I tried to install longcat by running go install, but the checksums for this module do not match and the command fails.
$ go version
go version go1.18.1 linux/arm64
$ go install github.com/mattn/longcat@latest
go: downloading github.com/mattn/longcat v0.0.1
go: github.com/mattn/longcat@latest: github.com/mattn/longcat@v0.0.1: verifying module: checksum mismatch
downloaded: h1:84w8NgSpd55PlGh4337TcMUuwyKDgokPxqR42X9dgVA=
sum.golang.org: h1:ExyQ1ZAr/DxxZLD7QEyHqfP34P/bs5Jv7ue2C5IkDXk=
SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.
For more information, see 'go help module-auth'.
It appears that v0.0.2 is registered on https://pkg.go.dev/github.com/mattn/longcat?tab=versions as the latest version of v0, but only v0.0.1 is present in the tags for this repository.
Therefore, I suspect that there is a module version mismatch.
I tried to install longcat by running
go install
, but the checksums for this module do not match and the command fails.It appears that v0.0.2 is registered on https://pkg.go.dev/github.com/mattn/longcat?tab=versions as the latest version of v0, but only v0.0.1 is present in the tags for this repository. Therefore, I suspect that there is a module version mismatch.
ref: https://twitter.com/3socha/status/1525307253380722688