A pair of typosquatted Go packages posing as Google’s UUID library quietly turn helper functions into encrypted exfiltration channels to a paste site, putting d…

Socket Threat Research Team discovered two malicious Go packages typosquatting Google's UUID library. The packages pose as legitimate UUID helpers while secretly exfiltrating data through encrypted channels to paste sites. This supply chain attack targets developers and CI/CD systems by impersonating a commonly used Google library. The malicious packages turn helper functions into data exfiltration mechanisms, putting sensitive developer and build system data at risk.