15,000 GO MODULE REPOSITORIES ON GITHUB VULNERABLE TO REPOJACKING ATTACK

Summary from the TLDR InfoSec newsletter

Security research firm Vulncheck claims that 15,000 Go module repositories on GitHub are vulnerable to an attack called repojacking, where bad actors take advantage of account username changes and deletions to create repositories with the same name and stage open-source software supply chain attacks. These repositories account for at least 800,000 Go module-versions.