Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time threat actors are using the centralized repository hosted by HashiCorp as a distribution vector for malicious payloads.

According to Aikido, the list of Terraform providers and Go modules is below -


gocommunity-io/dockerd (222 downloads)
kreuzwenker/



Source: TheHackerNews
Source Link: https://thehackernews.com/2026/09/attackers-use-malicious-terraform.html