Attackers Deliver Malware via Malicious Terraform Providers on HashiCorp Registry

Researchers have discovered threat actors distributing Go-based malware through malicious Go modules and Terraform providers hosted on the official HashiCorp Registry. This marks the first documented instance of the central repository being abused as a payload delivery vector. Administrators who have utilized these modules or providers should immediately audit their environments for compromise and purge the dependencies.