Popular Go Decimal Library Targeted by Long-Running Typosquat with DNS Backdoor