abobla@lemm.ee to Linux@lemmy.ml · edit-226 days agoMalicious Go Modules Deliver Disk-Wiping Linux Malware in Advanced Supply Chain Attackthehackernews.comexternal-linkmessage-square13linkfedilinkarrow-up1201arrow-down12file-textcross-posted to: linux
arrow-up1199arrow-down1external-linkMalicious Go Modules Deliver Disk-Wiping Linux Malware in Advanced Supply Chain Attackthehackernews.comabobla@lemm.ee to Linux@lemmy.ml · edit-226 days agomessage-square13linkfedilinkfile-textcross-posted to: linux
Packages: github.com/truthfulpharm/prototransform github.com/blankloggia/go-mcp github.com/steelpoor/tlsproxy
minus-squarevegetvs@kbin.earthlinkfedilinkarrow-up69arrow-down3·26 days ago The Go programming language allows developers to fetch modules directly from version control platforms like GitHub. This is absolutely not just specific to Go.
minus-squarekrakenfury@lemmy.sdf.orglinkfedilinkEnglisharrow-up40arrow-down2·26 days ago PyPi npm Maven Central Docker Hub Artifact Hub PPA AUR The problem isn’t specific to anything. It’s also not specific to malware. Vulnerabilities are just as dangerous, if not more so.
minus-squareFurryMemesAccount@lemmy.blahaj.zonelinkfedilinkarrow-up7·25 days agoCargo also has a --git option but I suppose it’s not default behavior
minus-squarekrakenfury@lemmy.sdf.orglinkfedilinkEnglisharrow-up2·25 days agoSure! My point is that hosting doesn’t really matter, though. Malware and vulnerabilities are introduced at all points of supply chains.
minus-squareFurryMemesAccount@lemmy.blahaj.zonelinkfedilinkarrow-up3·25 days agoI agree, I was just giving another example to raise awareness about that feature of rust.
This is absolutely not just specific to Go.
The problem isn’t specific to anything. It’s also not specific to malware. Vulnerabilities are just as dangerous, if not more so.
Cargo also has a
--gitoption but I suppose it’s not default behaviorSure! My point is that hosting doesn’t really matter, though. Malware and vulnerabilities are introduced at all points of supply chains.
I agree, I was just giving another example to raise awareness about that feature of rust.