Product
github.com/vkuznet/gocurl
- First Reported
- Nov 12, 2026
- Latest Reported
- Nov 12, 2026
Reported Context (1)
- The researchers also found the stealer in another Go module, github.com/vkuznet/gocurl, in pseudo-version v0.0.0-20261111095532-8d5aad0cb0da, inside a workflow that has never run. Users should block that pseudo-version. Reports Detail CI Secret Stealer Campaign Using 4,837 Stolen GitHub Accounts
MITRE ATT&CK (11)
Products (6)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.