Linux wiper malware hidden in malicious Go modules on GitHub

[overdrawn98901]

Also posted about it here, as it pertained to that topic quite relevantly.

The Russian Open Source Project That We Can’t Live Without

Here’s an article on a real supply chain attack on Go. Who needs elaborate domain squatting when GitHub makes it easy. Again, FOSS independent attacks, but rather Go specific. Unlike centralized package managers such as npm or PyPI, the Go ecosystem’s decentralized nature where modules are directly imported from GitHub repositories creates substantial confusion. Developers often encounter multiple similarly named modules with entirely different maintainers, as shown below. This ambiguity mak…