GoSurf: Identifying Software Supply Chain Attack Vectors in Go. - Carmine Cesarano 002; Vivi Andersson; Roberto Natella; Martin Monperrus (SCORED@CCS, 2024)