Fake Go DNS scanner spread malware through over 200 GitHub repos

Security firm Socket has uncovered a malware campaign dubbed 'Operation Muck and Load,' which spreads malicious software through over 200 GitHub repositories by disguising itself as a Go DNS and subdo... Read original →

Operation Muck and Load reveals a critical blind spot in Go’s CI/CD ecosystem: threat actors weaponize automated pipelines to fabricate version histories, embedding RATs and infostealers within seemingly benign DNS scanners. Technically, this compromises not only cloud-native stacks but also semiconductor EDA workflows reliant on GitHub Actions—potentially enabling IP exfiltration or hardware backdoors. Regulatory shifts like the EU’s Cyber Resilience Act and new SEC disclosure rules will force firms to overhaul supply chain audits, inflating R&D compliance costs. Competitors like GitLab and JFrog are already capitalizing by pushing hardened, on-prem CI/CD suites, eroding GitHub’s foothold in hard-tech sectors. Within 18 months, verifiable provenance of open-source components will become a non-negotiable criterion for DevOps platform selection in chip design, accelerating adoption of zero-trust build pipelines.