
Security
Coder's registry hijacked to serve booby-trapped Terraform modules
On 31 August, part of the traffic to Coder's registry was diverted to attacker-controlled servers handing out booby-trapped Terraform modules. Those modules went straight for the keys and tokens held by infrastructure teams.