4 ms·Malicious Go package removed from GitHub, but credential threat persists1 points by Bender 1y ago