cm0002@lemmy.world to cybersecurity@infosec.pub · 1 month agoResearcher sniffs out three-year Go supply chain attackwww.theregister.comexternal-linkmessage-square1fedilinkarrow-up114arrow-down10
arrow-up114arrow-down1external-linkResearcher sniffs out three-year Go supply chain attackwww.theregister.comcm0002@lemmy.world to cybersecurity@infosec.pub · 1 month agomessage-square1fedilink
minus-squareOptional@lemmy.worldlinkfedilinkarrow-up6·1 month ago Fortunately, it also appears to have gone undetected by many project maintainers, with only two imports of the backdoored version recorded – both by a single cryptocurrency project with just seven followers. ha
ha