gocommunity.io/orderedbtree v1.0.8
Slack C2, self-delete, obfuscation
Go C2 agent accepts a kill command and removes itselfGo Slack agent decrypts, drops, and executes received content
SHA-256e3e024298ea3d6dfccacadeedfa159d1c17451a45ebcc597db7e82d2ceb43707
Also flagged by https://feeds.feedburner.com/TheHackersNews (Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry), https://www.aikido.dev/blog/rss.xml (Graphalgo campaign spreads to Terraform providers and Go Modules) +1 more.