Go Module Mirror served backdoor to devs for 3+ years
A mirror proxy Google runs on behalf of builders of the Go programming language pushed a backdoored bundle for greater than three years till Monday, after researchers who noticed the malicious code petitioned for it to be taken down twice. The service, often known as the Go Module Mirror, caches open supply packages out there […]