malicious-go-modules

Malicious Go modules found on GitHub

Malicious Go modules keep surfacing on GitHub, exploiting the ecosystem's lack of a curated registry. Here's the pattern — and how to defend against it.