A new security report from Socket details a vulnerability where malicious Go modules could exploit package fetching mechanisms to execute destructive code. The analysis covers the attack vector and its potential impact on the Go ecosystem.
https://socket.dev/blog/wget-to-wipeout-malicious-go-modules-fetch-destructive-payload