Golang, Backend, and Ops Resources

last project offer i got (i audit the code first of course so i didn't run it) try to steal SSH keys, cloud credentials, browser data, and wallets the malware: .vscode/cancel triggered by eslint-check task server/middlware/*.js obfuscated code that did the malicious stuff and persist the malware to Linux ~/.config/autostart/unixkernalloader.desktop macOS ~/Library/LaunchAgents/com.AppleAccountSync.plist, plus an AppleAccountSync.app wrapper Windows A value named Microsoft Realtime Agreegator `under `HKCU\Software\Microsoft\Windows\CurrentVersion\Run upload the stolen creds to: 45[.]61[.]182[.]11:80 Remote-control connection, file/text exfiltration, payload downloads and updates 45[.]61[.]182[.]11:443 Additional helper-download endpoints 172[.]86[.]74[.]188:7276 Bulk file-upload server

The DuckDB Local UI – DuckDB https://duckdb.org/2025/03/12/duckdb-ui.html