You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
Some especially juicy global variables that a malicious package might redefine: - rand.Reader (replace it with a deterministic one) - http.DefaultClient (snoop all traffic) - time.UTC (mess with time perception) - io.EOF (set it to nil? Probably explodes a lot of things)https://twitter.com/lukechampine/status/1041799929172307974 …
btw, I'm pretty sure you can conditionally set these vars depending on whether you're running `go test` or not, such that the malicious versions only manifest in production
