A fake Go module posing as golang.org/x/crypto captures terminal passwords, installs SSH persistence, and delivers the ...
The Rust implementation sudo-rs now shows asterisks by default when typing passwords. A break with long Unix tradition.