Someone forked a popular database module and fitted it with malware The malicious fork was then cached and stored indefinitely It was then creatively hidden in plain sight to target Go developers A ...

Researcher says ecosystem's auto-caching is a net positive but presents exploitable quirks A security researcher says a backdoor masquerading as a legitimate Go programming language package used by ...

A mirror proxy Google runs on behalf of developers of the Go programming language pushed a backdoored package for more than ...

Go, one of the most popular programming languages alongside "traditional" standards such as Python, C, and Visual Basic, was exploited to turn legitimate open-source projects into ...