gocommunity.io/orderedbtree v1.0.6
Slack C2, self-delete, process spawn
Go C2 agent accepts a kill command and removes itselfGo Slack agent decrypts, drops, and executes received content
SHA-25626ad3487c4b9f839c6aa16f19ce96609b025ed96acb0f1aa41e05126401d180a
Also flagged by https://feeds.feedburner.com/TheHackersNews (Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry), https://www.aikido.dev/blog/rss.xml (Graphalgo campaign spreads to Terraform providers and Go Modules) +1 more.