Safeguard
Tag

pkg-go-dev-security

Safeguard articles tagged "pkg-go-dev-security" — guides, analysis, and best practices for software supply chain and application security.

1 article

Software Supply Chain Security

Typosquatting and malicious Go modules published to pkg.g...

How malicious Go modules exploit pkg.go.dev's open publishing model, real typosquatting attacks like steelpoor/tlsproxy, and why Go's module proxy makes cleanup so hard.

Feb 4, 20268 min read
pkg-go-dev-security — Safeguard Blog