Typosquatted Go Packages Deliver Malware Loader Targeting Linux and macOS (socket.dev)

There are something like 50 Github accounts spamming clones of packages with no git history, which still somehow show as forks of existing packages, and contain the same malicious loader. I reported a few, but this is a bit beyond me.