—
MAL-2025-2545
Malicious code in github.com/boltdb-go/bolt (Go)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: google-open-source-security (9323424d3dfc7569b307842f79fb0c4bd960808214ec219f536fd5bb747422b2) This malicious Go package is a typosquat of the legitimate BoltDB package. It contains a backdoor that enables remote code execution.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/boltdb-go/bolt
Introduced in:
0No fixed version published yet for github.com/boltdb-go/bolt (go modules). Pin to a known-safe version or switch to an alternative.