2 ms·Researcher hacks over 35 tech firms in novel supply chain attack8 points by gjvc 6y agogjvc 6y agosee also discussion a month ago about this exact problem https://news.ycombinator.com/item?id=25672733 https://news.ycombinator.com/item?id=25672733verdverm 6y agoReminds me why I trust Go's mod and dependency management system so much. This type of attack is just not possible.