Coder's registry infrastructure compromised to push malicious modules

Attackers compromised Coder's Cloudflare infrastructure to insert unauthorized registry servers delivering malicious Terraform modules designed to steal developer credentials and access tokens. The incident impacted a subset of users during a defined window, prompting recommendations to rotate exposed secrets and audit logs for suspicious activity.

This Wire brief sits within Fusion42's coverage of Enterprise Software.