/v0.6.2.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/promet…common/@v/v0.70.1.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/promet…common/@v/v0.70.1.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/beorn7/perks/@v/v1.0.1.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/beorn7/perks/@v/v1.0.1.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/promet…procfs/@v/v0.21.1.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/grpc-e…way/v2/@v/v2.30.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/golang.org/x/net/@v/v0.59.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/valyal…astrand/@v/v1.1.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/valyal…astrand/@v/v1.1.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/promet…procfs/@v/v0.21.1.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/munner…3416-a7dc8b61c822.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/google.golang.org…4853-08b0e4226688.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/munner…3416-a7dc8b61c822.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/google.golang.org…4853-08b0e4226688.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/golang.org/x/net/@v/v0.59.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/golang.org/x/text/@v/v0.42.0.zip
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/klausp…mpress/@v/v1.19.2.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/golang.org/x/text/@v/v0.42.0.mod
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/bluenv…lib/v5/@v/v5.6.7.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/%21ull…map/v4/@v/v4.0.1.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/%21ull…asscan/@v/v1.0.0.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…ubbles/@v/v1.0.0.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/ettle/strcase/@v/v0.2.0.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…letea/@v/v1.3.10.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…pgloss/@v/v1.1.0.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/hamba/cmd/v3/@v/v3.1.3.info
0 B sent in install
Forged registry
GET
proxy.golang.org/golang.org/x/term/@v/v0.47.0.info
0 B sent in install
Forged registry
GET
proxy.golang.org/golang.org/x/net/@v/v0.59.0.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…/ansi/@v/v0.11.6.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/urfave…li/v3/@v/v3.14.0.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…monica/@v/v0.2.0.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/rtp/@v/v1.10.5.info
0 B sent in install
Forged registry
GET
proxy.golang.org/golang.org/x/text/@v/v0.42.0.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/mattn/…satty/@v/v0.0.24.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…llbuf/@v/v0.0.15.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/muesli…rmenv/@v/v0.16.0.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/mattn/…width/@v/v0.0.19.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/rivo/uniseg/@v/v0.4.7.info
0 B sent in install
Forged registry
GET
proxy.golang.org/golang.org/x/sys/@v/v0.49.0.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/lucasb…lorful/@v/v1.3.0.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/bluenv…mon/v2/@v/v2.9.6.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/randutil/@v/v0.1.0.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/clippe…x29/v2/@v/v2.5.0.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/sdp/v3/@v/v3.0.20.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/grafan…ope-go/@v/v1.4.2.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…x/term/@v/v0.2.2.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/aymanb…c52/v2/@v/v2.0.1.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/pion/rtcp/@v/v1.2.19.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/hamba/…er/v2/@v/v2.10.1.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/charmb…rofile/@v/v0.4.1.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/muesli…256-276c6243b2f6.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/clippe…ywidth/@v/v0.9.0.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/google/uuid/@v/v1.6.0.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/muesli…reader/@v/v0.2.2.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/gorill…socket/@v/v1.5.3.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/clippe…ingish/@v/v0.1.1.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/hamba/…er/v2/@v/v2.10.1.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/go4org…219-545ba229f689.info
0 B sent in install
Forged registry
GET
proxy.golang.org/go.opentelemetry.…trace/@v/v1.45.0.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/go-sta…/stack/@v/v1.8.1.info
0 B sent in install
Forged registry
GET
proxy.golang.org/github.com/cactus…ent/v5/@v/v5.1.0.info
0 B sent in install
Forged registry

Luna's report

The scan found no deductions from code or observed behavior. Pin the scanned version before using it. The most important limit is that behavior outside the observed install and entry windows was not verified.

We installed the package and ran its entry point in a throwaway sandbox, and scanned the reachable code. The run produced a complete record; no behavior deductions were reported.

What it ran

InstalledNothing to install
Entry pointenv -i HOME=/hom…T=1 FAKETIME_NO_CAC
NetworkRegistry only
MachineDestroyed after the scan

Jev's answers

answered from the evidence
Docs check
The docs do not say it makes no network calls
The docs do not say it has no side effects
Show all 3 answers
What it did fits what its docs say it is for
Install check
Install-time code does not use the network
Install-time code does not read credentials
Show all 4 answers
Install-time code does not run other programs or payloads
Install-time code is not obfuscated

Not verified

Behaviour outside the observed install and entry windows

Code paths not triggered by install or the entry point

Show all 3 items

Payloads gated on calendar dates past the accelerated clock window, or on hosts that need real responses

Reputation

GitHubOwner 12 years old
GitHubOwner established (over a year, 3+ public repositories)
GitHub5.3K stars
GitHub56 public repos

Shown apart from the code and behaviour findings.