GitLab flags typosquatted MongoDB Go driver, averting supply-chain breach
GitLab's automated scanning caught a malicious Go module that impersonated the official MongoDB driver via typosquatting, preventing downstream projects from pulling compromised code. The detection shows GitLab’s supply‑chain monitoring in action, highlighting the rising threat of deceptive package names for Go developers.