Malicious Go Module Targets Developers with Credential Theft and Rekoobe Backdoor

A supply chain attack has been identified involving a malicious Go module, github.com/xinfeisoft/crypto, which impersonates the legitimate golang.org/x/crypto library. This module is designed to exfiltrate sensitive credentials and deploy the Rekoobe Linux backdoor, affecting developers using Go in their environments. The attack utilizes namespace confusion and multi-stage payload delivery techniques.