Linux wiper malware hidden in malicious Go modules on GitHub

The open source supply chain is obviously highly vulnerable to this sort of attack.

Less obvious is the motivation in this particular case. Why destroy someone's data with no real gain from it?

I'd suggest the original article makes for better reading. https://socket.dev/blog/wget-to-wipeout-malicious-go-modules...