Carmine Cesarano, Vivi Andersson, Roberto Natella, Martin Monperrus: GoSurf: Identifying Software Supply Chain Attack Vectors in Go. SCORED@CCS 2024: 33-42