Malicious Go Package Pretends to Be SSH Brute-Force Tool, Actually Just Steals Your Logins

So, here is a wild one. Security folks recently found a Go module floating around that pretends to be an SSH brute-forcer, but instead of doing what you expect, it just swipes the credentials you find and ships them off to some attacker’s Telegram bo...