Graphalgo Malware Hits Terraform and Go Packages in New Supply Chain Attack

Security researchers have found Graphalgo-linked malware in two Terraform providers and two Go modules. The campaign extends a threat previously seen in npm packages and uses hidden triggers to keep the malware inactive during ordinary use. Aikido Security says this is the first systematic malware distribution through Terraform providers it has... Weiterlesen