Coder has disclosed a critical supply-chain compromise after an unidentified threat actor gained access to its Cloudflare infrastructure and inserted unauthorized IP addresses into the pool serving the company’s module registry. The intrusion allowed a malicious registry server to distribute trojanized Coder artifacts to a subset of users, potentially exposing cloud, CI/CD, AI tooling, and […]
The post Hackers Compromise Coder Module Registry to Serve Malicious Packages and Steal Credentials appeared first on Cyber Security News.