Supply-chain compromise affecting an organization (Technology)

Cybersecurity researchers disclosed Go-based malware distributed through two Go Modules and two Terraform providers hosted on HashiCorp's centralized registry. This marked the first known use of the HashiCorp registry as a malware distribution vector, with at least one provider receiving 222 downloads.

Sources

• No primary source yet. This entry stays anonymized until one exists.
• Upstream: Security news (RSS + Claude). The upstream record names the organization, so it is not linked here.
• Candidate incidents extracted from public security reporting; every entry links its article