cm0002@lemmy.world to cybersecurity@infosec.pub · 2 months agoResearcher sniffs out three-year Go supply chain attackwww.theregister.comexternal-linkmessage-square1fedilinkarrow-up114arrow-down10
arrow-up114arrow-down1external-linkResearcher sniffs out three-year Go supply chain attackwww.theregister.comcm0002@lemmy.world to cybersecurity@infosec.pub · 2 months agomessage-square1fedilink
minus-squareOptional@lemmy.worldlinkfedilinkarrow-up6·2 months ago Fortunately, it also appears to have gone undetected by many project maintainers, with only two imports of the backdoored version recorded – both by a single cryptocurrency project with just seven followers. ha
ha