Coder's Registry Infrastructure Compromised to Distribute Malicious Modules

Attackers compromised Coder's Cloudflare infrastructure and injected unauthorized registry servers that distributed poisoned Terraform modules containing…

If your organization uses Terraform modules from Coder, immediately verify the integrity of registry and recently downloaded modules. Review credential and access logs on systems that executed Terraform code during the affected period. Consider auditing all external code registry dependencies in your software supply chain.