gomodules is actually the worst module system i've ever used in my life
December 2, 2025 at 10:32 AM
gomodules is actually the worst module system i've ever used in my life
Graphalgo hid malware in Terraform providers & Go modules—Slack, blockchain & trigger-based payloads now part of the game. #Malware #DevTools #Terraform #GoModules #Graphalgo #CloudSecurity https://thedailytechfeed.com/terraform-providers-hijacked-malware-lurking-in-dev-tools/
September 23, 2026 at 9:40 AM
Graphalgo hid malware in Terraform providers & Go modules—Slack, blockchain & trigger-based payloads now part of the game. #Malware #DevTools #Terraform #GoModules #Graphalgo #CloudSecurity https://thedailytechfeed.com/terraform-providers-hijacked-malware-lurking-in-dev-tools/
Discover how the Graphalgo campaign weaponized the Terraform Registry and Go modules. Learn about this supply chain attack linked to the Lazarus Group.
#Terraform #CyberSecurity #SupplyChainAttack #GoModules #LazarusGroup
#Terraform #CyberSecurity #SupplyChainAttack #GoModules #LazarusGroup
Infrastructure as Code Weaponized Against Developers
Infrastructure code has horrifyingly metamorphosed into a convenient snare for developer workstations. Cybersecurity firm Aikido recently unearthed malicious code deeply embedded within dual Terraform providers and twin Go modules. The company classifies this terrifying discovery as the inaugural documented instance of systematic malware distribution weaponizing the official Terraform Registry. The malicious providers, specifically designated as gocommunity-io/dockerd and kreuzwenker/docker, were surreptitiously published in early September.
meterpreter.org
September 25, 2026 at 11:38 AM
Discover how the Graphalgo campaign weaponized the Terraform Registry and Go modules. Learn about this supply chain attack linked to the Lazarus Group.
#Terraform #CyberSecurity #SupplyChainAttack #GoModules #LazarusGroup
#Terraform #CyberSecurity #SupplyChainAttack #GoModules #LazarusGroup
Go modules made dependency management reproducible. The go.sum file pins exact versions with checksums, so every build gets identical sources. Vendoring moved out of the tree for most teams, and workspaces handle multi module repos. Reproducibility is free now. #Golang #GoModules #Backend
August 20, 2026 at 12:57 PM
Go modules made dependency management reproducible. The go.sum file pins exact versions with checksums, so every build gets identical sources. Vendoring moved out of the tree for most teams, and workspaces handle multi module repos. Reproducibility is free now. #Golang #GoModules #Backend
Concern was raised about libraries forcing Go 1.25 updates via go.mod, potentially creating upgrade hurdles. But many counter that popular libraries usually support multiple older Go versions, making forced upgrades less common than feared. #GoModules 4/5
August 15, 2025 at 1:00 AM
Concern was raised about libraries forcing Go 1.25 updates via go.mod, potentially creating upgrade hurdles. But many counter that popular libraries usually support multiple older Go versions, making forced upgrades less common than feared. #GoModules 4/5
Se você conhece alguém aprendendo Go ou trabalhando com módulos, compartilhe. Material bom em português merece circular 🇧🇷 🇧🇷 🇧🇷 .
alexrios.gitbook.io/gomodules/
alexrios.gitbook.io/gomodules/
Boas-vindas | Go Modules
alexrios.gitbook.io
November 9, 2025 at 4:33 PM
Se você conhece alguém aprendendo Go ou trabalhando com módulos, compartilhe. Material bom em português merece circular 🇧🇷 🇧🇷 🇧🇷 .
alexrios.gitbook.io/gomodules/
alexrios.gitbook.io/gomodules/