Seven Malicious Go Packages Found Deploying Malware on Linux and macOS Systems

stapp · Mar 5, 2025

Cybersecurity researchers are alerting of an ongoing malicious campaign targeting the Go ecosystem with typosquatted modules that are designed to deploy loader malware on Linux and Apple macOS systems.
"The threat actor has published at least seven packages impersonating widely used Go libraries, including one (github[.]com/shallowmulti/hypert) that appears to target financial-sector developers," Socket researcher Kirill Boychenko said in a new report.
Click to expand...

"The repeated use of identical filenames, array-based string obfuscation, and delayed execution tactics strongly suggests a coordinated adversary who plans to persist and adapt," Boychenko noted.
"The discovery of multiple malicious hypert and layout packages, along with multiple fallback domains, points to an infrastructure designed for longevity, enabling the threat actor to pivot whenever a domain or repository is blacklisted or removed."
Click to expand...

https://thehackernews.com/2025/03/seven-malicious-go-packages-found.html

Log in or Sign up

Seven Malicious Go Packages Found Deploying Malware on Linux and macOS Systems

stapp Global Moderator

Log in or Sign up

Seven Malicious Go Packages Found Deploying Malware on Linux and macOS Systems

stapp Global Moderator

Useful Searches