Malicious code in github.com/BufferZoneCorp/go-stdlog (Go)

A malicious Go package, github.com/BufferZoneCorp/go-stdlog, has been identified as part of a coordinated attack cluster affecting both Go and RubyGems ecosystems. The package is attributed to the BufferZoneCorp and knot-theory clusters.\n\nThe malicious code performs multiple harmful actions: it steals credentials from affected systems, establishes unauthorized SSH access, and modifies build and workflow environment variables. These capabilities suggest the attack is designed for persistent access and lateral movement within compromised development environments.\n\nThe package was identified through Google's open-source security research. Users who have imported this package into their projects are at immediate risk of credential theft and supply chain compromise.