from Hacker News

Linux wiper malware hidden in malicious Go modules on GitHub

by elpocko on 5/6/25, 9:15 AM with 4 comments

• by rgoulter on 5/6/25, 10:00 AM

  I'd suggest the original article makes for better reading. https://socket.dev/blog/wget-to-wipeout-malicious-go-modules...

• by pants2 on 5/6/25, 6:50 PM

  How does this get executed in practice? To my knowledge, simply go getting a package doesn't execute any code, so perhaps this has to run when the user imports the package in a running Go program?

• by jqpabc123 on 5/6/25, 1:29 PM

  The open source supply chain is obviously highly vulnerable to this sort of attack.

  Less obvious is the motivation in this particular case. Why destroy someone's data with no real gain from it?