Skip to content
archivesupply chain · 03 Sep 2026 · 20:04 UTC

Coder's registry infrastructure compromised to push malicious modules

last 60 dispatches · spectrum

Attackers compromised Coder's Cloudflare infrastructure and added unauthorized registry servers that delivered malicious Terraform modules containing credential-stealing code.

grounded ✓primary source ↗
Early access

Get the next one first.

Early access opens the actor API and MCP server first, plus alerts when an adversary you follow lands on the wire. One email when it's ready. Nothing else, ever.

bot-protected