23 ms·

Go Supply Chain Attack: Malicious Package Exploits Go Module Proxy Caching

4 points by healsdata 2y ago

veqq 2y ago
The mechanism was reported last year: https://github.com/golang/go/issues/66653 https://github.com/golang/go/issues/66653 but not acted on.