Tag: Coder Registry Compromise

  • Coder Registry Compromise Pushes Malicious Modules

    Coder Registry Compromise Pushes Malicious Modules

    A Coder registry compromise allowed attackers to distribute malicious Terraform modules containing credential-stealing code to a subset of users. The attackers accessed Coder’s Cloudflare infrastructure and added unauthorised servers to the pool behind the company’s module registry. Coder has released patched versions and advised potentially affected users to rotate exposed secrets. Rogue servers delivered malicious…