Malicious Go Module Exposes GitHub Malware Lure Network Spanning 222 Repositories

A single malicious Go module led to the discovery of a sprawling, highly automated GitHub lure network of 222 repositories across 190 accounts, used to stage and deliver Windows RATs and infostealers via deceptive projects, commit-farming workflows, public dead drops, and layered PowerShell loaders.