Go Supply Chain Attack

[SiliconWizard]

Socket researchers have discovered a malicious typosquat package in the Go ecosystem, impersonating the widely used BoltDB database module (github.com/boltdb/bolt), a tool trusted by many organizations including Shopify and Heroku.

https://socket.dev/blog/malicious-package-exploits-go-module-proxy-caching-for-persistence