🧰 Go modules

The items that name it 5

• Evolution of Web3 in Cloud Supply Chain Attacks
  article2026-10-07
• Introducing deny list egress policies for Harden-Runner
  article2026-09-02

  Module downloads and checksum verification are separate lookups/upstream destinations relevant to deny-list configuration.

• DataDog/guarddog
  repo2026-07-11
• PolinRider Jumps the Fence to Go, Packagist, npm, PyPI
  writeup2026-07-08It is written here as Go modules (proxy.golang.org).

  More than 80 Go modules affected, roughly 61 confirmed as distinct malicious module versions; module identity is the repo path and version is a git tag, so no separate publish credential exists.

• Socket: PolinRider
  writeup2026-07-02

  80 Go modules with compromise traces, including malicious versions published after Xpos587 account repositories were modified