Coder Registry Compromise: Malicious Terraform Modules Explained

Coder confirmed that an unidentified attacker compromised infrastructure supporting its module registry and served modified Terraform modules designed to steal cloud credentials, SSH keys, CI/CD secrets, and other sensitive data. The malicious modules were delivered for roughly 14 hours on August 31, from 07:35 to 21:45 UTC. Coder says it has...