VYPR

golang · Malicious package advisory

Malware

github.com/boltdb-go/bolt

MAL-2025-2545

Malicious code in github.com/boltdb-go/bolt (Go)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: google-open-source-security (9323424d3dfc7569b307842f79fb0c4bd960808214ec219f536fd5bb747422b2)
This malicious Go package is a typosquat of the legitimate BoltDB package.
It contains a backdoor that enables remote code execution.