Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

Cybersecurity researchers have discovered a new method of malware distribution using the HashiCorp registry. Attackers are utilizing malicious Terraform providers and Go modules to deliver Go-based malware. This is the first known instance of threat actors exploiting the centralized repository in this way. The malware was distributed via two Go modules and two Terraform providers, including gocommunity-io/dockerd, which had 222 downloads. The affected Terraform providers and Go modules were listed by researchers.