Single-Letter Go Module Typosquat Drops DNS-Based Backdoor

A newly uncovered software supply chain attack targeting Go developers demonstrates how a single-character typo can silently introduce a persistent backdoor. A malicious Go module, github.com/shopsprint/decimal, designed to impersonate the widely trusted github.com/shopspring/decimal library used for high-precision arithmetic in financial and analytics applications. The legitimate package is heavily adopted across the Go ecosystem, with more than 38,000 known […]

The post Single-Letter Go Module Typosquat Drops DNS-Based Backdoor appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.