A typosquatted Go package remained dormant for years before activating a DNS based backdoor that persists even after its GitHub…