Popular Go Library fsnotify Raises Supply Chain Alarms After Maintainer Access Changes

A dispute over maintainer access and an inadvertent sponsorship change in the widely used Go library fsnotify prompted community concern about a potential supply-chain compromise; maintainers and downstream projects (including Kubernetes) flagged unexpected account removals, deleted posts, and rapid merges as worrying signals, though no confirmed malicious code or active exploitation was reported.