Poisoned Pipeline / Incidents / AS147

AS147 · 2026-07

Malicious Go module plus 222 GitHub lure repos

Go modulesGit / GitHub

Socket: a malicious Go module exposed a GitHub malware-lure network
spanning 222 repositories.

Mapped techniques

• T0109 Publish malicious artifact
• T0111 Malicious code contribution to an open-source repository

supply-chain campaign

Sources

• https://socket.dev/blog/malicious-go-module-exposes-github-malware-lure-network