Beyond Takedown: Measuring Malicious Go Module Persistence in the Wild

Minjae Bae, Carter Yagemann

We measure an automation-based supply chain campaign in the Go ecosystem. The attackers repackage legitimate Go modules under attacker-controlled owners, and embed them with obfusc…