Malicious Go Libraries Mimic as Google UUID to Exfiltrate User Data

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious Go Libraries Impersonate Google UUID to Exfiltrate User Data A threat actor using the GitHub alias bpoorman has introduced malicious Go libraries that mimic Google's UUID library. These libraries contain a backdoor through a hidden function named Valid, allowing the exfiltration of sensitive user data. Users of affected systems are at risk of data breaches due to this exploit. 3 sources 27