https://socket.dev/blog/typosquatted-go-packages-deliver-malware-loader