Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

By The Hacker News1 min readPublished 23 September 2026

https://thehackernews.com/2026/09/attackers-use-malicious-terraform.html

External Source means this preview stays on Qubicweb while the full article lives on the publisher site.

Brief points

Key points will appear here after this read is condensed for Qubicweb. Use the source link below if you need the full article immediately.

Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time threat actors are using the centralized repository hosted by HashiCorp as a distribution vector for malicious payloads. According to Aikido, the list of Terraform providers and Go modules is below - gocommunity-io/dockerd (222 downloads) kreuzwenker/...

This is a preview.