Malicious Go “crypto” Module Steals Passwords and Deploys Re...
socket.dev
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.
  • EthanEnglish
    7·
    7 hours ago

    So… don’t import random modules. Be sure the module you’re importing is the one you intend to import. That already should have been obvious.