Poisoned Pipeline / Incidents / AS153

AS153 · 2026-05

Go decimal library typosquat with DNS backdoor

Go modules

Socket: long-running typosquat of a popular Go decimal library with
a DNS backdoor.

Mapped techniques

• T0129 Typosquatting
• T0145 Bypass of outbound traffic control

supply-chain campaign

Sources

• https://socket.dev/blog/popular-go-decimal-library-typosquat-dns-backdoor