# golang.org/x/sys@v0.46.0 — Threat Briefing

Critical risk — threat briefing for go package golang.org/x/sys@v0.46.0. Capabilities, risk paths, and what to check.

- **Ecosystem:** go
- **Latest version:** v0.46.0

## Risk

- **Level:** critical
- **Summary:** Obfuscated package writes to user-home dotfiles — concealed persistence shape

## Capability Summary

| Capability | Level |
|---|---|
| install scripts | none |
| network access | both |
| filesystem | both |
| shell execution | none |

## Capabilities

### Execution

- CLI binary installation (Go module) [common]

### Other

- Package with import "C" ships native source files [common]
- Code execution at module-load time (Go init) [common]
- Filesystem write to system directory [common]
- Filesystem write to temp directory [common]
- Filesystem write to user home (outside .config) [common]
- Blank import: file imports a package solely for its init() side effects [common]
- Go file gated on rare-target build constraint contains side-effect callees [common]
- //go:linkname aliases a Go symbol (often into stdlib internals) [common]
- Code obfuscation indicators [common]
- Windows process detach (CREATE_NO_WINDOW / DETACHED_PROCESS) [common]
- Per-file scan budget exceeded (partial analysis) [common]
- Shell fork + detach [common]
- Unexpected native binary in source [common]

### Native Code

- Native code compilation (Go cgo) [common]

### Environment

- Environment variable access [common]

### Filesystem

- Filesystem read [common]
- Filesystem write [common]

### Network

- Network client [common]
- Network server [common]

## Key Signals

- ****

## Maintainer


## Recommended Action

Do not install. Review immediately if already in use.