Go module typosquat boltdb-go cached by proxy.golang.org

What happened

• Separate case: disk-wiper Go modules (May 2025, Socket).

Sources

• https://socket.dev/blog/malicious-package-exploits-go-module-proxy-caching-for-persistence

This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.