Socket researchers discovered a backdoored typosquat of BoltDB abusing Go Module Proxy caching to evade detection for over 3 years.
socket.dev/blog/malicio... #golang #cybersecurity
So for encouragement, here's a thread with examples of folks fighting back.