Launch Week Day 1: Announcing Security Design Review
CRITICAL Go Malware

Malicious code in github.com/boltdb-go/bolt (Go)

MAL-2025-2545

Published ยท Modified

Description


__

Source: google-open-source-security (9323424d3dfc7569b307842f79fb0c4bd960808214ec219f536fd5bb747422b2)

This malicious Go package is a typosquat of the legitimate BoltDB package.
It contains a backdoor that enables remote code execution.

Ready to move

Start Securing

Free, no credit card | First findings in minutes