Poisoned Pipeline / Incidents / AS176

AS176 · 2025-11

Go packages impersonate Google UUID library

Go modules

Socket: malicious Go packages impersonate Google’s UUID library and exfiltrate data.

Mapped techniques

• T0129 Typosquatting
• T0184 Harvesting sensitive information from files

supply-chain campaign

Sources

• https://socket.dev/blog/malicious-go-packages-impersonate-googles-uuid-library-and-exfiltrate-data