Tag: go ecosystem

1 Attack Reports | 0 Vulnerabilities

Attack reports

Popular Go Decimal Library Targeted by Long-Running Typosquat with DNS Backdoor

A long-running typosquatting campaign impersonated the widely used shopspring/decimal Go library by publishing github.com/shopsprint/decimal, differing by a single character. Active since November 2017, the package remained benign through seven releases until being weaponized in August 2023 with ve…
typosquatting
supply chain attack
dynamic dns
2026-05-20
c2 channel
decimal library
dns backdoor
go ecosystem
init function
Published: May 20, 2026
Downloadable IOCs: 2
Click here to see more Attack Reports