corpus.blog
41554 blogs · 4,756,248 posts Claim your blog
Record · corpus.blog/posts/01a07df5-49ef-73ff-8dac-287474ca718b

Do not pass GO - Malicious Package Alert

Snyk · published 12 February 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at snyk.io Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
14
Words captured
524

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
http://github.com/botdb-go/bolt
github.com
http://github.com/boltdb/bolt
github.com
https://pkg.go.dev/github.com/boltdb-go/bolt?tab=versions
pkg.go.dev
https://arstechnica.com/security/2025/02/backdoored-package-in-go-mirror-site-went-unnoticed-for-3-years/
arstechnica.com
https://github.com/google/capslock
github.com
http://deps.dev/
deps.dev
https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMBOLTDBGOBOLT-8688417
security.snyk.io
What is typosquatting and how typosquatting attacks are responsible for malicious modules in npm Read at the source ↗
snyk.io
Supply Chain Security Risks & Best Practice Read at the source ↗
snyk.io
https://snyk.io/articles/software-supply-chain-security/
snyk.io
https://snyk.io/solutions/software-supply-chain-security/
snyk.io
https://socket.dev/blog/malicious-package-exploits-go-module-proxy-caching-for-persistence
socket.dev
https://thehackernews.com/2025/02/malicious-go-package-exploits-module.html
thehackernews.com
https://pkg.go.dev/vuln/GO-2025-3451
pkg.go.dev