A security researcher says a backdoor masquerading as a legitimate Go programming language package used by thousands of ...