[lordofgibbons]

Is the solution to this problem Golang style package management where you specify the git repo?

[gus_]

probably no:

https://github.com/evilsocket/opensnitch/discussions/1290

that malware campaign is still active.

[vasco]

Any string can be typosquatted unfortunately.

[Orygin]

Even worse, LLM hallucinations can be squatted to the same effect.