Abusing Go's infrastructure

The author noticed a curious result in Go's checksum database while exploring its contents. They found that repositories with no Go code, like those in Rust and Ruby, were appearing in the database. Further investigation led them to discover that arbitrary data can be pushed to the checksum database, potentially allowing for abuse such as bypassing download restrictions and even implementing command and control (C2) systems.