Go Supply Chain Attack: Malicious Package Exploits Go Module...
socket.dev
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.