WGET TO WIPEOUT: MALICIOUS GO MODULES FETCH DESTRUCTIVE PAYLOAD

Summary from the TLDR InfoSec newsletter

Socket found three malicious Go modules with hidden code that can download payloads to wipe a Linux system's primary disk (/dev/sda), making it unbootable. Attackers exploited the decentralized nature of the Go ecosystem and confusion around namespace validity to disguise malicious modules as legitimate. The payloads executed commands that wiped disks, causing irreversible data loss and severe disruptions for affected organizations.