Attackers compromised Coder's Cloudflare infrastructure and added unauthorized registry servers that delivered malicious Terraform modules containing credential-stealing code. [...]
Coder's registry infrastructure compromised to push malicious modules
Summary + source link. No paywalls, no tracking.