MAL-2026-17454 Malicious code in gogets.dev/btreex (Go)

Part of the Graphalgo campaign. The module, first published around 2026-09-08, hides its payload in a ZIP archive disguised as a SQL file btreex.sql. The payload is triggered when a specific price integer value is passed, and drops the same dual-channel RAT Ethereum smart contract dead drop plus...