Malicious Package

Overview gogets.dev/btreex is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-17454 Malicious code in gogets.dev/btreex (Go)

Part of the Graphalgo campaign. The module, first published around 2026-09-08, hides its payload in a ZIP archive disguised as a SQL file btreex.sql. The payload is triggered when a specific price integer value is passed, and drops the same dual-channel RAT Ethereum smart contract dead drop plus...