15,000 Go Module Repositories on GitHub Vulnerable to Repojacking Attack

• crates.io

  663 2,908 10.0 Rust

  The Rust package registry

  

  Rust does it so much better with https://crates.io . I don't know why Go can't (or won't) do something similar.

• InfluxDB

  www.influxdata.com featured

  Purpose built for real-time analytics at any scale. InfluxDB Platform is powered by columnar analytics, optimized for cost-efficient storage, and built with open data standards.

  

• icingadb

  1 57 9.2 Go

  Icinga configuration and state database supporting multiple environments

  

  First off I'm not a security person. This can go deep from the mod/sum file hash managers to the commits hash managers, to the repo hash managers, to hashes and time stamps in the go binary. https://github.com/Icinga/icingadb/pull/487

Suggest a related project