Supply-chain threat intelligence
Incident detail
criticalgo·typosquatting·github
Malicious code in github.com/boltdb-go/bolt (Go)
Risk score
92
AI summary
Indexed incident for github.com/boltdb-go/bolt (go).
Description
This malicious Go package is a typosquat of the legitimate BoltDB package.
It contains a backdoor that enables remote code execution.
Technical details
Indicators
- ghsa95%
Timeline
- Advisory published
- Indexed by ThreatPkg
Related incidents
- Malicious code in ethereum-input-decorder (PyPI)ethereum-input-decorder92
- Malicious code in tennacity (PyPI)tennacity92
- Malicious code in @velkov/isows (npm)@velkov/isows92
- Malicious code in @tabrex/bs58 (npm)@tabrex/bs5892
- Malicious code in github.com/utilizedsun/layout (Go)github.com/utilizedsun/layout92