Aikido

Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

Attackers exploited HashiCorp's official Terraform Registry and Go module ecosystem to distribute Go-based malware through malicious, seemingly legitimate providers and modules — a novel supply-chain attack vector.