Researcher says ecosystem’s auto-caching is a net positive but presents exploitable quirks A security researcher says a backdoor masquerading as a legitimate Go programming language package used by thousands of organizations was left undetected for years.…
You must log in or register to comment.
TLDR: repo github.com/boltdb/bolt is legit, don’t use any similarly-named copies, supposedly.
