Cybersecurity researchers have uncovered a sophisticated malware campaign targeting the Go programming language ecosystem through eleven malicious packages and ten of which are still active on the Go Module registry.