3 ms·
Go Supply Chain Attack: Malicious Package Exploits Go Module Proxy Caching For
- fastest963 2y agoThe module cache should periodically get that the tag still matches the upstream repo. If it doesn't then show a warning when installing or on the docs page.
- idlephysicist 2y agoIt's kind of amazing that this periodic check has not been implemented already.
- vdm 2y agodup https://news.ycombinator.com/item?id=42947912 https://news.ycombinator.com/item?id=42947912