credential-stealing modules

Coder's Registry Infrastructure Compromised to Distribute Malicious Terraform Modules

Attackers compromised Coder's Cloudflare infrastructure and added unauthorized registry servers that delivered malicious Terraform modules containing credential-stealing code. The supply chain attack targeted infrastructure-as-code pipelines, potentially exposing credentials and enabling unauthorized access for users of Coder Registry.