thumbnail wget to Wipeout: Malicious Go Modules Fetch Destructive Payload