Heads up: Potential typosquatting namespace (labstack-go/echo) #3068
fatinsourav
started this conversation in
General
Replies: 1 comment
|
Thanks, I reported that repo to Github. I have not scanned/diffed the code but the commit history has been cleaned and newer release tags have been added than Official Echo (this) has - so it looks very suspicious |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Hi LabStack Team,
Bringing this to your attention for proactive brand protection and supply-chain hygiene:
The repo "https://github.com/labstack-go/echo/" is a close typosquat of "https://github.com/labstack/echo/". Because the Go toolchain resolves module paths directly via repository URLs (
go get github.com/...), third parties registering or squatting onlabstack-goposes a supply-chain confusion risk for developers who mistakenly reference that path.Best regards!
Fatin
All reactions