{
  "title": "shopsprint/decimal Go Module DNS Backdoor Typosquat",
  "summary": "The Go module github.com/shopsprint/decimal typosquatted github.com/shopspring/decimal and used an init-time DNS TXT command loop in v1.3.3.",
  "date": "2026-05-24",
  "severity": "high",
  "tags": [
    "supply-chain",
    "go",
    "typosquatting",
    "dns",
    "backdoor"
  ],
  "sources_count": 5,
  "indicators": {
    "slug": "shopsprint-decimal-go-typosquat",
    "since": "2023-08-19T09:27:21Z",
    "until": "unknown",
    "ecosystem": "",
    "cves": [],
    "cwes": [],
    "advisoryIds": [],
    "products": [],
    "packages": [],
    "versions": [],
    "affectedVersions": [],
    "fixedVersions": [],
    "files": [],
    "paths": [],
    "services": [],
    "domains": [
      "github.com",
      "go.mod",
      "go.sum",
      "decimal.go",
      "dnslog-cdn-images.freemyip.com",
      "freemyip.com"
    ],
    "urls": [],
    "ips": [],
    "hashes": [
      "f31bdd069fe7966ae11be1f78ee5dd44445938856dd1df12379e0e84a6851f5c"
    ],
    "processPatterns": [],
    "networkPatterns": [],
    "telemetrySelectors": []
  }
}